Apparatus and method for providing a user interface based on access rights information

• US 20030046548A1
• Filed: 09/05/2001
• Published: 03/06/2003
• Est. Priority Date: 09/05/2001
• Status: Active Grant

• Current Assignee: King.com, Ltd (Microsoft Corporation)
• Original Assignee: International Business Machines Corporation
• Inventors: Jones, Scott Thomas, Hamzy, Mark Joseph, Brown, Michael Wayne
• Granted Patent: US 7,171,562 B2
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices

Abstract

An apparatus and method for providing access rights information on computer accessible content are provided. The apparatus and method provide a mechanism through which access rights information is provided in association with information and content such that use of the information and content is controlled based on the access rights information. The apparatus and method include access rights information tags being associated with information and content to control access to the content. In alternative embodiments, the access rights information is implemented as metadata files rather than as tags. These metadata files are associated with content files and are processed when the access to the content is requested. In addition, when HTML content, which has associated ARI tags, is downloaded, the ARI tags may be stored as HTML code in a metadata file. The filesystem may then use a web browser or the like to parse and interpret the HTML code when access to the content file is desired.

Claims

1. A method of controlling access to content, comprising:

receiving (1) a request to perform a function on the content and (2) metadata having access rights information associated with the content;

processing access rights information in metadata of the content to determine allowable access to the content; and

controlling access to the content based on the allowable access determined from the access rights information in the metadata.

2. The method of claim 1, wherein the metadata is an extended attribute of the content stored separately from the content.

3. The method of claim 1, wherein the request to perform a function on the content is received in a filesystem of a computing device from an application.

4. The method of claim 3, further comprising obtaining a user access level for a user of the computing device.

5. The method of claim 4, wherein the user access level is obtained from one of a locally or remotely located source.

6. The method of claim 4, wherein processing the access rights information in the metadata to determine allowable access to the content includes determining the allowable access based on a combination of the access rights information and the user access level.

7. The method of claim 4, further comprising obtaining a user login identification, wherein obtaining the user access level includes retrieving a user profile based on the user login identification.

8. The method of claim 3, wherein processing the access rights information in the metadata includes parsing the access rights information to identify a manner by which the content is to be presented to a user of the computing device.

9. The method of claim 1, wherein the content is one of a document and an image.

10. The method of claim 1, wherein the access rights information includes information pertaining to one or more of a cost of accessing the content, an entity to which a fee for accessing the content is to be paid, a location where user access level information may be obtained, printing of the content, copying of the content, saving the content, degrading a quality of the content, and a portion of the content that may be altered according to the access rights information, and how the portion of the content may be altered based on a access level of a user.

11. The method of claim 1, wherein the access rights information includes default access rights and access rights for one or more user access levels.

12. The method of claim 1, wherein the access rights information is secured from tampering by the use of at least one of encryption, digital certificates, checksums, digital signatures, and tamper detection algorithms.

13. A computer program product in a computer readable medium for controlling access to content, comprising:

first instructions for receiving (1) a request to perform a function on the content and (2) metadata having access rights information associated with the content;

second instructions for processing access rights information in metadata of the content to determine allowable access to the content; and

third instructions for controlling access to the content based on the allowable access determined from the access rights information in the metadata.

14. The computer program product of claim 13, wherein the metadata is an extended attribute of the content stored separately from the content.

15. The computer program product of claim 13, wherein the request to perform a function on the content is received in a filesystem of a computing device from an application.

16. The computer program product of claim 15, further comprising fourth instructions for obtaining a user access level for a user of the computing device.

17. The computer program product of claim 16, wherein the user access level is obtained from one of a locally or remotely located source.

18. The computer program product of claim 16, wherein the second instructions for processing the access rights information in the metadata to determine allowable access to the content include instructions for determining the allowable access based on a combination of the access rights information and the user access level.

19. The computer program product of claim 16, further comprising fifth instructions for obtaining a user login identification, wherein the fourth instructions for obtaining the user access level include instructions for retrieving a user profile based on the user login identification.

20. The computer program product of claim 15, wherein the second instructions for processing the access rights information in the metadata include instructions for parsing the access rights information to identify a manner by which the content is to be presented to a user of the computing device.

21. The computer program product of claim 13, wherein the content is one of a document and an image.

22. The computer program product of claim 13, wherein the access rights information includes information pertaining to one or more of a cost of accessing the content, an entity to which a fee for accessing the content is to be paid, a location where user access level information may be obtained, printing of the content, copying of the content, saving the content, degrading a quality of the content, and a portion of the content that may be altered according to the access rights information, and how the portion of the content may be altered based on a access level of a user.

23. The computer program product of claim 13, wherein the access rights information includes default access rights and access rights for one or more user access levels.

24. The computer program product of claim 13, wherein the access rights information is secured from tampering by the use of at least one of encryption, digital certificates, checksums, digital signatures, and tamper detection algorithms.

25. An apparatus for controlling access to content, comprising:

means for receiving (1) a request to perform a function on the content and (2) metadata having access rights information associated with the content;

means for processing access rights information in metadata of the content to determine allowable access to the content; and

means for controlling access to the content based on the allowable access determined from the access rights information in the metadata.

26. The apparatus of claim 25, wherein the metadata is an extended attribute of the content stored separately from the content.

27. The apparatus of claim 25, wherein the request to perform a function on the content is received in a filesystem of a computing device from an application.

28. The apparatus of claim 27, further comprising means for obtaining a user access level for a user of the computing device.

29. The apparatus of claim 28, wherein the user access level is obtained from one of a locally or remotely located source.

30. The apparatus of claim 28, wherein the means for processing the access rights information in the metadata to determine allowable access to the content includes means for determining the allowable access based on a combination of the access rights information and the user access level.

31. The apparatus of claim 28, further comprising means for obtaining a user login identification, wherein the means for obtaining the user access level includes means for retrieving a user profile based on the user login identification.

32. The apparatus of claim 27, wherein the means for processing the access rights information in the metadata includes means for parsing the access rights information to identify a manner by which the content is to be presented to a user of the computing device.

33. The apparatus of claim 25, wherein the content is one of a document and an image.

34. The apparatus of claim 25, wherein the access rights information includes information pertaining to one or more of a cost of accessing the content, an entity to which a fee for accessing the content is to be paid, a location where user access level information may be obtained, printing of the content, copying of the content, saving the content, degrading a quality of the content, and a portion of the content that may be altered according to the access rights information, and how the portion of the content may be altered based on a access level of a user.

35. The apparatus of claim 25, wherein the access rights information includes default access rights and access rights for one or more user access levels.

36. The apparatus of claim 25, wherein the access rights information is secured from tampering by the use of at least one of encryption, digital certificates, checksums, digital signatures, and tamper detection algorithms.