ELECTRONIC DOCUMENT ACCESS VALIDATION

• US 20180218133A1
• Filed: 01/31/2017
• Published: 08/02/2018
• Est. Priority Date: 01/31/2017
• Status: Active Grant

• Current Assignee: Ent Services Development Corporation LP (DXC Technology Company)
• Original Assignee: Ent Services Development Corporation LP (DXC Technology Company)
• Inventors: Hussain, Mohammed
• Granted Patent: US 10,650,153 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

A document management computer system can validate a user with validation codes sent through a plurality of communication modes. The validated user may be provided with access to a stored electronic document.

Claims

1. A document management computer system comprising:

at least one processor;

a memory having stored thereon machine readable instructions which, when executed by the at least one processor, causes the system to;

receive a request to provide a user with access to a stored electronic document, wherein the request includes user contact information facilitating contacting the user via a plurality of communication modes;

send a first message to the user according to the user contact information through a first communication mode of the plurality of communication modes, wherein the first message includes a first validation code and a link to the stored electronic document;

in response to the link being accessed with the first validation code,

generate a second validation code, and

send a second message to the user according to the user contact information through a second communication mode of the plurality of communication modes, wherein the second message includes the second validation code; and

in response to validating the user with the second validation code, provide access to the stored electronic document.

2. The document management computer system of claim 1, wherein at least one of the first validation code and the second validation code are valid for a temporary period of time from being generated.

3. The document management computer system of claim 1, wherein in response to receiving the request, the system is caused to:

store the user contact information in an entry in a table;

generate the first validation code; and

store the first validation code in the table entry for the user contact information.

4. The document management computer system of claim 3, wherein the link is accessed by an electronic device, and the system is caused to:

receive a code from the electronic device;

identify the user associated with the received code;

retrieve the first validation code from the table based on the identified user;

determine whether the received code from the electronic device matches the first validation code;

in response to the received code matching the first validation code, send the second message; and

in response to the received code not matching the first validation code, deny access to the stored electronic document.

5. The document management computer system of claim 4, in response to the received code matching the first validation code, the system is caused to:

generate the second validation code; and

send the second message with the second validation code.

6. The document management computer system of claim 5, wherein the system is caused to:

receive a second code in response to sending the second message;

determine whether the second code matches the second validation code;

in response to the second code matching the second validation code, allow access to the stored electronic document; and

in response to the second code not matching the second validation code, deny access to the stored electronic document.

7. The document management computer system of claim 5, wherein the second validation code is randomly generated in response to the received code matching the first validation code.

8. The document management computer system of claim 1, wherein the plurality of communication modes comprise a plurality of email, text, and voice call.

9. A computer-implemented method for electronic document access management, the method executed by at least one processor and comprising:

receiving a request to provide a user with access to a stored electronic document;

generating a first validation code to validate the user;

sending a first message, including the first validation code, to the user through a first communication mode;

receiving a request for the user to access the stored document, wherein the request includes a first code;

determining whether the first code matches the first validation code;

if the first code matches the first validation code, generating a second validation code to validate the user;

sending a second message to the user through a second communication mode different from the first communication mode;

receiving a second code responsive to the sending of the second message;

determining whether the second code matches the first validation code; and

if the second code matches the second validation code, providing the user with access to the stored electronic document.

10. The computer-implemented method of claim 9, wherein at least one of the first validation code and the second validation code are valid for a temporary period of time from being generated.

11. The computer-implemented method of claim 9, wherein the first and second communication modes comprise at least one of email, text, and voice call.

12. The computer-implemented method of claim 9, wherein if the first code does not match the first validation code or the second code does not match the second validation code, denying the user access to the stored electronic document.

13. The computer-implemented method of claim 9, wherein receiving a request comprises receiving the request from a first user authorized to access the stored electronic document, and the request is for providing a second user with access to the stored electronic document.

14. A document management system comprising:

at least one processor;

a memory having stored thereon machine readable instructions which, when executed by the at least one processor, causes the system to;

receive a request from a first user of the document management system to provide a second user with access to a stored electronic document, wherein the first user is a registered user with privileges to access the stored electronic document via the document management system, and the second user does not have privileges to access the stored electronic document via the document management system;

invoke sending messages, including first and second validation codes, to the second user at different times via a plurality of communication modes;

receive codes responsive to sending the messages;

compare the received codes to the first and second validation codes to validate the second user; and

providing the second user with access to the stored electronic document if the received codes match the first and second validation codes.

15. The document management system of claim 14, wherein the plurality of communication modes comprise a plurality of email, text, and voice call.