SYSTEM FOR CONTROLLING ACCESS TO USER RESOURCES AND METHOD THEREOF

• US 20130067597A1
• Filed: 08/24/2012
• Published: 03/14/2013
• Est. Priority Date: 09/14/2011
• Status: Abandoned Application

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Lee, Jin-Suk, Choi, Yoon-Chan
• Application Number:
  US13/594,387
• Publication Number:
  US 20130067597A1
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/104 Grouping of entities

Abstract

A system for controlling access to user resources and a method thereof are provided. The system includes a client device and a server. The client device receives an input of access regulations, which define an access level and access agent for first-user resources, from a first user, and transmits the received access regulations to the server. When a second user has access to the user resources, the server controls the access in compliance with the access regulations.

Claims

1. A system for controlling access to user resources, the system comprising:

a client device for receiving an input of access regulations, which define an access level and access agent for first-user resources, from a first user, and transmitting the received access regulations to a server; and

the server for controlling, when a second user has access to the user resources, the access in compliance with the access regulations.

2. The system of claim 1, wherein the access level is defined as granting access or denying access.

3. The system of claim 2, wherein the server denies the access of the second user when denying access is the access level.

4. The system of claim 2, wherein the server accepts the access of the second user when granting access is the access level and the second user is comprised in the defined access agent.

5. The system of claim 2, wherein the access level of granting access is defined as granting all search and inquiry, granting search but denying inquiry, or denying search but granting inquiry.

6. The system of claim 1, wherein the access agent is selected among pre-classified user groups or individual users.

7. The system of claim 1, wherein the first user is granted an authority to define regulations on access to the user resources from the server.

8. The system of claim 1, wherein the user resources are personal information identifying an individual.

9. The system of claim 1, wherein the user resources are user data existing in an application.

10. A method for controlling access to user resources, the method comprising:

determining an access level for corresponding user resources;

determining an access agent for the user resources; and

controlling access to the user resources according to the determined access level and access agent.

11. The method of claim 10, wherein the access level that is determined for the user resources is granting access or denying access.

12. The method of claim 11, wherein, when the access level is denying access, the controller controls the access agent to deny access to the user resources.

13. The method of claim 11, wherein, when the access level is granting access and a user having requested to access the user resources is comprised in the determined access agent, the controller controls the access agent to accept the access.

14. The method of claim 11, wherein the access level for the user resources is defined as granting all search and inquiry, granting search but denying inquiry, denying search but granting inquiry, or denying all search and inquiry.

15. The method of claim 10, wherein the access agent for the user resources is selected among pre-classified user groups or individual users.

16. The method of claim 10, wherein the user resources are personal information identifying an individual.

17. The method of claim 10, wherein the user resources are user data existing in an application.

18. A method for controlling access to user resources, the method comprising:

determining, when a nonspecific user requests to inquire corresponding user resources, whether the user resources have been set to access regulations of an access level of granting inquiry;

determining, when the user resources have been set to the access regulations of the access level of granting inquiry, whether the access regulations include, as an access agent, the nonspecific user having requested the inquiry; and

providing, when the user resources have been set to the access regulations including the nonspecific user having requested the inquiry as the access agent, the user resources to the nonspecific user having requested the inquiry.

19. The method of claim 18, further comprising denying the inquiry request of the nonspecific user when the user resources have been set to access regulations of an access level of denying inquiry or when the user resources have been set to access regulations not including the nonspecific user having requested the inquiry as the access agent.

20. A method for controlling access to user resources, the method comprising:

determining, when a nonspecific user requests to search target-user resources that are identical to a search condition, whether the searched target-user resources identical to the search condition have been set to access regulations of an access level of granting search;

determining, when the searched target-user resources have been set to the access regulations of the access level of granting search, whether the searched target-user resources have been set to access regulations including, as an search agent, the nonspecific user having requested the search; and

sending, when the searched target-user resources have been set to the access regulations including the nonspecific user having requested the search as the search agent, a notification of the searched target-user resources to the nonspecific user having requested the search.

21. The method of claim 20, further comprising terminating the controlling when the searched target-user resources have been set to access regulations of an access level of denying search or when the searched target-user resources have been set to access regulations not including the nonspecific user having requested the search as the search agent.