Asymmetric permissions in a communications system

• US 10,523,601 B2
• Filed: 02/29/2016
• Issued: 12/31/2019
• Est. Priority Date: 02/27/2015
• Status: Active Grant

• Current Assignee: Novastone Media Ltd.
• Original Assignee: Novastone Media Ltd.
• Inventors: Reading, Peter, Orr, Douglas
• Primary Examiner(s): Shayanfar, Ali
• Application Number:
  US15/553,791
• Publication Number:
  US 20180041452A1
• Time in Patent Office: 1,401 Days
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 51/216 Handling conversation history, e.g. grouping of messages in sessions or threads
• CPC Class Codes: H04L 51/48 Message addressing, e.g. address format or anonymous messages, aliases
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A communication system comprising a server and a plurality of clients constrained so that in order to communicate with each other by means of the system they must communicate via the server, the server having access to a set of stored communication rules defining permitted and/or non-permitted communications between the clients and the server being configured to, on receiving a message from a first client designating as recipients a second client and a third client, the first client matching a first set of characteristics stored in the communication rules and the second client and the third client being clients who are not permitted to directly communicate according to the communication rules, alter the communication rules to permit the second and third clients to directly communicate.

Claims

1. A communication system comprising:

a server and a plurality of clients constrained so that in order to communicate with each other by means of the system they must communicate via the server, the server having access to a set of stored communication rules defining permitted and/or non-permitted communications between the clients and the server being configured to, on receiving a message from a first client designating as recipients a second client and a third client, the first client matching a first set of characteristics stored in the communication rules and the second client and the third client being clients who are not permitted to directly communicate according to the communication rules, alter the communication rules to permit the second and third clients to directly communicate;

wherein the first set of characteristics indicates that the first client has an administration right in respect of the third client and that the communication rules currently permit communications between the first client and both the second and third clients.

2. The communication system as claimed in claim 1, wherein the communication rules have a default state and the first set of characteristics indicates that the default state permits communications between the first client and both the second and third clients.

3. The communication system as claimed in claim 1, wherein the server is configured so as not to alter the communication rules to grant additional permissions in response to any activity of the third client.

4. The communication system as claimed in claim 1, wherein the server is configured to associate with each message a thread identifier which identifies a thread to which the message belongs, and the server is configured to:

on receiving the message from the first client designating as recipients the second client and the third client, alter the communication rules to permit the second and third clients to directly communicate only in respect of the thread to which the said message belongs.

5. The communication system as claimed in claim 1, wherein the server is configured to, in response to an instruction received from the first client, revoke permission of the second and third clients to directly communicate.

6. The communication system as claimed in claim 1, wherein the server is configured to, in response to a predetermined time elapsing since the last direct communication between the second and third clients, alter the communication rules to revoke permission of the second and third clients to directly communicate.

7. The communication system as claimed in claim 1, wherein the system is configured to, after permission of the second client to directly communicate with the third client has been revoked, prevent the second client from viewing previous communications with the third client.

8. The communication system as claimed in claim 1, wherein the server is configured so that in order for message communications of the system to take place between the server and a client the client must be authenticated to the server.

9. The communication system as claimed in claim 1, wherein the server is configured to permit messages to pass between the clients only in accordance with the stored communication rules as they exist from time to time.

10. A method for operating a communication system comprising a server and a plurality of clients constrained so that in order to communicate with each other by means of the system they must communicate via the server, the server having access to a set of stored communication rules defining permitted and/or non-permitted communications between the clients and the method comprising:

at the server, receiving a message from a first client designating as recipients a second client and a third client, the first client matching a first set of characteristics stored in the communication rules and the second client and the third client being clients who are not permitted to directly communicate according to the communication rules, and

in response to that message altering the communication rules to permit the second and third clients to directly communicate;

wherein the first set of characteristics indicates that the first client has an administration right in respect of the third client and that the communication rules currently permit communications between the first client and both the second and third clients.

11. The method of claim 10, wherein the communication rules have a default state and the first set of characteristics indicates that the default state permits communications between the first client and both the second and third clients.

12. The method of claim 10, further comprising:

associating with each message a thread identifier which identifies a thread to which the message belongs, and

on receiving the message from the first client designating as recipients the second client and the third client, altering the communication rules to permit the second and third clients to directly communicate only in respect of the thread to which the said message belongs.

13. The method of claim 10, further comprising:

revoking permission of the second and third clients to directly communicate in response to an instruction received from the first client.

14. The method of claim 10, further comprising:

altering the communication rules to revoke permission of the second and third clients to directly communicate in response to a predetermined time elapsing since the last direct communication between the second and third clients.

15. The method of claim 10, further comprising:

preventing the second client from viewing previous communications with the third client after permission of the second client to directly communicate with the third client has been revoked.

16. The method of claim 10, further comprising:

authenticating a client to the server before allowing message communications of the system to take place between the server and the client.

17. The method of claim 10, further comprising:

permitting messages to pass between the clients only in accordance with the stored communication rules as they exist from time to time.