System for accessing digital assets

• US 20050028008A1
• Filed: 07/29/2004
• Published: 02/03/2005
• Est. Priority Date: 07/29/2003
• Status: Abandoned Application

• Current Assignee: Anil N. Kumar
• Original Assignee: Anil N. Kumar
• Inventors: Kumar, Anil N.
• Application Number:
  US10/902,622
• Publication Number:
  US 20050028008A1
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries

Abstract

A system for accessing digital assets. The system includes an access control mechanism that permits specification of one of a number of kinds of access by a particular user to a particular asset. The access control mechanism permits determination of what assets a given user may access quickly enough so that the determination may be made every time a user performs an operation on an asset. The user interface for the system is thus able to show a given user only those assets to which the user currently has access. The assets have owners and the assets belonging to an owner are organized into a hierarchy belonging to the owner. The owner of an asset may give other users access to individual assets. Such assets are termed shared assets. Once a user has logged onto the system, the user can access his own assets and those that have been shared with him without further credentials. When a user has access to a shared asset, the user interface for the system shows only that portion of the owner'"'"'s hierarchy which is necessary for the user to reach the shared asset. The user interface further indicates whether a user has seen an asset since the user was given access to it.

Claims

1. A system whereby users may access digital assets,

the system comprising:

an access relationship representation of access relationships between the assets and the users, an access relationship indicating one of a plurality of kinds of access by a particular user to a particular asset;

an access checker that employs the access relationship representation to produce a determination of what assets a given user may access; and

an interactive user interface that includes an asset access interface that employs the access checker whenever the asset access interface is used by the given user of the system to make the determination and uses the determination to indicate to the given user only those particular assets which the given user may currently access.

2. The system set forth in claim 1 wherein:

the access relationship for a particular user and a particular asset indicates whether the particular user has accessed the particular asset since the access relationship was established; and

the asset access interface indicates assets which the given user has not accessed since the access relationship was established differently from other assets that the user may currently access.

3. The system set forth in claim 1 wherein:

the assets are organized into a hierarchy; and

the asset access interface indicates a path through the hierarchy for any asset to which the given user currently has access.

4. The system set forth in claim 3 wherein:

there is a plurality of the hierarchies; and

a given hierarchy of the plurality belongs to a given user of the system.

5. The system set forth in claim 3 wherein:

the system includes storage controlled by users;

assets stored in storage controlled by a user are organized into a hierarchy belonging to the user; and

any user of the system who has the proper access to a user'"'"'s hierarchy may add an asset to the user'"'"'s storage.

6. The system set forth in claim 1 wherein:

the assets are organized into a hierarchy; and

the kind of access which a particular user has to a particular asset may be inherited from an asset that is above the particular asset in the hierarchy and to which the particular user has access.

7. The system set forth in claim 1 wherein:

the user interface notifies the given user when there is a change in the assets to which the given user currently has access.

8. The system set forth in claim 1 wherein:

the given user identifies himself to the system by presenting credentials to the system; and

when the system has accepted the credentials, the given user may access any of the particular assets without further credentials.

9. The system set forth in claim 1 wherein:

the interactive user interface provides outputs to and receives inputs from a Web browser.

10. The system set forth in claim 1 wherein:

the assets include files which users have made available to the system.

11. The system set forth in claim 1 wherein:

the assets include information about themselves which users have made available to the system.

12. The system set forth in claim 1 wherein:

the kinds of access relationships include an access granting relationship which permits a particular user having the access granting relationship to a particular asset to give access to the particular asset to another user, the other user being determined by the particular user giving access and the system further comprises;

an access granting interface in the interactive user interface by which a given user having the access granting relationship to a given asset can establish an access relationship in the access relationship representation which gives another user access to the given asset.

13. The system set forth in claim 12 wherein:

any given user who has an access granting relationship to a given asset may use the access granting interface to establish an access granting relationship in the access relationship representation for the other user and the given asset.

14. The system set forth in claim 13 wherein:

the assets are organized into a plurality of hierarchies;

a given hierarchy of the plurality belongs to a given user of the system; and

the system establishes an access granting relationship in the access relationship representation between the given user and the assets in the given hierarchy.

15. The system set forth in claim 12 wherein:

the assets include objects which identify sets of users;

the system automatically provides a user of the system with an object that identifies a set of users whom the user has invited to access a particular asset; and

when the user has an access granting relationship with the asset, the user may use the access granting interface to establish a particular access relationship for all of the users in the set identified by the object to the given asset.

16. The system set forth in claim 12 wherein:

any given user who has an access granting relationship may use the access granting interface to remove access relationships from the access relationship representation.

17. The system set forth in claim 12 wherein:

the assets include an object which identifies a set of other users; and

any given user who has an access granting relationship may use the access granting interface to establish a particular access relationship for all of the users in the set identified by the object to the given asset.

18. A data storage device, the data storage device being characterized in that:

the data storage device contains code which, when executed in a computer system, implements the system set forth in claim 1.

19. A graphical user interface for a system whereby users may access digital assets, the system including

an access relationship representation of access relationships between the assets and the users, an access relationship indicating one of a plurality of kinds of access by a particular user to a particular asset and

an access checker that employs the access relationship representation to produce a determination of what assets a given user may access and the graphical user interface comprising:

asset indications presented to the given user, the asset indications representing only those particular assets which the determination produced by the access checker indicates that the given user may currently access; and

an input device whereby the given user may specify operations concerning assets, the system responding when the given user specifies an operation by using the access checker to produce the determination.

20. The graphical user interface set forth in claim 19 wherein:

the system is accessible via a standard network protocol; and

the graphical user interface is implemented using a browser for the standard network protocol.