Shared-data environment in which each file has independent security properties

• US 5,930,801 A
• Filed: 10/30/1997
• Issued: 07/27/1999
• Est. Priority Date: 03/07/1997
• Status: Expired due to Term

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Inventors: Garnaat, Mitchell, Falkenhainer, Brian C.
• Primary Examiner(s): Amsbury, Wayne
• Assistant Examiner(s): PARDO, THUY N
• Application Number:
  US08/961,002
• Time in Patent Office: 635 Days
• Field of Search: 707/1, 707/6, 707/8, 707/10, 707/2, 707/102, 707/103, 395/200.59, 395/187.01, 395/680, 395/200.49
• US Class Current: 1/1
• CPC Class Codes: G06F 12/1483 using an access-table, e.g. matrix or list
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: Y10S 707/99932 Access augmentation or optimizing
• CPC Class Codes: Y10S 707/99944 Object-oriented database structure

Abstract

A shared-data system, such as could be used with an intranet or internet, in which a large quantity of files available in a file system are each individually assigned an identification number. This identification number is then converted into a non-location-based URL, such as a simple scalar number, which can be retained in a user'"'"'s network browser. Further, each file has associated therewith an individual data object, by which an owner of a particular file can specify read and write access to the file. The system enables new users to create their own accounts to access the file system, without causing a general security breach. The use of location-independent URLs to identify files enables individual users to organize the files independently, and also avoids "stale" web links which occur when websites are reorganized.

Claims

1. A method of managing a plurality of files stored in an electronic file system, comprising the steps of:

assigning to each file in the file system a unique identification number;

assigning to a user with access to any file in the file system a unique identification number;

providing an object database, the object database including therein an object associated with each file in the file system, the object including the identification number of the file and an identification number of a user having access to the file;

providing a software mechanism whereby each identification number assigned to a file is associated with a location-independent URL;

converting a location-based URL of a file to a location-independent URL including an identification number usable by the software mechanism; and

when a user enters a URL of a desired file, determining the identification number of the desired file, determining the identification number of the user, and consulting the object associated with the desired file to determine if the user has access to the file.

2. The method of claim 1, each user having associated therewith a memory for retaining URLs, and further comprising the step of

causing a user to retain in memory a location-independent URL for a file desired by the user.

3. The method of claim 1, an object in the object database including identification numbers of a plurality of files.

4. The method of claim 1, further comprising the step of providing a software mechanism whereby a user can create an object having an identification number of a file in the file system.

5. The method of claim 4, further comprising the step of providing a software mechanism whereby any user having an identification number assigned thereto can create an object having an identification number of a file in the file system.

6. The method of claim 1, further comprising the step of providing a software mechanism whereby a user can request an identification number be assigned to him.

7. The method of claim 6, further comprising the step of, when a user requests an identification number, generating the identification number and appending the identification number to a network address of the user.