Web-Hosted Self-Managed Virtual Systems With Complex Rule-Based Content Access

• US 20110225623A1
• Filed: 03/12/2010
• Published: 09/15/2011
• Est. Priority Date: 03/12/2010
• Status: Abandoned Application

• Current Assignee: Michael W. Wright
• Original Assignee: Michael W. Wright
• Inventors: Wright, Michael W.
• Application Number:
  US12/723,598
• Publication Number:
  US 20110225623A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A computer-based service provides methods and apparatus for a user to manage a collection of information that the user wishes to share with, or distribute to, one or more designated recipients, typically at a future time, where the user controls the contents of the collection, and the times and rules under which the collection, or portions of the collection, may be accessed by, or delivered to, the one or more designated recipients; and where the resources for storing, retrieving, processing and communicating the collection of information is logically centralized and remote from the user.

Claims

1. A method, comprising:

providing, from a service provider system, a user interface;

receiving, at the service provider system, one or more vault identifiers from a first source;

receiving, at the service provider system, one or more lock-box identifiers from the first source;

associating, at the service provider system, each of the one or more lock-box identifiers with a first one of the one or more vault identifiers;

receiving, at the service provider system, a plurality of content items from the first source;

receiving, at the service provider system, a vault designation for each of the plurality of content items;

receiving, at the service provider system, a lock-box designation for one or more of the plurality of content items; and

receiving, at the service provider system, access control instructions from the first source;

wherein the access control instructions determine the information required to be received by the service provider system prior to granting access one or more content items by a designated recipient.

2. The method of claim 1, further comprising receiving, at the service provider system, content modification instructions from the first source.

3. The method of claim 2, further comprising modifying, at the service provider system, at least one content item in accordance with the content modification instructions from the first source.

4. The method of claim 1, further comprising generating, at the service provider system, an inventory list for at least one vault.

5. The method of claim 1, further comprising generating, at the service provider system, an inventory list for at least one lock-box.

6. The method of claim 1, further comprising receiving, at the service provider system, content distribution instructions from the first source.

7. The method of claim 1, further comprising:

receiving, at the service provider system, an access request from a second source, and

determining, at the service provider system, whether to grant the access request from the second source.

8. The method of claim 7, wherein the access request from the second source includes a vault identifier.

9. The method of claim 7, wherein the access request from the second source includes a lock-box identifier.

10. The method of claim 1, further comprising receiving, at the service provider system, an inventory list request from a designated recipient system.

11. A method of operating a service provider system, comprising:

receiving, at the service provider system, a plurality of content items;

receiving, at the service provider system, a vault designation for each of the plurality of content items;

receiving, at the service provider system, a lock-box designation for one or more of the plurality of content items;

receiving, at the service provider system, a first set of vault access control instructions from a first source, the first set of vault access control instructions defining the process for granting access to the vault for at least a first designated recipient and a second designated recipient;

receiving, at the service provider system, a first set of lock-box access control instructions from the first source, the first set of lock-box access control instructions defining the process for granting access to the lock-box for at least a first designated recipient and a second designated recipient;

receiving, at the service provider system, a first set of content item access control instructions from a first source, the first set of content items access control instructions defining the process for granting access to the content items for at least a first designated recipient and a second designated recipient;

receiving, at the service provider system, at least one access request from at least one source, the at least one source being one of the first and the second designated recipients; and

determining, at the service provider system, whether to grant the at least one access request.

12. The method of claim 11, wherein the plurality of content items originate from the first source, and the first source is a user system.

13. The method of claim 11, further comprising receiving, at the service provider system, one or more first designated recipient access requests, the access requests originating from a first designated recipient system.

14. The method of claim 13, further comprising receiving, at the service provider system, one or more second designated recipient access requests, the access requests originating from a second designated recipient system.

15. The method of claim 14, wherein the first set of vault access control instructions specifies concurrent on-line presence of both the first and the second designated recipient systems in order to access the vault.

16. The method of claim 13, further comprising receiving at the service provider system, a first set of information from physical security key that is communicatively coupled to the first designated recipient system.

17. The method of claim 16, wherein the first set of information includes one or more of group consisting of geographical data, expiration date data, and biometric data.

18. The method of claim 11, further comprising receiving, at the service provider system, vault creation information from a user system.

19. The method of claim 11, further comprising receiving, at the service provider system, lock-box creation information from a user system.

20. A method of operating a service provider system, comprising:

(a) receiving, at the service provider system, a plurality of content items from a user system, each of the plurality of content items having a vault designation associated therewith;

(b) receiving, at the service provider system, a first set of vault access control instructions from a user system, the first set of vault access control instructions defining the process for granting access to the vault and its contents for at least a first designated recipient and a second designated recipient;

(c) receiving, at the service provider system, a first communication from the first designated recipient;

(d) determining, at the service provider system, whether the first designated recipient is required to have a physical security key;

(e) transmitting, from the service provider system if the determination of (d) is affirmative, a query for information from the physical security key, the query addressed to the first designated recipient;

(f) receiving, at the service provider system, a response to the query for information from the physical security key from the first designated recipient;

(g) determining, at the service provider system, whether the physical security key is valid;

(h) transmitting, from the service provider system if the determination of (g) is affirmative, data indicating that the service provider will accept an access request for processing

(i) receiving, at the service provider system, the access request from the first designated recipient; and

(j) determining, at the service provider system, whether to grant the access request.

21. The method of claim 20, wherein the response to the query for information from the physical key includes one or more data items from the group consisting of geographical data, expiration date data, and biometric data.

22. The method of claim 20, wherein determining whether the first designated recipient is required to have a physical security key comprises accessing, by the service provider system, at least a portion of the contents of the first set of vault access control instructions from the user system, the portion specifying whether a physical security key is required by the first designated recipient.

23. The method of claim 20, wherein determining whether the physical security key is valid comprises accessing, by the service provider system, at least one record from a physical key database maintained by the service provider system.