VALIDATION OF A LOCATION RESOURCE BASED ON RECIPIENT ACCESS

• US 20160241568A1
• Filed: 04/28/2016
• Published: 08/18/2016
• Est. Priority Date: 04/04/2014
• Status: Active Grant

• Current Assignee: AirBNB Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Hewitt, Trudy L., Schembari, Francesco C., Schwenn, Robert M. Jr.
• Granted Patent: US 9,692,766 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/24 Querying
• CPC Class Codes: G06F 16/9566 URL specific, e.g. using aliases, detecting broken or misspelled links
• CPC Class Codes: H04L 51/046 Interoperability with other network applications or services
• CPC Class Codes: H04L 51/08 Annexed information, e.g. attachments
• CPC Class Codes: H04L 51/18 Commands or executable codes
• CPC Class Codes: H04L 51/48 Message addressing, e.g. address format or anonymous messages, aliases
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/025 for remote control or remote monitoring of applications
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal

Abstract

Aspects of the present disclosure relate to a method, a system, and a computer program product for validating a location resource, e.g., a hyperlink, embedded in a message for one or more recipients. The method includes receiving, by a computing node in a distributed computing environment and from a messaging application on a remote client computer, an identifier of a user profile and a location resource. The location resource is embedded in a message and that indicates a path to a computing resource outside of the remote client computer. The method also includes querying a repository in the distributed computing environment to obtain access permission information about the location resource. The method also includes determining, based upon the access permission information about the location resource, whether the user profile has access permission for the location resource.

Claims

1. A method comprising:

receiving, by a computing node in a distributed computing environment and from a messaging application on a remote client computer, an identifier of a user profile of a user and a location resource that is embedded in a message and that indicates a path to a computing resource outside of the remote client computer;

querying a repository in the distributed computing environment to obtain access permission information about the location resource;

determining, based upon the access permission information about the location resource and the user profile, whether the user has permission to access the location resource; and

communicating, visually using the messaging application, the permission to a sender prior to the sender sending the message to the user.

2. The method of claim 1, wherein determining whether the user has the permission to access the location resource includes:

determining whether access permission data for the location resource exists in the repository;

requesting, from a network-based application and in response to non-existence of the access permission data in the repository, access permission data for the location resource; and

storing, in response to receiving access permission data from the network-based application, the access permission data in the repository.

3. The method of claim 2, wherein requesting the access permission data includes:

sending request for access permission data to the network-based application;

providing an identification factor associated with the user profile to the network-based application;

determining whether the network-based application recognizes the identification factor; and

receiving the access permission data in response to the network-based application recognizing the identification factor.

4. The method of claim 3, wherein sending the request for access permission data to the application includes:

sending the request for access permission data to an application programming interface of the network-based application.

5. The method of claim 1, further comprising:

determining a proportion of users with permission to access the location resource; and

communicating the proportion of user with permission to access the location resource.

6. The method of claim 1, wherein communicating the permission to access the location resource visually includes using colors to indicate the access permission of the user.

7. The method of claim 1, wherein the identifier of the user profile includes an email address.

8. The method of claim 1, wherein the location resource includes a Uniform Resource Locator (URL).

9. The method of claim 1, wherein communicating, visually using the messaging application, the permission to the sender prior to the sender sending the message to the user comprises:

assigning a first recipient of the message a first color, wherein the first color indicates that the first recipient has permission to access the location resource; and

assigning a second recipient of the message a second color, wherein the second color indicates that the second recipient does not have permission to access the location resource.

10. A system, comprising:

a remote client computer that includes;

a messaging application configured to;

send a message to one or more recipients with a location resource that is embedded in the message and that indicates a path to a computing resource outside of the remote client computer, and

communicate, visually, permission to access the location resource by the one or more recipients of the message to a sender prior to the sender sending the message to the one or more recipients, the one or more recipients including a first recipient;

a distributed computing environment that includes;

a repository of the location resource with access permission information for a user profile associated with the first recipient; and

a processing engine, hosted by a computing node in the distributed computing environment, configured to;

receive, from the messaging application, the location resource and the user profile of the first recipient,

query, within the repository in the distributed computing environment, the location resource, and

determine, based on an identifier of the user profile and the access permission information, whether the first recipient has the permission to access the location resource.

11. The system of claim 10, wherein the messaging application is configured to communicate the permission to access the location resource by the one or more recipients by:

using colors to indicate the permission of each recipient.

12. The system of claim 10, wherein the messaging application is configured to communicate the permission to access the location resource by the one or more recipients by:

receiving a proportion of recipients with permission to access the location resource; and

communicating the proportion of recipients with permission to access the location resource.

13. The system of claim 10, further comprising:

a network-based application with an application programming interface (API).

14. The system of claim 13, wherein the processing engine is configured to determine whether the first recipient has the permission to access the location resource by:

determining whether access permission data for the location resource exists in the repository;

requesting access permission data for the location resource in response to non-existence of the access permission data in the repository; and

storing the access permission data in the repository.

15. The system of claim 14, wherein requesting the access permission data includes:

sending a request for access permission data to the API;

providing an identification factor associated with the user profile to the API;

receiving the access permission data.

16. The system of claim 11, wherein the one or more recipients further includes a second recipient, and wherein the messaging application is configured to communicate, visually, permission to access the location resource by the one or more recipients of the message by:

assigning the first recipient a first color, the first color indicating that the first recipient has permission to access the location resource; and

assigning the second recipient a second color, the second color indicating that the second recipient does not have permission to access the location resource.

17. A computer program product comprising a computer readable storage device having a computer readable program stored therein, wherein the computer readable program, when executed on a computing device, causes the computing device to:

receive, by a computing node in a distributed computing environment and from a messaging application on a remote client computer, an identifier of a user profile of a user and a location resource that is embedded in a message and that indicates a path to a computing resource outside of the remote client computer;

query a repository in the distributed computing environment to obtain access permission information about the location resource;

determine, based upon the access permission information about the location resource and the user profile, whether the user has permission to access the location resource;

communicate, visually using the messaging application, the permission to a sender prior to the sender sending the message to the user.

18. The computer program product of claim 17, wherein the computer readable program causes the computing device to communicate, visually using the messaging application, the permission to the sender prior to the sender sending the message to the user by:

determining a proportion of users with permission to access the location resource; and

communicating the proportion of users with permission to access the location resource.

19. The computer program product of claim 17, wherein the computer readable program causes the computing device to communicate, visually using the messaging application, the permission to the sender prior to the sender sending the message to the user by:

assigning a first recipient of the message a first color, wherein the first color indicates that the first recipient has access permission for the location resource; and

assigning a second recipient of the message a second color, wherein the second color indicates that the second recipient does not have access permission for the location resource.