Content management based on spatial and temporal information

• US 10,491,602 B2
• Filed: 02/28/2017
• Issued: 11/26/2019
• Est. Priority Date: 02/28/2017
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Tamma, Leela S
• Primary Examiner(s): Murphy, J. Brant
• Application Number:
  US15/444,391
• Publication Number:
  US 20180248891A1
• Time in Patent Office: 1,001 Days
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences

Abstract

Variety of approaches to provide content management based on spatial and temporal information are described. A hosted service initiates operations to provide content management based on spatial and temporal information upon receiving a location of a client device and a user identifier. A schedule of the user is processed to identify a geo-fenced area assigned to the user during a designated time-period. Upon detecting the location of the client device as within the geo-fenced area during the designated time-period, a content is provided to the client device for rendering to the user in relation to a task assigned to the user within the schedule.

Claims

1. A method executed on a computing device to provide content management based on spatial and temporal information, the method comprising:

receiving a location of a client device and an identifier associated with a user of the client device;

processing a schedule of the user to identify a geo-fenced area assigned to the user during a designated time-period;

detecting the location of the client device within the geo-fenced area during the designated time-period;

providing a content to the client device; and

in response to verifying an access to the content by the user during the designated time period, disabling a protection scheme applied to the content that restricts the access to the content.

2. The method of claim 1, further comprising:

receiving a recording time coinciding with a determination of the location of the client device; and

identifying a task assigned to the user within the schedule, wherein the task spans a time-slot that encompasses the recording time and the time-slot is detected as within the designated time-period.

3. The method of claim 2, further comprising:

identifying the geo-fenced area as a property of the task; and

verifying the location of the client device as within the geo-fenced area during the time-slot.

4. The method of claim 2, wherein verifying the access to the content by the user during the designated time period includes

verifying the access to the content granted to the user during the time-slot of the task.

5. The method of claim 4, wherein the access to the content granted to the user is a property of the task.

6. The method of claim 4, wherein the access to the content granted to the user includes one or more of a read access, a write access, and a copy access.

7. The method of claim 4, further comprising:

detecting an expiration of the time-slot of the task;

verifying the access to the content granted to the user as restricted based on the time-slot of the task; and

instructing the client device to remove the access to the content granted to the user.

8. The method of claim 4, further comprising:

receiving an updated location of the client device;

detecting the updated location of the client device as outside the geo-fenced area;

verifying the access to the content granted to the user as restricted to the geo-fenced area; and

instructing the client device to remove the access to the content granted to the user.

9. The method of claim 2, further comprising:

receiving a biometric identifier of the user as the identifier associated with the user;

retrieving a biometric information of the user from a profile of the user hosted by a personnel data source; and

verifying the biometric identifier as matching the biometric information of the user.

10. The method of claim 9, further comprising:

identifying an access to the content that is restricted based on a verification of the biometric identifier of the user; and

granting the user the access to the content.

11. The method of claim 9, further comprising:

detecting a temporary absence of the location of the client device within the geo-fenced area during the time-slot of the task; and

transmitting a first instruction to the client device to revoke an access granted to the user.

12. The method of claim 11, further comprising:

re-detecting the location of the client device within the geo-fenced area during the time-slot of the task;

transmitting a second instruction to the client device to prompt the user to rescan the biometric identifier;

receiving a re-scanned biometric identifier of the user;

matching the re-scanned biometric identifier of the user to the biometric information of the user; and

re-granting the user the access to the content.

13. A server configured to provide content access management based on spatial and temporal information, the server comprising:

a memory configured to store instructions; and

a processor coupled to the memory, the processor executing a hosted service in conjunction with the instructions stored in the memory, wherein the processor is configured to;

receive a location of a client device and a biometric identifier associated with a user of the client device;

process a schedule of the user to identify a task assigned to the user with a geo-fenced area and a time-slot as a property of the task;

detect the location of the client device within the geo-fenced area during the time-slot associated with the task;

retrieve a biometric information of the user from a profile of the user hosted by a personnel data source;

verify the biometric identifier as matching the biometric information of the user;

provide the content to the client device; and

in response to verifying an access to the content by the user during the designated time period, disable a protection scheme applied to the content that restricts the access to the content.

14. The server of claim 13, wherein the processor is further configured to:

detect an access to the content restricted based on a first type of work;

identify a second type of work as other property of the task;

match the first type of work to the second type of work; and

grant the user the access to the content.

15. The server of claim 13, wherein the processor is further configured to:

encrypt the content to be provided to the client device; and

transmit the encrypted content to the client device with an instruction to store in a local cache of the client device.

16. The server of claim 15, wherein the processor is configured to provide the content to the client device by

transmitting a decryption instruction to the client device to prompt the client device to decrypt the content and render the content to the user.

17. The server of claim 13, wherein the processor is further configured to:

receive an update to the task from a manager of the user, wherein the update revokes an access to the content granted to the user;

revoke the access to the content granted to the user; and

instruct the client device to remove the content.

18. The server of claim 13, wherein the processor is further configured to:

receive an instruction from a stakeholder to assign other user an access to the content during other task;

receive other location of other client device and other biometric identifier associated with the other user of the other client device;

process the other task to identify other geo-fence area as a property of the other task;

verify the other location of the other client device as within the other geo-fenced area;

verify other biometric identifier as matching other biometric information of the other user retrieved from other profile of the other user hosted by the personnel data source; and

provide the content to the other user.

19. A method executed on a computing device to provide content management based on spatial and temporal information, the method comprising:

receiving a location of a client device and a biometric identifier associated with a user of the client device;

processing a schedule of the user to identify a task assigned to the user with a geo-fenced area and a time-slot as a property of the task;

detecting the location of the client device within the geo-fenced area during the time-slot associated with the task;

retrieving a biometric information of the user from a profile of the user hosted by a personnel data source;

verifying the biometric identifier as matching the biometric information of the user;

providing the content to the client device; and

in response to verifying an access to the content by the user during the designated time period, disabling a protection scheme applied to the content that restricts the access to the content.

20. The method of claim 19, further comprising:

receiving an instruction from a manager of the user to re-assign the task to other user;

verifying other location of other client device associated with other user as within the other geo-fenced area;

verifying other biometric identifier of the other user received from the other client device as matching other biometric information of the other user retrieved from other profile of the other user hosted by the personnel data source; and

providing the content to the other user.