METHODS, APPARATUS AND SYSTEMS FOR AUTHENTICATING USERS AND USER DEVICES TO RECEIVE SECURE INFORMATION VIA MULTIPLE AUTHORIZED CHANNELS

• US 20110252460A1
• Filed: 04/13/2011
• Published: 10/13/2011
• Est. Priority Date: 05/13/2008
• Status: Active Grant

• Current Assignee: Cyandia, Inc.
• Original Assignee: Monterey Group One LLC
• Inventors: Wetzer, Michael, Theriault, Thomas
• Granted Patent: US 8,832,576 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 9/54 Interprogram communication

Abstract

Facilitating display of, and interaction with, secure user-centric information via a user platform operated by a user. A user identity is transmitted to an external computing device hosting an identity management server to authenticate the user. After authenticating, a desktop channel grid framework is displayed on the user platform. The channel grid framework includes multiple channels having respective contents represented as multiple user-selectable items, through which respective portions of the secure user-centric information are presented. At least some of the secure user-centric information in at least one channel is based on the user identity, and in displaying the at least one channel as a selectable item, the at least one channel is authenticated by the identity management server. In one example, the user platform also is authenticated, and multiple user-selectable items included in the channel grid framework is based on information access rights and/or security protocols respectively associated with the corresponding plurality of authorized channels, the user, and the user platform.

Claims

1. An apparatus serving as a user platform operated by a user to facilitate display of, and interaction with, secure user-centric information, the apparatus comprising:

a display device to display a desktop for the user platform;

at least one communication interface to facilitate wired and/or wireless communications via one or more transmission media;

at least one memory to store processor-executable instructions; and

at least one processor communicatively coupled to the display device, the at least one communication interface, and the at least one memory, wherein upon execution of the processor-executable instructions by the at least one processor, the at least one processor establishes a user session to manage display of and interaction with the secure user-centric information by;

A) controlling the at least one communication interface to transmit a user identity for the user and a platform identity for the user platform to at least one external computing device hosting an identity management server to authenticate the user and the user platform to receive the secure user-centric information based at least in part on the user identity and the platform identity; and

B) if the user and the user platform are authenticated in A) by the identity management server, controlling the display device to display the desktop for the user platform as a channel grid framework, the channel grid framework including a plurality of user-selectable items representing a corresponding plurality of authorized channels through which the user receives and/or interacts with respective portions of the secure user-centric information,

wherein, in B), the plurality of user-selectable items included in the channel grid framework is based at least in part on information access rights and/or security protocols respectively associated with the corresponding plurality of authorized channels, the user, and the user platform.

2. The apparatus of claim 1, wherein A) further comprises:

receiving the user identity from the user.

3. The apparatus of claim 1, wherein the user platform includes at least one of:

a desktop computer;

a laptop computer;

a tablet computer;

a net-book computing device;

a handheld computing device;

a personal, enterprise, or portable digital assistant;

a telecommunications device including one of a telephone, a cell phone, and a smart phone;

a personal navigation device;

a vehicle-based device;

an optical disk player;

a television; and

a game console.

4. The apparatus of claim 1, wherein the secure user-centric information includes at least one of:

text information;

graphic information;

one or more pictures;

one or more videos;

audio or digital sound;

streaming data, audio or video;

content associated with an executing computer application;

voice-over-IP communication;

instant messaging/SMS information;

video-conferencing information;

environmental monitoring information;

financial services information;

enterprise resource planning information;

enterprise content management information;

building information;

project management information;

product lifecycle management information;

RSS (Really Simple Syndication) reader information;

remote device control/interaction information;

a three-dimensional graphic visualization of one or more objects and/or immersive environments;

one or more word processing documents;

one or more spreadsheets;

one or more presentation/slide shows;

email; and

address book information.

5. The apparatus of claim 1, wherein:

the plurality of authorized channels includes at least a first authorized channel through which the user receives and/or interacts with first authenticated channel information constituting a first portion of the secure user-centric information;

the first authenticated channel information is provided by at least one authenticated channel application and/or at least one authenticated service; and

the plurality of user-selectable items displayed in B) includes at least a first user-selectable item representing the first authorized channel.

6. The apparatus of claim 1, wherein the at least one communication interface includes a web services gateway communicatively coupled to the identity management server via the one or more transmission media.

7. The apparatus of claim 1, wherein the identity management server stores a user profile to identify user preferences, platform identities, and service support instructions that determine how the secure user-centric information behaves on the user platform, and wherein:

in A), the user and the user platform are authenticated based at least in part on the user profile; and

in B), the plurality of user-selectable items included in the channel grid framework is based at least in part on the user profile.

8. The apparatus of claim 1, wherein:

the identity management server stores an authentication directory to provide the information access rights and/or security protocols respectively associated with the corresponding plurality of authorized channels, the user, and the user platform;

the authentication directory includes a plurality of user accounts, a plurality of device accounts, and a plurality of application accounts; and

in A), the user and the user platform are authenticated based at least in part on the plurality of user accounts and the plurality of device accounts included in the authentication directory.

9. The apparatus of claim 8, wherein:

at least one user account of the plurality of user accounts includes at least one entry comprising at least one of;

a user name;

a user password;

a user email;

a user mailstop;

a user telephone number;

a user mobile number;

a user building;

a user campus; and

at least one user group; and

in A), the user is authenticated if the user identity matches the at least one entry.

10. The apparatus of claim 8, wherein:

at least one device account of the plurality of device accounts includes at least one entry comprising at least one of;

a device name;

a device type;

a device manufacturer;

a device model number;

a device serial number;

a device IP address;

a device location;

a device user; and

a device password; and

in A), the user platform is authenticated if the platform identity matches the at least one entry.

11. The apparatus of claim 10, wherein in A), the identity management server further authenticates the user platform based at least in part on a location of the user platform.

12. The apparatus of claim 8, wherein:

in B), the plurality of user-selectable items included in the channel grid framework is based at least in part on the plurality of application accounts included in the authentication directory.

13. The apparatus of claim 12, wherein:

at least one application account of the plurality of application accounts includes at least one entry comprising at least one of;

an application name;

an application serial number;

at least one application module;

at least one application web service;

at least one application interface;

at least one application protocol;

at least one application host;

an application IP address;

an application location;

an application user; and

an application password.

14. The apparatus of claim 12, wherein:

in A), the identity management server further authenticates the user platform based at least in part on a location of the user platform; and

in B), the plurality of user-selectable items included in the channel grid framework is based at least in part on the plurality of application accounts included in the authentication directory and the location of the user platform.

15. The apparatus of claim 1, wherein the channel grid framework includes a two-dimensional array of the user-selectable items.

16. The apparatus of claim 1, wherein the channel grid framework includes a twelve-item grid of the user-selectable items.

17. The apparatus of claim 1, wherein the channel grid framework includes a matrix of square elements respectively constituting the user-selectable items.

18. The apparatus of claim 1, wherein the channel grid framework includes a three-by-four matrix of the user-selectable items.

19. The apparatus of claim 1, wherein the channel grid framework includes a plurality of channel grids, each channel grid of the plurality of channel grids including a configured group of plurality of user-selectable items.

20. The apparatus of claim 1, wherein:

the plurality of authorized channels includes a first channel through which the user receives and/or interacts with first channel information constituting a first portion of the secure user-centric information;

the plurality of user-selectable items includes a first user-selectable item representing the first channel; and

B) comprises controlling the display device so as to render the first user-selectable item in the channel grid framework as one of;

a graphic representative of the first channel information;

a picture representative of the first channel information; and

a dynamic window including at least one of;

content from an executing computer application constituting the first channel information;

a video representative of the first channel information;

streaming data, audio or video constituting at least a portion of the first channel information; and

polled data derived from the first channel information.

21. The apparatus of claim 20, wherein:

the plurality of authorized channels further includes a second channel through which the user receives and/or interacts with second channel information constituting a second portion of the secure user-centric information;

the plurality of user-selectable items further includes a second user-selectable item representing the second channel; and

B) comprises controlling the display device so as to;

B1) render the first user-selectable item in the channel grid framework as a first dynamic window including at least one of;

first content from a first executing computer application constituting the first channel information;

a first video representative of the first channel information;

first streaming data, audio or video constituting at least a portion of the first channel information; and

first polled data derived from the first channel information; and

B2) render the second user-selectable item in the channel grid framework as a second dynamic window including at least one of;

second content from a second executing computer application constituting the second channel information;

a second video representative of the second channel information;

second streaming data, audio or video constituting at least a portion of the second channel information; and

second polled data derived from the second channel information.

22. The apparatus of claim 20, wherein the at least one processor further manages display of and interaction with the secure user-centric information by:

moving the first user-selectable item to a different location in the channel grid framework in response to a user input from the user.

23. The apparatus of claim 20, wherein the at least one processor further manages the display of and interaction with the secure user-centric information by:

C) controlling the at least one communication interface to receive the first channel information from the at least one external computing device.

24. The apparatus of claim 23, wherein the first channel information includes at least one of:

text information;

graphic information;

one or more pictures;

one or more videos;

audio or digital sound;

streaming data, audio or video;

content associated with an executing computer application;

voice-over-IP communication;

instant messaging/SMS information;

video-conferencing information;

environmental monitoring information;

financial services information;

enterprise resource planning information;

enterprise content management information;

building information;

project management information;

product lifecycle management information;

RSS (Really Simple Syndication) reader information;

remote device control/interaction information;

a three-dimensional graphic visualization of one or more objects and/or immersive environments;

one or more word processing documents;

one or more spreadsheets;

one or more presentation/slide shows;

email; and

address book information.

25. The apparatus of claim 23, wherein the at least one external computing device hosts a channel server that defines one or more visual characterizations, one or more functions or features, and/or one or more information types provided by respective channels of the plurality of channels through which the user receives and/or interacts with the respective portions of the secure user-centric information, wherein the channel server implements at least the first channel, and wherein C) comprises:

C) controlling the at least one communication interface to receive the first channel information from the channel server.

26. A system, comprising:

the apparatus of claim 25; and

the at least one external computing device hosting the channel server, wherein;

the at least one external computing device comprises at least one second communication interface to transmit the first channel information to the at least one communication interface of the apparatus serving as the user platform;

the at least one external computing device further comprises at least one database communicatively coupled to the channel server; and

the at least one database stores registries to one or more services and/or applications used by the channel server to implement the first channel and provide the first channel information.

27. The system of claim 26, wherein:

the at least one external computing device hosting the channel server further hosts at least one other server, communicatively coupled to the channel server, to provide the one or more services and/or applications registered in the at least one database and used by the channel server to implement the first channel and provide the first channel information, wherein the at least one other server includes at least one of;

a video server to transform, transmit, and/or support delivery of video information and/or audio information included in the first channel information;

an enterprise content management server to provide configuration, templates, visual content, user interface controls and management control for the first channel information;

a device integration server to manage streaming or real-time information from a machine or device, which streaming or real-time information is included in the first channel information;

a portal server to facilitate Internet-based function access by the at least one communication interface of the user platform;

a channel alert server to monitor the first channel information so as to determine one or more events, conditions, logical workflows, discrete information values or signal data based on at least one threshold condition or parameter, and to generate at least one alert in response to the one or more determined events, conditions, logical workflows, discrete information values or signal data relating to the first channel information; and

a virtual world server to provide a three-dimensional visualization of, and/or interaction with, the first channel information.

28. The apparatus of claim 23, wherein in response to the user selecting the first user-selectable item, the at least one processor further manages the display of and interaction with the secure user-centric information by:

D) controlling the display device so as to replace the channel grid framework with an expanded first channel representation of the first channel information.

29. The apparatus of claim 28, wherein the expanded first channel representation includes a substantially full-screen two-dimensional representation or simulated three-dimensional representation of the first channel information.

30. The apparatus of claim 29, wherein:

the expanded first channel representation includes the simulated three-dimensional representation of the first channel information;

the first channel information relates to a physical place, one or more objects, and/or one or more people; and

the simulated three-dimensional representation includes virtual representations of the physical place, the one or more objects, and/or the one or more people.

31. The apparatus of claim 20, wherein in B), the at least one processor further controls the at least one display device so as to render at least the first user-selectable item in the channel grid framework to provide at least one visual alert based on one or more events, conditions, logical workflows, discrete information values or signal data relating to the first channel information.

32. The apparatus of claim 31, wherein the at least one processor controls the display device to change an appearance of the first user-selectable item to provide the at least one visual alert as at least one of:

text and/or an image;

a new data value;

a chart;

streaming text or video; and

an animation.

33. The apparatus of claim 31, wherein the at least one processor controls the display device so as to render the at least one visual alert by replacing the channel grid framework with an expanded first channel representation of the first channel information.

34. The apparatus of claim 33, wherein the expanded first channel representation includes a substantially full-screen two-dimensional representation or simulated three-dimensional representation of the first channel information.

35. The apparatus of claim 31, wherein in response to the user hovering over the first user-selectable item without selecting the first user-selectable item, the at least one processor controls the at least one display device to display an alert tool to allow the user to define or select at least one of:

at least one threshold condition or parameter for interrogating the first channel information so as to determine the one or more events, conditions, logical workflows, discrete information values or signal data relating to the first channel information; and

at least one user preference for taking action in response to the determined one or more events, conditions, logical workflows, discrete information values or signal data relating to the first channel information.

36. The apparatus of claim 35, wherein the at least one condition or parameter includes a numerical limit or a trend.

37. The apparatus of claim 35, wherein the at least one user preference includes:

at least one alert to be generated in response to the determined one or more events, conditions, logical workflows, discrete information values or signal data relating to the first channel information, wherein the at least one alert includes at least one of;

the at least one visual alert;

at least one auditory alert;

at least one email message;

at least one SMS text message;

activation of at least one channel of the plurality of channels; and

a notification to a law enforcement agency; and

at least one of;

at least one designated user platform on which the at least one alert is generated; and

at least one identity of at least one other user associated with the user and authenticated by the identity management server to receive the at least one alert.

38. A method for facilitating display of, and interaction with, secure user-centric information via a user platform operated by a user, the method comprising:

A) electronically transmitting a user identity for the user and a platform identity for the user platform to at least one external computing device hosting an identity management server to authenticate the user and the user platform to receive the secure user-centric information based at least in part on the user identity and the platform identity; and

B) if the user and the user platform are authenticated in A) by the identity management server, displaying a desktop for the user platform as a channel grid framework, the channel grid framework including a plurality of user-selectable items representing a corresponding plurality of authorized channels through which the user receives and/or interacts with respective portions of the secure user-centric information,

wherein, in B), the plurality of user-selectable items included in the channel grid framework is based at least in part on information access rights and/or security protocols respectively associated with the corresponding plurality of authorized channels, the user, and the user platform.

39. At least one computer readable storage medium storing processor-executable instructions that, when executed by at least one processor, perform a method for facilitating display of, and interaction with, secure user-centric information via a user platform operated by a user, the method comprising:

A) electronically transmitting a user identity for the user and a platform identity for the user platform to at least one external computing device hosting an identity management server to authenticate the user and the user platform to receive the secure user-centric information based at least in part on the user identity and the platform identity; and

B) if the user and the user platform are authenticated in A) by the identity management server, displaying a desktop for the user platform as a channel grid framework, the channel grid framework including a plurality of user-selectable items representing a corresponding plurality of authorized channels through which the user receives and/or interacts with respective portions of the secure user-centric information,

wherein, in B), the plurality of user-selectable items included in the channel grid framework is based at least in part on information access rights and/or security protocols respectively associated with the corresponding plurality of authorized channels, the user, and the user platform.

40. A computer-implemented method for facilitating display of, and interaction with, secure user-centric information via a user platform operated by a user, the method comprising:

A) transmitting a user identity for the user to at least one external computing device hosting an identity management server to authenticate the user; and

B) after authenticating the user by the identity management server, displaying on the user platform a desktop channel grid framework, the channel grid framework including a plurality of channels having respective contents represented as a plurality of user-selectable items through which respective portions of the secure user-centric information are presented for the user'"'"'s interaction,

wherein, in B), at least some of the secure user-centric information delivered to the user in at least one channel of the plurality of channels is based on the user identity, and in displaying the at least one channel to the user as a selectable item, the at least one channel is authenticated by the identity management server.

41. The method of claim 40, wherein:

the identity management server stores an authentication directory including a plurality of user accounts, a plurality of device accounts, and a plurality of application accounts,

in A), the user and the user platform are authenticated based at least in part on the plurality of user accounts and the plurality of device accounts included in the authentication directory; and

in B), the at least one channel is authenticated based at least in part on the plurality of application accounts included in the authentication directory.

42. The method of claim 41, wherein:

at least one user account of the plurality of user accounts includes at least one entry comprising at least one of;

a user name;

a user password;

a user email;

a user mailstop;

a user telephone number;

a user mobile number;

a user building;

a user campus; and

at least one user group; and

in A), the user is authenticated if the user identity matches the at least one entry.

43. The method of claim 42, wherein:

at least one device account of the plurality of device accounts includes at least one entry comprising at least one of;

a device name;

a device type;

a device manufacturer;

a device model number;

a device serial number;

a device IP address;

a device location;

a device user; and

a device password; and

in A), the user platform is authenticated if the platform identity matches the at least one entry.

44. The method of claim 43, wherein:

at least one application account of the plurality of application accounts includes at least one application user and at least one additional entry comprising at least one of;

an application name;

an application serial number;

at least one application module;

at least one application web service;

at least one application interface;

at least one application protocol;

at least one application host;

an application IP address;

an application location; and

an application password; and

in B), the at least one channel is authenticated if the user identity matches the at least one application user.