VIRTUAL COLLABORATION SYSTEMS AND METHODS

• US 20170099297A1
• Filed: 01/27/2016
• Published: 04/06/2017
• Est. Priority Date: 10/01/2015
• Status: Active Grant

• Current Assignee: Lam Research Corporation
• Original Assignee: Lam Research Corporation
• Inventors: Armer, Michael
• Granted Patent: US 10,097,557 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 51/224 providing notification on incoming messages, e.g. pushed notifications of received messages
• CPC Class Codes: H04L 51/42 Mailbox-related aspects, e.g. synchronisation of mailboxes
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/30 Profiles

Abstract

A system including a domain controller and a document, policy, and collaboration servers. The document server receives a request signal based on an input received at a web browser of a user device and generates an authentication signal. The request signal requests access to a document. The document server provides a cloud-based service for access to the document. The domain controller, based on the authentication signal, determines a profile or authorization level of a user. The document server, based on the profile or the authorization level, transmits a second authentication signal to the user device. The policy server stores a digital rights management policy for the user. The collaboration server: based on the second authentication signal, receives a digital rights management signal from the user device; and based on the digital rights management policy of the user, permits a controller of the user device to access the document.

Claims

1. A system comprising:

a document server configured to (i) receive a first request signal based on an input received at a web browser of a first user device, and (ii) generate a first authentication signal, wherein the first request signal requests access to a first document, and wherein the document server provides a cloud-based service for access to the first document;

a domain controller configured to, based on the first authentication signal, determine a profile or authorization level of a first user of the first user device,

wherein the document server is configured to, based on the profile or the authorization level, transmit a second authentication signal to the first user device; and

a policy server configured to store a digital rights management policy for the first user; and

a collaboration server configured to (i) based on the second authentication signal, receive a digital rights management signal from the first user device, and (ii) based on the digital rights management policy of the first user, permit a controller of the first user device to access the first document, wherein the collaboration server is separate from the document server, and the domain controller.

2. The system of claim 1, wherein:

the document server is configured to (i) receive a second request signal from a second user device requesting a permission of the first user be changed for the first document; and

(ii) updated permissions of the first user; and

the collaboration server is configured to, based on the updated permissions of the first user, prevent the controller of the first user device from accessing the first document.

3. The system of claim 1, further comprising a mail server, wherein:

the document server is configured to, based on the profile or authorization level, send an instruction signal to the mail server; and

the mail server is configured to, based on the instruction signal, send an email notification to the user device indicating whether the first user is authorized to access the first document.

4. The system of claim 1, wherein:

the document server is configured to receive a username and password from the first user device;

the domain controller is configured to (i) based on the username and password, determine whether the first user is authorized to login, and (ii) send to the document server an indication signal indicating whether the first user is authorized to login;

the document server is configured to permit login of the first user based on the indication signal; and

the collaboration server is configured to, based on whether the first user is logged in and the authorization level of the first user, permit management access, collaboration access, or dashboard access to the first user.

5. The system of claim 1, wherein:

the document server is configured to (i) receive via the web browser a second document from the first user device, (ii) encrypt the second document, and (iii) receive an authorization signal from the first user device for a second user device, wherein the authorization signal indicates a second authorization level of a second user of the second user device; and

the document server or the collaboration server is configured to, based on the second authorization level, permit access to the second document by the second user.

6. The system of claim 1, further comprising a mail server, wherein:

the first request signal requests viewing or downloading of the first document to the first user device;

the mail server is configured to

send a first email notification to a second user device requesting access to the first document for the first user,

receive a first response signal from the second user device indicating whether the first user is permitted access to the first document,

based on the first response signal, send a second email notification to a third user device requesting access to the first document for the first user,

receive a second response signal indicating whether the first user is permitted access to the first document, and

sending a third email notification to the first user device indicating whether the first user is permitted access to the first document; and

the collaboration server is configured to, based on the third email notification, receive the digital rights management signal or a second digital rights management signal from the first user device.

7. The system of claim 1, further comprising a mail server, wherein:

the first request signal requests decryption, downloading or editing access to the first document; and

the mail server is configured to send an email notification to the first user device indicating whether the first user is authorized to decrypt, download or edit the first document.

8. The system of claim 1, wherein:

the digital rights management policy comprises a plurality of permissions;

the document server is configured to (i) receive a second request signal from a second user device requesting access to the first document be permitted for the first user, (ii) update the authorization level based on the second request signal, and (iii) update one of the plurality of permissions for the first document in the policy server; and

the collaboration server is configured to permit access to the first document based on the updated one of the plurality of permissions.

9. The system of claim 1, wherein the document server is configured to either (i) apply a watermark to the first document prior to viewing on the first user device, or (ii) cause the controller of the first user device to apply a watermark to the first document prior to viewing on the first user device.

10. The system of claim 1, further comprising a database server configured to store data for a dashboard, wherein the document server is configured to:

receive a link or second request signal from the first user device, wherein the link is to the dashboard or the second request signal requests access to the dashboard;

access the data in the database server; and

provide the data to the first user device.

11. The system of claim 10, wherein the document server is configured to either (i) apply a watermark over content being displayed on the web browser, or (ii) cause the controller of the first device to apply a watermark over the dashboard when viewed via the web browser, wherein the content includes for the dashboard.

12. A method comprising:

receiving a first request signal at a document server based on an input received at a web browser of a first user device;

generating a first authentication signal, wherein the first request signal requests access to a first document, and wherein the document server provides a cloud-based service for access to the first document;

based on the first authentication signal, determining a profile or authorization level of a first user of the first user device,

wherein the document server is configured to, based on the profile or the authorization level, transmit a second authentication signal to the first user device;

storing a digital rights management policy for the first user at a policy server;

based on the second authentication signal, receiving at a collaboration server a digital rights management signal from the first user device; and

based on the digital rights management policy of the first user, permitting a controller of the first user device to access the first document, wherein the collaboration server is separate from the document server.

13. The method of claim 12, further comprising:

receiving at the document server a second request signal from a second user device requesting a permission of the first user be changed for the first document;

updating permissions of the first user; and

based on the updated permissions of the first user, preventing via the collaboration server the controller of the first user device from accessing the first document.

14. The method of claim 12, further comprising:

based on the profile or authorization level, sending via the document server an instruction signal to a mail server; and

based on the instruction signal, sending from the mail server an email notification to the user device indicating whether the first user is authorized to access the first document.

15. The method of claim 12, further comprising:

receiving at the document server a username and password from the first user device;

based on the username and password, determining whether the first user is authorized to login;

sending to the document server an indication signal indicating whether the first user is authorized to login;

permitting login of the first user based on the indication signal; and

based on whether the first user is logged in and the authorization level of the first user, permit management access, collaboration access, or dashboard access to the first user.

16. The method of claim 12, further comprising:

receiving via the web browser a second document from the first user device;

encrypting the second document;

receiving an authorization signal from the first user device for a second user device, wherein the authorization signal indicates a second authorization level of a second user of the second user device; and

based on the second authorization level, permitting access to the second document by the second user.

17. The method of claim 12, further comprising:

sending via a mail server a first email notification to a second user device requesting access to the first document for the first user, wherein the first request signal requests viewing or downloading of the first document to the first user device;

receiving at the mail server a first response signal from the second user device indicating whether the first user is permitted access to the first document;

based on the first response signal, sending a second email notification to a third user device requesting access to the first document for the first user;

receiving a second response signal indicating whether the first user is permitted access to the first document;

sending a third email notification to the first user device indicating whether the first user is permitted access to the first document; and

based on the third email notification, receiving the digital rights management signal or a second digital rights management signal from the first user device.

18. The method of claim 12, further comprising sending an email notification to the first user device from a mail server indicating whether the first user is authorized to decrypt, download or edit the first document, wherein the first request signal requests decryption, downloading or editing access to the first document.

19. The method of claim 12, further comprising:

receiving at the document server a second request signal from a second user device requesting access to the first document be permitted for the first user;

updating the authorization level based on the second request signal, wherein the digital rights management policy comprises a plurality of permissions;

updating one of the plurality of permissions for the first document in the policy server; and

permitting via the collaboration server access to the first document based on the updated one of the plurality of permissions.

20. The method of claim 12, further comprising, via the document server, either (i) applying a watermark to the first document prior to viewing on the first user device, or (ii) causing the controller of the first user device to apply a watermark to the first document prior to viewing on the first user device.

21. The method of claim 12, further comprising:

storing data for a dashboard at a database server;

receiving a link or second request signal from the first user device at the document server, wherein the link is to the dashboard or the second request signal requests access to the dashboard;

accessing the data in the database server; and

providing the data to the first user device.

22. The method of claim 21, further comprising, via the document server, either (i) applying a watermark over content being displayed on the web browser, or (ii) causing the controller of the first device to apply a watermark over the dashboard when viewed via the web browser, wherein the content includes for the dashboard.

23. A first network device comprising:

a display configured to display a window of a web browser;

a controller configured to (i) via the window, access a virtual collaboration center system, and (ii) generate a first request signal requesting access to a document; and

a transceiver configured to (i) transmit the first request signal to a document server in the virtual collaboration center system, and (ii) based on the first request signal, receive an email notification from a mail server, wherein the email notification indicates whether access to the document is permitted,

wherein

the controller is configured to perform a digital rights management verification including generating a second request signal,

the transceiver is configured to (i) transmit the second request signal to a collaboration server, and (ii) based on the second request signal, receive a response signal from the collaboration server, and

the controller is configured to, based on the response signal, access the document.

24. The first network device of claim 23, further comprising a memory,

wherein the controller is configured to, based on an authorization level of a user of the first network device, access the document via the web browser or from the memory.

25. The first network device of claim 23, wherein:

the controller is configured to via the transceiver and prior to generating the first request signal, receive a second email notification from the mail server; and

the second email notification indicating an invite from a second network device to access the document.

26. The first network device of claim 23, wherein the controller is configured to, via the web browser, download the document from the document server or upload a second document to the document server.

27. The first network device of claim 23, wherein the email notification indicates whether the first network device or a first user of the first network device is authorized to access the document.

28. The first network device of claim 23, wherein:

the controller is configured to receive a username and password from a user of the first network device;

the transceiver is configured to transmit the username and password to the document server; and

based on the username and password, the email notification indicates whether the user of the first network device is authorized to access the document.

29. The first network device of claim 23, wherein:

the digital rights management verification includes the controller determining (i) whether the first network device is authorized to access the document, and (ii) a type of access permitted by the first network device; and

the type of access indicates whether the first network device is permitted to one or more of display, download, edit, decrypt, and share the document.

30. The first network device of claim 23, wherein:

the controller is configured to via the transceiver

upload a second document to the document server, and

transmit an information signal indicating (i) an authorization level for the second document, or (ii) a second network device permitted access to the second document;

the authorization level is indicative of (i) which one or more of a plurality of network devices are permitted to access the second document, and (ii) types of the access permitted to the one or more of the plurality of network devices; and

the plurality of network devices include the second network device.

31. The first network device of claim 30, wherein:

the information signal indicates a type of permitted access for the second network device; and

the type of permitted access indicates whether the second network device is permitted to one or more of display, download, edit, decrypt, and share the second document.

32. The first network device of claim 23, wherein the controller is configured to (i) via the web browser, transmit a signal indicating a link for a dashboard to the document server, (ii) receive data corresponding to the dashboard from the document server, and (iii) display the data via the web browser.

33. The first network device of claim 32, wherein the controller is configured to overlay a watermark on the data displayed via the web browser.

34. The first network device of claim 23, wherein the controller is configured to overlay a watermark on the document when display the document.

35. A method of operating a first network device, the method comprising:

displaying a window of a web browser;

via the window, accessing a virtual collaboration center system;

generating a first request signal requesting access to a document;

transmitting the first request signal to a document server in the virtual collaboration center system;

based on the first request signal, receiving an email notification from a mail server, wherein the email notification indicates whether access to the document is permitted;

performing a digital rights management verification including generating a second request signal;

transmitting the second request signal to a collaboration server;

based on the second request signal, receiving a response signal from the collaboration server; and

based on the response signal, accessing the document.

36. The method of claim 35, further comprising, based on an authorization level of a user of the first network device, accessing the document via the web browser or from a memory in the first network device.

37. The method of claim 35, further comprising, prior to generating the first request signal, receiving a second email notification from the mail server, wherein the second email notification indicates an invite from a second network device to access the document.

38. The method of claim 35, further comprising, via the web browser, downloading the document from the document server or upload a second document to the document server.

39. The method of claim 35, wherein the email notification indicates whether the first network device or a first user of the first network device is authorized to access the document.

40. The method of claim 35, further comprising:

receiving a username and password from a user of the first network device; and

transmitting the username and password to the document server,

wherein, based on the username and password, the email notification indicates whether the user of the first network device is authorized to access the document.

41. The method of claim 35, wherein:

the digital rights management verification includes determining (i) whether the first network device is authorized to access the document, and (ii) a type of access permitted by the first network device; and

the type of access indicates whether the first network device is permitted to one or more of display, download, edit, decrypt, and share the document.

42. The method of claim 35, further comprising:

uploading a second document to the document server; and

transmitting an information signal indicating (i) an authorization level for the second document, or (ii) a second network device permitted access to the second document,

wherein the authorization level is indicative of (i) which one or more of a plurality of network devices are permitted to access the second document, and (ii) types of the access permitted to the one or more of the plurality of network devices,

wherein the plurality of network devices include the second network device.

43. The method of claim 42, wherein:

the information signal indicates a type of permitted access for the second network device; and

the type of permitted access indicates whether the second network device is permitted to one or more of display, download, edit, decrypt, and share the second document.

44. The method of claim 35, further comprising, via the web browser:

transmitting a signal indicating a link for a dashboard to the document server;

receiving data corresponding to the dashboard from the document server; and

displaying the data via the web browser.

45. The method of claim 44, further comprising overlaying a watermark on the data displayed via the web browser.

46. The method of claim 35, further comprising overlaying a watermark on the document when display the document.

47. A system comprising:

a plurality of physical servers, wherein the plurality of physical servers implement a plurality of virtual collaboration center instances, wherein each of the plurality of virtual collaboration instances has a respective set of virtual servers, such that one or more of the plurality of physical servers are implementing two or more of the virtual servers; and

a configurator controller implemented on one of the plurality of physical servers and configured to create the plurality of virtual collaboration center instances, wherein during creation of each of the virtual collaboration center instances, the configurator controller is configured to

receive a signal from a first user device of an initiator indicating whether a counterpart to an administrator is involved,

instruct a mail server to send a first set of one or more emails to the administrator or the counterpart, wherein the plurality of physical servers includes the mail server,

based on the first set of one or more emails, receive configuration information of the corresponding virtual collaboration center instance (i) from the first user device or a third user device of the administrator, or (ii) from a second user device of the counterpart,

create the corresponding virtual collaboration center instance and administrator accounts, and

send a second set of one or more emails to the administrator or counterpart with links to the corresponding virtual collaboration center instance.

48. The system of claim 47, wherein, if the counterpart is involved in one of the plurality of virtual collaboration center instances, the configurator controller is configured to:

receive a first signal from the first user device or the third user device and a second signal from the second user device, wherein the first signal and the second signal indicate a name of the one of the plurality of virtual collaboration center instances, a name of the administrator, a name of the counterpart, and email addresses of the administrator and the counterpart; and

generate the first set of one or more emails based on the first signal and the second signal.

49. The system of claim 47, wherein, if the counterpart is involved in one of the plurality of virtual collaboration center instances, the configurator controller is configured to:

receive a first signal from the first user device or the third user device indicating whether the one of the plurality of virtual collaboration center instances is to include dashboard data;

receive a second signal from the second user device indicating whether the one of the plurality of virtual collaboration center instances is to include the dashboard data; and

if the first signal matches the second signal, proceed with creating the one of the plurality of virtual collaboration center instances.

50. The system of claim 47, wherein, if the counterpart is involved in one of the plurality of virtual collaboration center instances, the configurator controller is configured to:

receive a first signal from the first user device or the third user device indicating a first security level of a document involved in the one of the plurality of virtual collaboration center instances;

receive a second signal from the second user device indicating a second security level of the document involved in the one of the plurality of virtual collaboration center instances; and

if the first security level matches the second security level, proceed with creating the one of the plurality of virtual collaboration center instances.

51. The system of claim 47, wherein, if the counterpart is involved in one of the plurality of virtual collaboration center instances, the configurator controller is configured to:

receive a first signal from the first user device or the third user device indicating whether a document is to be purged at term end of the one of the plurality of virtual collaboration center instances;

receive a second signal from the second user device indicating whether the document is to be purged at the term end of the one of the plurality of virtual collaboration center instances; and

if the first signal matches the second signal, proceed with creating the one of the plurality of virtual collaboration center instances.

52. The system of claim 47, wherein, if the counterpart is involved in one of the plurality of virtual collaboration center instances, the configurator controller is configured to:

receive a first signal from the first user device or the third user device indicating a first length of a term of the one of the plurality of virtual collaboration center instances;

receive a second signal from the second user device indicating a second length of a term of the one of the plurality of virtual collaboration center instances; and

if the first length matches the second length, proceed with creating the one of the plurality of virtual collaboration center instances.

53. The system of claim 47, wherein, if the counterpart is involved in one of the plurality of virtual collaboration center instances, the configurator controller is configured to:

receive a first signal from the first user device or the third user device indicating a first set of proprietary notices for the one of the plurality of virtual collaboration center instances;

receive a second signal from the second user device indicating a second set of proprietary notices for the one of the plurality of virtual collaboration center instances; and

if the first set of proprietary notices matches the second set of proprietary notices, proceed with creating the one of the plurality of virtual collaboration center instances.

54. The system of claim 47, wherein the configurator controller is configured to save the configuration information as a machine readable file and as a user readable file.

55. The system of claim 54, wherein the configurator controller is configured to, based on the machine readable file, configure one of the plurality of virtual collaboration center instances and initiate creation of the corresponding ones of the administrator accounts.

56. The system of claim 55, wherein the configurator controller is configured to, based on the creation of the corresponding ones of the administrator accounts, instruct the mail server to send the second set of one or more emails to (i) the first user device or the third user device, and (ii) the second user device.

57. The system of claim 56, wherein the configurator controller is configured to:

for the first user device or the third user device and based on the second set of one or more emails, follow a first link to the one of the plurality of virtual collaboration center instances and initiate creation of a first user account; and

for the second user device and based on the second set of one or more emails, follow a second link to the one of the plurality of virtual collaboration center instances and initiate creation of a second user account.

58. A method of operating a plurality of physical servers, wherein the plurality of physical servers implement a plurality of virtual collaboration center instances, wherein each of the plurality of virtual collaboration instances has a respective set of virtual servers, such that one or more of the plurality of physical servers are implementing two or more of the virtual servers, the method comprising:

creating the plurality of virtual collaboration center instances via a configurator controller implemented on one of the plurality of physical servers, wherein creation of each of the virtual collaboration center instances includes;

receiving a signal from a first user device of an initiator indicating whether a counterpart to an administrator is involved;

instructing a mail server to send a first set of one or more emails to the administrator or the counterpart, wherein the plurality of physical servers includes the mail server;

based on the first set of one or more emails, receiving configuration information of the corresponding virtual collaboration center instance (i) from the first user device or a third user device of the administrator, or (ii) from a second user device of the counterpart; and

creating the corresponding virtual collaboration center instance and administrator accounts; and

sending a second set of one or more emails to the administrator or counterpart with links to the corresponding virtual collaboration center instance.

59. The method of claim 58, further comprising, if the counterpart is involved in one of the plurality of virtual collaboration center instances:

receiving a first signal from the first user device or the third user device and a second signal from the second user device, wherein the first signal and the second signal indicate a name of the one of the plurality of virtual collaboration center instances, a name of the administrator, a name of the counterpart, and email addresses of the administrator and the counterpart; and

generating the first set of one or more emails based on the first signal and the second signal.

60. The method of claim 58, further comprising, if the counterpart is involved in one of the plurality of virtual collaboration center instances:

receiving a first signal from the first user device or the third user device indicating whether the one of the plurality of virtual collaboration center instances is to include dashboard data;

receiving a second signal from the second user device indicating whether the one of the plurality of virtual collaboration center instances is to include the dashboard data; and

if the first signal matches the second signal, proceeding with creating the one of the plurality of virtual collaboration center instances.

61. The method of claim 58, further comprising, if the counterpart is involved in one of the plurality of virtual collaboration center instances:

receiving a first signal from the first user device or the third user device indicating a first security level of a document involved in the one of the plurality of virtual collaboration center instances;

receiving a second signal from the second user device indicating a second security level of the document involved in the one of the plurality of virtual collaboration center instances; and

if the first security level matches the second security level, proceeding with creating the one of the plurality of virtual collaboration center instances.

62. The method of claim 58, if the counterpart is involved in one of the plurality of virtual collaboration center instances:

receiving a first signal from the first user device or the third user device indicating whether a document is to be purged at term end of the one of the plurality of virtual collaboration center instances;

receiving a second signal from the second user device indicating whether the document is to be purged at the term end of the one of the plurality of virtual collaboration center instances; and

if the first signal matches the second signal, proceeding with creating the one of the plurality of virtual collaboration center instances.

63. The method of claim 58, if the counterpart is involved in one of the plurality of virtual collaboration center instances:

receiving a first signal from the first user device or the third user device indicating a first length of a term of the one of the plurality of virtual collaboration center instances;

receiving a second signal from the second user device indicating a second length of a term of the one of the plurality of virtual collaboration center instances; and

if the first length matches the second length, proceeding with creating the one of the plurality of virtual collaboration center instances.

64. The method of claim 58, further comprising, if the counterpart is involved in one of the plurality of virtual collaboration center instances:

receiving a first signal from the first user device or the third user device indicating a first set of proprietary notices for the one of the plurality of virtual collaboration center instances;

receiving a second signal from the second user device indicating a second set of proprietary notices for the one of the plurality of virtual collaboration center instances; and

if the first set of proprietary notices matches the second set of proprietary notices, proceeding with creating the one of the plurality of virtual collaboration center instances.

65. The method of claim 58, further comprising saving the configuration information as a machine readable file and as a user readable file.

66. The method of claim 65, further comprising, based on the machine readable file, configuring one of the plurality of virtual collaboration center instances and initiate creation of the corresponding ones of the administrator accounts.

67. The method of claim 66, further comprising, based on the creation of the corresponding ones of the administrator accounts, instructing the mail server to send the second set of one or more emails to (i) the first user device or the third user device, and (ii) the second user device.

68. The method of claim 67, further comprising:

for the first user device or the third user device and based on the second set of one or more emails, following a first link to the one of the plurality of virtual collaboration center instances and initiate creation of a first user account; and

for the second user device and based on the second set of one or more emails, following a second link to the one of the plurality of virtual collaboration center instances and initiate creation of a second user account.