System and method for data and request filtering

• US 20040187029A1
• Filed: 03/21/2003
• Published: 09/23/2004
• Est. Priority Date: 03/21/2003
• Status: Abandoned Application

• Current Assignee: Imprivata Incorporated
• Original Assignee: Imprivata Incorporated
• Inventors: Ting, David M. T.
• Application Number:
  US10/395,049
• Publication Number:
  US 20040187029A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

Data and data requests of users of applications are filtered using a client-resident agent. An alias for an individual is associated with a user profile for the individual user. A user profile may contain data pertaining to restrictions on content the user is permitted to view or types of requests the user is permitted to make within one or more applications. Data in the user profile may be used to grant or deny access to applications, filter particular content from the user'"'"'s view, or filter particular data requests made by the user.

Claims

1. A method of controlling access to data provided to a client computer operated by a user, the method comprising the steps of:

a. identifying the user;

b. supplying, to the client computer, data-restriction information based on the user'"'"'s identity; and

c. on the client computer, limiting user access to external-data in accordance with the data-restriction information.

2. The method of claim 1 wherein the data-restriction information is stored on a server in communication with the client computer over a network.

3. The method of claim 1 wherein the data-restriction information specifies web pages the user is permitted to request.

4. The method of claim 1 wherein the data-restriction information specifies web pages the user is prohibited from requesting.

5. The method of claim 1 wherein the data-restriction information limits application screens the user is permitted to view.

6. The method of claim 1 wherein the data-restriction information limits data on a screen a user is permitted to view.

7. The method of claim 2 further comprising the step of authenticating the user by:

a. storing, on the server, a user profile comprising the data-restriction information and a reference set of biometric data identifying the user;

b. receiving, at the client computer, biometric data from the user;

c. transmitting the received biometric data from the client computer to the server over the network; and

d. if the received biometric data sufficiently matches the reference biometric data, confirming the identity of the user and transmitting the data-restriction information to the client computer.

8. The method of claim 1 wherein external data is monitored as it is received by the client computer, and access is limited in accordance with the data-restriction information.

9. The method of claim 1 wherein user requests for external data are monitored on the client computer and access is limited by restricting the user requests in accordance with the data-restriction information.

10. A system for controlling access by a user operating a client computer to data provided to the client, the system comprising:

a. an identification server connected to a computer network for storing data-restriction information in connection with a plurality of server-based applications;

b. a server module for transmitting the data-restriction information from the identification server; and

c. an active agent residing on the client computer for limiting the user'"'"'s access to external data in accordance with the data-restriction information.

11. The system of claim 10 wherein the data-restriction information specifies web pages the user is permitted to request.

12. The system of claim 10 wherein the data-restriction information specifies web pages the user is prohibited from requesting.

13. The system of claim 10 wherein the data-restriction information limits application screens the user is permitted to view.

14. The system of claim 10 wherein the data-restriction information limits data on a screen a user is permitted to view.

15. The system of claim 10 further comprising;

a. a biometric input device for receiving, at the client computer, biometric data from the user;

b. a communications module for transmitting the received biometric data from the client computer to the identification server over the computer network.

c. an authentication server for comparing the received biometric data to reference biometric data.

16. The system of claim 10 wherein the active agent monitors external data as the external data is received by the client computer, and limits access to the data in accordance with the data-restriction information.

17. The system of claim 10 wherein the active agent monitors user requests for external data on the client computer and limits access by restricting the user requests in accordance with the data-restriction information.

18. A system, operable on a user'"'"'s client computer connected to a computer network, for controlling access to content provided to the user, the system comprising:

a. means for identifying the user;

b. means for receiving content-restriction information based on the user'"'"'s identity; and

c. means for operating the client computer to limit the user'"'"'s access to external data in accordance with the content-restriction information.

19. The system of claim 18 wherein the client computer includes an operating system and a plurality of application programs executing as running processes, the limiting means being logically distinct from the operating system and the application programs, and enforcing content restrictions across all applications.