Trust based relationships

• US 20060136999A1
• Filed: 12/16/2004
• Published: 06/22/2006
• Est. Priority Date: 12/16/2004
• Status: Abandoned Application

• Current Assignee: SAP AG (SAP SE)
• Original Assignee: SAP AG (SAP SE)
• Inventors: Kreyscher, Martin, Thommes, Christoph A.
• Application Number:
  US11/016,605
• Publication Number:
  US 20060136999A1
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

Methods and apparatus, including computer program products, for automatically assigning permissions in a portal system. One or more trusted attribute values associated with a first user of a portal are detected. The detected trusted attribute values associated with the first user are then compared with one or more trusted attribute values associated with a second user of the portal in accordance with a trusted attributes configuration to determine a trust based relationship status. One or more permissions associated with the first user are then assigned, based on the determined trust based relationship status. The portal can be an external facing portal that permits one or more users of an organization to collaborate with one or more users from outside of the organization. Access to information available in the portal and the ability to see other portal users is based on one or more of the permissions assigned to a user.

Claims

1. A software product tangibly embodied in a machine-readable medium, the software product comprising instructions operable to cause one or more data processing apparatus to perform operations comprising:

detecting one or more trusted attribute values associated with a first user of a portal;

determining a trust based relationship status by comparing the detected one or more trusted attribute values associated with the first user with one or more trusted attribute values associated with a second user of the portal in accordance with a trusted attributes configuration; and

assigning one or more permissions to the first user based on the determined trust based relationship status.

2. The software product of claim 1, wherein the portal comprises an external facing portal.

3. The software product of claim 1, wherein the instructions are further operable to cause the one or more data processing apparatus to perform operations comprising:

assigning one or more permissions to the second user based on the determined trust based relationship status.

4. The software product of claim 1, wherein the instructions are further operable to cause the one or more data processing apparatus to perform operations comprising:

controlling the ability of the first user to access information made available in the portal based on the one or more permissions assigned to the first user.

5. The software product of claim 1, wherein the instructions are further operable to cause the one or more data processing apparatus to perform operations comprising:

controlling the ability of the first user to see the second user based on the one or more permissions assigned to the first user.

6. The software product of claim 1, wherein the instructions are further operable to cause the one or more data processing apparatus to perform operations comprising:

comparing one or more trusted attribute values associated with the first user with one or more trusted attribute values associated with a plurality of users of the portal; and

determining the trust based relationship status between the first user and each of the plurality of users.

7. The software product of claim 6, wherein the instructions are further operable to cause the one or more data processing apparatus to perform operations comprising:

assigning one or more permissions to the first user based on each determined trust based relationship status.

8. The software product of claim 1, wherein the instructions are further operable to cause the one or more data processing apparatus to perform operations comprising:

identifying a plurality of users of the portal who share a common trusted attribute value; and

creating a virtual group comprised of the plurality of users.

9. The software product of claim 8, wherein a user can belong to a plurality of virtual groups.

10. A computer-implemented method comprising:

detecting one or more trusted attribute values associated with a first user of a portal;

determining a trust based relationship status by comparing the detected one or more trusted attribute values associated with the first user with one or more trusted attribute values associated with a second user of the portal in accordance with a trusted attributes configuration; and

assigning one or more permissions associated with the first user based on the determined trust based relationship status.

11. The computer-implemented method of claim 10, further comprising:

controlling the ability of the first user to access information made available in the portal based on the one or more permissions assigned to the first user.

12. The computer-implemented method of claim 10, further comprising:

controlling the ability of the first user to see the second user based on the one or more permissions assigned to the first user.

13. The computer-implemented method of claim 10, further comprising:

comparing one or more trusted attribute values associated with the first user with one or more trusted attribute values associated with a plurality of users of the portal; and

determining the trust based relationship status between the first user and each of the plurality of users.

14. The computer-implemented method of claim 13, further comprising:

assigning one or more permissions to the first user based on each determined trust based relationship status.

15. The computer-implemented method of claim 10, further comprising:

identifying a plurality of users of the portal who share a common trusted attribute value; and

creating a virtual group comprised of the plurality of users.

16. A system for controlling access in a portal, the system comprising:

one or more communication paths to permit a plurality of users to connect to a portal; and

a software product tangibly embodied in a machine-readable medium, the software product comprising instructions operable to cause one or more data processing apparatus to perform operations comprising;

detecting one or more trusted attribute values associated with a first user of the portal;

determining a trust based relationship status by comparing the detected one or more trusted attribute values associated with the first user with one or more trusted attribute values associated with a second user of the portal in accordance with a trusted attributes configuration; and

assigning one or more permissions to the first user based on the determined trust based relationship status.

17. The system in accordance with claim 16, wherein the software product further comprises instructions operable to cause the one or more data processing apparatus to perform operations comprising:

controlling the ability of the first user to access information made available in the portal based on the one or more permissions assigned to the first user.

18. The system in accordance with claim 16, wherein the software product further comprises instructions operable to cause the one or more data processing apparatus to perform operations comprising:

controlling the ability of the first user to see the second user based on the one or more permissions assigned to the first user.

19. The system in accordance with claim 16, wherein the software product further comprises instructions operable to cause the one or more data processing apparatus to perform operations comprising:

comparing one or more trusted attribute values associated with the first user with one or more trusted attribute values associated with a plurality of users of the portal; and

determining the trust based relationship status between the first user and each of the plurality of users.

20. The system in accordance with claim 19, wherein the software product further comprises instructions operable to cause the one or more data processing apparatus to perform operations comprising:

assigning one or more permissions to the first user based on each determined trust based relationship status.