METHOD AND SYSTEM FOR MANAGING USER SECURITY PERMISSIONS FOR ACCESS TO RESOURCES

• US 20150095979A1
• Filed: 09/27/2013
• Published: 04/02/2015
• Est. Priority Date: 09/28/2012
• Status: Active Grant

• Current Assignee: Cogware Pty Limited
• Original Assignee: Cogware Pty Limited
• Inventors: WINDUST, Jon
• Granted Patent: US 9,350,745 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 67/53 using third party service providers

Abstract

Disclosed is a method and system of managing user security permissions for access to resources accessible over a communications network, to participate in a designated task or conversation relating to the resources. The method and system include: assembling resources relating to the designated task or conversation into a collection and allocating security permissions for users to access said resources in the collection over the network based on whether the users are active or passive participants in the task or the conversation. Active participants have been invited to participate in the task or the conversation and passive participants have not been invited to participate in the task or the conversation, and security permissions allocated for each of the users to access said resources in the collection to the providers of the resources are communicated, such that the providers set the security permissions for each of the users to access the resources.

Claims

1. A computer implemented method of managing user security permissions for access to resources that are provided by providers, to participate in a designated task or conversation relating to the resources, and are accessible over a communications network, the method including:

assembling resources relating to the designated task or the conversation into a collection;

allocating security permissions for users to access said resources in the collection over the network based on whether the users are active or passive participants in the task or the conversation, whereby the active participants have been invited to participate in the task or the conversation and the passive participants have not been invited to participate in the task or the conversation; and

communicating the security permissions allocated for each of the users to access said resources in the collection to the providers of the resources, such that the providers set the security permissions for each of the users to access the resources.

2. A method as claimed in claim 1, further including allocating said security permissions for the users to access said resources in the collection based on whether the users are members of a designated group with designated permissions for the resources in the collection.

3. A method as claimed in claim 2, wherein the security permissions include permission policies of a security model to:

view the resources;

comment on the resources;

edit the resources;

delete the resources;

control permissions for other users to the resources; and

own the resources.

4. A method as claimed in claim 3, further including allocating said permission policies to any one of:

users that are active participants in the task or the conversation and are members of a designated group;

users that are active participants in the task or the conversation;

users that have designated permissions for the resources; and

users that are passive participants in the task or the conversation.

5. A method as claimed in claim 4, further including the providers setting the permission policies based on the security permissions communicated thereto for any one of:

users that are active participants in the task or the conversation and are members of a designated group;

users that are active participants in the task or the conversation;

users that have designated permissions for the resources; and

users that are passive participants in the task or the conversation.

6. A method as claimed in claim 5, wherein the permission policies set by the providers override the permission policies allocated to said users to access said resources in the collection.

7. A method as claimed in claim 1, further including translating said security permissions allocated for each of the users to access said resources in the collection to a provider model for use by the providers to set the security permissions for each of the users to access the resources.

8. A method as claimed in claim 7, further including interfacing with the providers to communicate the provider model so that the providers set the security permissions for each of the users to access the resources.

9. A method as claimed in claim 1, further including assembling data indicative of said active and said passive participants in the task or the conversation into the collection.

10. A method as claimed in claim 9, further including assembling data indicative of communications on the resources created by the users participating in the conversation into the collection.

11. A method as claimed in claim 9, further including allocating the security permissions for said users to access the resources in the collection based on the data indicative of said active and said passive participants assembled into the collection.

12. A method as claimed in claim 11, further including removing the security permissions for said users to access the resources in the collection in response to the data indicative of said active and said passive participants being removed from the collection.

14. Computer program code which when executed implements the method of claim 1.

15. A tangible computer readable medium including the program code of claim 14.

13. A system for managing user security permissions for access to resources that are provided by providers, to participate in a designated task or conversation relating to the resources, and are accessible over a communications network, the system including a controller implementing:

a collection module for assembling resources relating to the designated task or the conversation into a collection;

a security module for allocating security permissions for users to access said resources in the collection over the network based on whether the users are active or passive participants in the task or the conversation, whereby the active participants have been invited to participate in the task or the conversation and the passive participants have not been invited to participate in the task or the conversation; and

an output module for communicating the security permissions allocated for each of the users to access said resources in the collection to the providers of the resources, such that the providers set the security permissions for each of the users to access the resources.