COMPUTERIZED METHOD AND SYSTEM FOR MANAGING SECURE MOBILE DEVICE CONTENT VIEWING IN A NETWORKED SECURE COLLABORATIVE EXCHANGE ENVIRONMENT

• US 20140047560A1
• Filed: 10/18/2013
• Published: 02/13/2014
• Est. Priority Date: 04/27/2012
• Status: Active Grant

• Current Assignee: IntraLinks Incorporated (SS&C Technologies Holdings Incorporated)
• Original Assignee: IntraLinks Incorporated (SS&C Technologies Holdings Incorporated)
• Inventors: Meyer, Jerry Lee, Durairaj, Sudhakar, Hakhinian, Mushegh
• Granted Patent: US 9,251,360 B2
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/08 Access security

Abstract

In embodiments of the present invention improved capabilities are described for securely viewing computer data content, such as documents, presentations, spreadsheets, emails, blog entries, texts, and the like, through a secure viewing facility, where the secure viewing facility utilizes a camera or other biometric sensor to monitor an authorized user'"'"'s actions in the determination of whether the secure viewing facility will permit the computer data content to be viewed on the computer'"'"'s display, and/or in the control of the viewing process itself.

Claims

1. A method for managing a networked secure collaborative computer data exchange environment, the method comprising:

establishing, by a secure exchange server hosted by an intermediate business entity, a user login data authentication procedure that allows one or more users through at least one client computing device to access the secure exchange server, wherein the one or more users is of at least a second business entity, wherein communications between the secure exchange server and each of the one or more users is through a communications network, and wherein at least one client computing device is a mobile computing device;

storing, by the secure exchange server, at least one user login authentication data for the at least one user of the second business entity;

receiving a computer data content from at least one user of a third business entity;

receiving from at least one user of the third business entity an indication of permission for the user of the second business entity to access the content on a designated mobile device;

by the secure exchange server, permitting access to the computer data content to the user of the second business entity that is the user of the designated mobile computing device through an exchange content access facility, wherein the exchange content access facility is hosted by the intermediate business entity; and

by the secure exchange server, granting access to the computer data content to the user of the second business entity that is the user of the designated mobile computing device through a secure viewing facility when the secure exchange server receives the login authentication data, wherein the secure viewing facility restricts viewing of the computer data content as presented by the mobile computing device to only the authenticated user of the designated mobile computing device.

2. The method of claim 1, wherein the mobile computing device is at least one of a smart phone, a tablet computing device, and a laptop computer.

3. The method of claim 1, wherein the user of the mobile computing device downloads the computer data content to the mobile computing device once granted access.

4. The method of claim 3, wherein the user of the mobile computing device is permitted to view the computer data content when there is no connection between the mobile computing device and the exchange server.

5. The method of claim 3, wherein the downloaded computer data content is restricted from being printed.

6. The method of claim 3, wherein the downloaded computer data content is restricted from being copied.

7. The method of claim 3, wherein the downloaded computer data content can only be accessed by the secure viewing facility.

8. The method of claim 3, wherein the downloaded computer data content is modified and transmitted to the secure exchange server.

9. The method of claim 8, wherein the modified computer data content is indicted as having been modified in metadata stored in or associated with the computer data content.

10. The method of claim 1, wherein the permitting of access is limited to access of only the current version of the computer data content.

11. The method of claim 1, wherein the secure viewing facility tracks viewing of the computer data content.

12. The method of claim 11, wherein the tracked viewing is reported to the exchange server.

13. The method of claim 1, wherein the secure viewing facility authenticates permission to view the content via face recognition using an integrated sensor in the mobile computing device.

14. The method of claim 13, wherein the integrated sensor is a camera.

15. The method of claim 14, wherein the secure viewing facility reacts to eye gaze direction by blocking the computer data content from view if the user looks away from the mobile computing device.

16. The method of claim 13, wherein the integrated sensor is a biometric sensor.

17. The method of claim 1, wherein the secure viewing facility restricts viewing by distorting those portions of the computer data content not selected for viewing.

18. A method for managing a networked secure collaborative computer data exchange environment, the method comprising:

establishing, by a secure exchange server controlled by an intermediate business entity, a client login data authentication procedure that allows at least one client computing device of a plurality of client computing devices operated by users of a plurality of business entities to access the secure exchange server, wherein communications between the secure exchange server and the plurality of client computing devices is through a communications network;

storing, by the secure exchange server, at least one client login authentication data for each of the plurality of client computing devices;

receiving content from a first of the plurality of client computing devices;

by the secure exchange server, permitting access to the content for a subset of the plurality of computing devices through an exchange content access facility, wherein the exchange content access facility is managed by at least one business entity of the plurality of business entities;

granting, by the exchange server, access to the content to a second of the plurality of client computing devices when the secure exchange server receives from the second of the plurality of client computing devices its client login authentication data provided that the second of the plurality of client computing devices is one of the subset of the plurality of computing devices; and

providing a content viewer monitoring facility for monitoring the user viewing the content on their client computing device, wherein the monitoring is provided through an integrated camera operating in conjunction with a face recognition facility on the client computing device.

19. A method for managing a networked secure collaborative computer data exchange environment, the method comprising:

establishing, by a secure exchange server controlled by an intermediate business entity, a client login data authentication procedure that allows at least one client computing device of a plurality of client computing devices operated by users of a plurality of business entities to access the secure exchange server, wherein communications between the secure exchange server and the plurality of client computing devices is through a communications network;

storing, by the secure exchange server, at least one client login authentication data for each of the plurality of client computing devices;

receiving content from a first of the plurality of client computing devices;

by the secure exchange server, permitting access to the content for a subset of the plurality of computing devices through an exchange content access facility, wherein the exchange content access facility is managed by at least one business entity of the plurality of business entities;

granting, by the exchange server, access to the content to a second of the plurality of client computing devices when the secure exchange server receives from the second of the plurality of client computing devices its client login authentication data provided that the second of the plurality of client computing devices is one of the subset of the plurality of computing devices; and

providing a content viewer control facility for user-controlled viewing of the content on their client computing device, wherein the control is at least in part enabled through an integrated camera operating in conjunction with a motion recognition facility on the client computing device.

20. The method of claim 19, wherein the control is actualized through monitoring user hand gestures.

21. The method of claim 19, wherein the control is actualized through monitoring user eye movements.

22. The method of claim 19, wherein the control is enabling the viewing of the content.