Methods and systems for data authorization and mobile devices using the same

• US 20060090202A1
• Filed: 12/28/2004
• Published: 04/27/2006
• Est. Priority Date: 10/27/2004
• Status: Abandoned Application

• Current Assignee: Institute For Information Industry
• Original Assignee: Institute For Information Industry
• Inventors: Tsai, Tse-Ming, Yang, Ren-Dar, Liu, Jiann-Tsuen, Hsiao, Shu-Ling
• Application Number:
  US11/024,350
• Publication Number:
  US 20060090202A1
• Time in Patent Office: Days
• US Class Current: 726/17
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

Methods for data authorization. A shared packet comprising data and corresponding data rules is received. A rule process is implemented according to the data rules and default data rules. An authority inference process is implemented on the data according to the rule processing result and context information. An access control list is generated and authorized operations corresponding to authorization definitions of the access control list are executed.

Claims

1. A method for data authorization, comprising:

receiving a shared packet comprising data and corresponding data rules;

implementing a rule process according to the data rules and default data rules;

implementing an authority inference process on the data according to the rule processing result and context information; and

generating an access control list and executing authorized operations corresponding to authorization definitions of the access control list.

2. The method as claimed in claim 1, wherein the data and corresponding data rules are packaged as the shared packet using a session key.

3. The method as claimed in claim 2, wherein shared packet receipt further comprises translating the shared packet to the data and corresponding data rules using the session key.

4. The method as claimed in claim 1, wherein the data rules are user-defined and the data is assigned different access authorities.

5. The method as claimed in claim 1, wherein data rule implementation further comprises determining conflict or redundancy between the data and default rules and implementing rule combination or a conflict process according to the result.

6. The method as claimed in claim 1, wherein the context information is updated at time intervals.

7. The system as claimed in claim 1, wherein the shared packet is received using a peer-to-peer wireless communication protocol.

11. The mobile device as claimed in claim 1, wherein the data rules are user-defined and the data is assigned different access authorities.

12. The mobile device as claimed in claim 1, wherein the data processing module determines conflict or redundancy between the data and default rules and implements rule combination or a conflict process according to the result.

13. The mobile device as claimed in claim 1, wherein the context monitor module updates the context information at time intervals.

14. The mobile device as claimed in claim 1, wherein the data processing module receives the shared packet using a peer-to-peer wireless communication protocol.

8. A mobile device provided with default data rules, comprising:

a data processing module, translating a received shared packet to data and corresponding data rules;

a rule processing module, implementing a rule process according to the data rules and the default data rules;

a context monitor module, obtaining context information; and

an authority processing module, implementing an authority inference process on the data according to the rule processing result and context information, generating an access control list, and executing authorized operations corresponding to authorization definitions of the access control list.

9. The mobile device as claimed in claim 8, wherein the data and corresponding data rules are packaged as the shared packet using a session key.

10. The mobile device as claimed in claim 9, wherein the data processing module translates the shared packet to the data and corresponding data rules using the session key.

15. A system for data authorization, comprising:

a first mobile device provided with data and corresponding data rules, packaged as a shared packet using a session key; and

a second mobile device provided with global data rules, which, when detecting the first mobile device, receives the shared packet from the first mobile device using a peer-to-peer wireless communication protocol, translating the shared packet to the data and corresponding data rules, implementing a rule process according to the data rules and global data rules, implementing an authority inference process on the data according to the rule processing result and context information, generating an access control list, and executing authorized operations corresponding to authorization definitions of the access control list.

16. The system as claimed in claim 15, wherein the data rules are user-defined and the data is assigned different access authorities.

17. The system as claimed in claim 15, wherein the context monitor module updates the context information at time intervals.