Monitoring and managing user access to content via a universally accessible database

• US 6,658,415 B1
• Filed: 04/28/2000
• Issued: 12/02/2003
• Est. Priority Date: 04/28/2000
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Paolini, Michael A., Brown, Michael Wayne, Lawrence, Kelvin Roderick
• Primary Examiner(s): Corrielus, Jean M.
• Application Number:
  US09/560,394
• Time in Patent Office: 1,313 Days
• Field of Search: 707/1, 707/3, 707/5, 707/4, 707/200, 707/103, 707/104, 707/9, 707/10, 701/207, 701/208, 713/201, 713/200, 709/328, 709/203, 709/225, 709/229, 709/217, 340/531, 340/541
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

In accordance with the present invention, multiple authority-designated settings are accessed at an authority-enabled system via a network from a universally accessible database according to a particular universal identifier associated with a particular user. The particular user is only allowed access to a selection of multiple of types of content from the authority-enabled system that are enabled according to the authority-designated settings received at the authority-enabled system, such that an authority-enabled system enforces an authority-designated access policy for a particular user received via a universally accessible database.

Claims

1. A method for enforcing an authority-designated access policy, said method comprising the steps of:

accessing a plurality of authority-designated settings via a network from a universally accessible database according to a particular universal identifier associated with a particular user at a particular authority-enabled system, wherein said plurality of authority-designated settings designate levels of access to particular types of content as determined by at least one of a plurality of authorities to said particular user;

comparing said authority-designated settings at said particular authority-enabled system with a plurality of types of content provided by said particular authoritys enabled system; and

only allowing access for said particular user to a selection of said plurality of types of content that are enabled according to said authority-designated settings received at said particular authority-enabled system, such that said particular authority-enabled system enforces an authority-designated access policy for a particular user at said particular authority-enabled system.

2. The method for enforcing an authority-designated access policy according to claim 1, said method further comprising the steps of:

controlling output of said selection of types of content to an output interface controlled by said particular authority-enabled system.

3. The method for enforcing an authority-designated access policy according to claim 1, said method further comprising the steps of:

receiving a request for access to a particular type of content at said authority-enabled system from said particular user;

determining whether or not said particular type of content is included within said selection of said plurality of types of content; and

transmitting a record of authorization from said particular authority-enabled system via said network to said universally accessible database according to said particular universal identifier, in response to determining that said particular type of content is included within said selection of said particular types of content.

4. The method for enforcing an authority-designated access policy according to claim 3, said method further comprising the steps of:

recording said request for access to said selection of said plurality of types of content at a customer history database according to said particular user at said particular authority-enabled system.

5. The method for enforcing an authority-designated access policy according to claim 1, said step of accessing a plurality of authority-designated settings from a universally accessible database according to a particular universal identifier associated with a particular user, further comprising the steps of:

accessing said plurality of authority-designated settings from said universally accessible database at a remote server system accessible via a network according to said particular universal identifier that controls said particular authority-enabled system according to a particular authorization policy.

6. The method for enforcing an authority-designated access policy according to claim 5, said method further comprising the step of:

adjusting authorization requirements for said particular authority-enabled system at said remote server system.

7. The method for enforcing an authority-designated access policy according to claim 5, said method further comprising the step of:

controlling a plurality of authority-enabled systems accessible via said network by said remote server system according to said particular authorization policy.

8. A system for enforcing an authority-designated access policy, said system comprising:

means for accessing a plurality of authority-designated settings via a network from a universally accessible database according to a particular universal identifier associated with a particular user at a particular authority-enabled system, wherein said plurality of authority-designated settings designate levels of access to particular types of content as determined by a plurality of authorities to said particular user;

means for comparing said authority-designated settings at said particular authority-enabled system with a plurality of types of content provided by said particular authority-enabled system; and

means for only allowing access for said particular user to a selection of said plurality of types of content that are enabled according to said authority-designated settings received at said particular authority-enabled system, such that said particular authority-enabled system enforces an authority-designated access policy for a particular user at said particular authority-enabled system.

9. The system for enforcing an authority-designated access policy according to claim 8, said system further comprising:

means for controlling output of said selection of types of content to an output interface controlled by said particular authority-enabled system.

10. The system for enforcing an authority-designated access policy according to claim 8, said system further comprising:

means for receiving a request for a access to a particular type of content at said authority-enabled system from said particular user;

means for determining whether or not said particular type of content is included within said selection of said plurality of types of content; and

means for transmitting a record of authorization from said particular authority-enabled system via said network to said universally accessible database according to said particular universal identifier, in response to determining that said particular type of content is included within said selection of said particular types of content.

11. The system for enforcing an authority-designated access policy according to claim 10, said system further comprising:

means for recording said request for access to said selection of said plurality of types of content at a customer history database according to said particular user at said particular authority-enabled system.

12. The system for enforcing an authority-designated access policy according to claim 8, said means for accessing a plurality of authority-designated settings from a universally accessible database according to a particular universal identifier associated with a particular user, further comprising:

means for accessing said plurality of authority-designated settings from said universally accessible database at a remote server system accessible via a network according to said particular universal identifier that controls said particular authority-enabled system according to a particular authorization policy.

13. The system for enforcing an authority-designated access policy according to claim 12, said system further comprising:

means for adjusting authorization requirements for said particular authority-enabled system at said remote server system.

14. The system for enforcing an authority-designated access policy according to claim 12, said system further comprising:

means for controlling a plurality of authority-enabled systems accessible via said network by said remote server system according to said particular authorization policy.

15. A program for enforcing an authority-designated access policy, residing on a computer usable medium having computer readable program code means, said program comprising:

means for accessing a plurality of authority-designated settings via a network from a universally accessible database according to a particular universal identifier associated with a particular user at a particular authority-enabled system, wherein said plurality of authority-designated settings designate levels of access to particular types of content as determined by a plurality of authorities to said particular user;

means for comparing said authority-designated settings at said particular authority-enabled system with a plurality of types of content provided by said particular authority-enabled system; and

means for only allowing access for said particular user to a selection of said plurality of types of content that are enabled according to said authority-designated settings received at said particular authority-enabled system, such that said particular authority-enabled system enforces an authority-designated access policy for a particular user at said particular authority-enabled system.

16. The program for enforcing an authority-designated access policy according to claim 15, said program further comprising:

means for controlling output of said selection of types of content to an output interface controlled by said particular authority-enabled system.

17. The program for enforcing an authority-designated access policy according to claim 15, said program further comprising:

means for receiving a request for a access to a particular type of content at said authority-enabled system from said particular user;

means for determining whether or not said particular type of content is included within said selection of said plurality of types of content; and

means for transmitting a record of authorization from said particular authority-enabled system via said network to said universally accessible database according to said particular universal identifier, in response to determining that said particular type of content is included within said selection of said particular types of content.

18. The program for enforcing an authority-designated access policy according to claim 17, said program further comprising:

means for recording said request for access to said selection of said plurality of types of content at a customer history database according to said particular user at said particular authority-enabled system.

19. The program for enforcing an authority-designated access policy according to claim 15, said program further comprising:

means for accessing said plurality of authority-designated settings from said universally accessible database at a remote server system accessible via a network according to said particular universal identifier that controls said particular authority-enabled system according to a particular authorization policy.

20. The program for enforcing an authority-designated access policy according to claim 19, said program further comprising:

means for adjusting authorization requirements for said particular authority-enabled system at said remote server system.

21. The program for enforcing an authority-designated access policy according to claim 19, said program further comprising:

means for controlling a plurality of authority-enabled systems accessible via said network by said remote server system according to said particular authorization policy.

22. A method for managing access to content by a user, said method comprising the steps of:

receiving entries for a plurality of authority-designated settings from a plurality of allowable authorities to said particular user at a universally accessible database according to a particular universal identifier associated with said particular user, wherein said plurality of authority-designated settings designate levels of access to particular types of content;

transmitting said plurality of authority-designated settings from said universally accessible database according to said particular universal identifier to a plurality of authority-enabled systems via a network, wherein each of said plurality of authority-enabled systems controls access to at least one type of content;

receiving and storing at said universally accessible database according to said particular universal identifier an indication of authorization for said particular user to said at least one type of content controlled by one of said plurality of authority-enabled systems, such that authorization for content to said particular user is monitored at said universally accessible database according to said particular universal identifier associated with said particular users.

23. The method for managing access to content by a user according to claim 22, said step of receiving entries for a plurality of authority-designated settings from a plurality of allowable authorities to said particular user at a portable data storage medium associated with said particular user, further comprising the steps of:

transmitting a request for access to a particular type of content from said universally accessible database according to said particular universal identifier via said network to a remote computer system accessible to one of said plurality of allowable authorities; and

receiving an entry for a one-time access to said particular type of content from said remote computer system by said one of said plurality of allowable authorities at said universally accessible database according to said particular universal identifier.

24. The method for managing access to content by a user according to claim 22, said step of receiving and storing at said universally accessible database according to said particular universal identifier an indication of authorization for said particular user to said at least one type of content controlled by one of said plurality of authority-enabled systems, further comprising the step of:

receiving said indication of authorization that indicates said particular user was allowed access to said at least one type of content controlled by said one of said plurality of authority-enabled systems.

25. The method for managing access to content by a user according to claim 22, said step of receiving and storing at said universally accessible database according to said particular universal identifier an indication of authorization for said particular user to said at least one type of content controlled by one of said plurality of authority-enabled systems, further comprising the step of:

receiving said indication of authorization that indicates said particular user was denied access to said at least one type of content controlled by said one of said plurality of authority-enabled systems.

26. The method for managing access to content by a user according:

to claim 22, said method further comprising the steps of;

receiving a request from a particular authority for access to a plurality of indications of authorization stored at said universally accessible database according to said particular identifier; and

only allowing said particular authority to access said plurality of indications of authorization that were received in response to authority-designated settings by that said particular authority.

27. A system for managing access to content by a user, said system comprising:

means for receiving entries for a plurality of authority-designated settings from a plurality of allowable authorities to said particular user at a universally accessible database according to a particular universal identifier associated with said particular user, wherein said plurality of authority-designated settings designate levels of access to particular types of content;

means for transmitting said plurality of authority-designated settings from said universally accessible database according to said particular universal identifier to a plurality of authority-enabled systems via a network, wherein each of said plurality of authority-enabled systems controls access to at least one type of content;

means for receiving and storing at said universally accessible database according to said particular universal identifier an indication of authorization for said particular user to said at least one type of content controlled by one of said plurality of authority-enabled systems, such that authorization for content to said particular user is monitored at said universally accessible database according to said particular universal identifier associated with said particular user.

28. The system for managing access to content by a user according to claim 27, said means for receiving entries for a plurality of authority-designated settings from a plurality of allowable authorities to said particular user at a portable data storage medium associated with said particular user, further comprising:

means for transmitting a request for access to a particular type of content from said universally accessible database according to said particular universal identifier via said network to a remote computer system accessible to one of said plurality of allowable authorities; and

means for receiving an entry for a one-time access to said particular type of content from said remote computer system by said one of said plurality of allowable authorities at said universally accessible database according to said particular universal identifier.

29. The system for managing access to content by a user according to claim 27, said means for receiving and storing at said universally accessible database according to said particular universal identifier an indication of authorization for said particular user to said at least one type of content controlled by one of said plurality of authority-enabled systems, further comprising:

means for receiving said indication of authorization that indicates said particular user was allowed access to said at least one type of content controlled by said one of said plurality of authority-enabled systems.

30. The system for managing access to content by a user according to claim 27, said means for receiving and storing at said universally accessible database according to said particular universal identifier an indication of authorization for said particular user to said at least one type of content controlled by one of said plurality of authority-enabled systems, further comprising:

means for receiving said indication of authorization that indicates said particular user was denied access to said at least one type of content controlled by said one of said plurality of authority-enabled systems.

31. The system for managing access to content by a user according to claim 27, said system further comprising:

means for receiving a request from a particular authority for access to a plurality of indications of authorization stored at said universally accessible database according to said particular identifier; and

means for only allowing said particular authority to access said plurality of indications of authorization that were received in response to authority-designated settings by that said particular authority.

32. A system for managing access to content by a user, residing on a computer usable medium having computer readable program code means, said system comprising:

means for receiving entries for a plurality of authority-designated settings from a plurality of allowable authorities to said particular user at a universally accessible database according to a particular universal identifier associated with said particular user, wherein said plurality of authority-designated settings designate levels of access to particular types of content;

means for transmitting said plurality of authority-designated settings from said universally accessible database according to said particular universal identifier to a plurality of authority-enabled systems via a network, wherein each of said plurality of authority-enabled systems controls access to at least one type of content;

means for receiving and storing at said universally accessible database according to said particular universal identifier an indication of authorization for said particular user to said at least one type of content controlled by one of said plurality of authority-enabled systems, such that authorization for content to said particular user is monitored at said universally accessible database according to said particular universal identifier associated with said particular user.

33. The program for managing access to content by a user according to claim 32, said program further comprising:

means for transmitting a request for access to a particular type of content from said universally accessible database according to said particular universal;

identifier via said network to a remote computer system accessible to one of said plurality of allowable authorities; and

means for receiving an entry for a one-time access to said particular type of content from said remote computer system by said one of said plurality of allowable authorities at said universally accessible database according to said particular universal identifier.

34. The program for managing access to content by a user according to claim 32, said program further comprising:

means for receiving said indication of authorization that indicates said particular user was allowed access to said at least one type of content controlled by said one of said plurality of authority-enabled systems.

35. The program for managing access to content by a user according to claim 32, said program further comprising:

means for receiving said indication of authorization that indicates said particular user was denied access to said at least one type of content controlled by said one of said plurality of authority-enabled systems.

36. The program for managing access to content by a user according to claim 32, said program further comprising:

means for receiving a request from a particular authority for access to a plurality of indications of authorization stored at said universally accessible database according to said particular identifier; and

means for only allowing said particular authority to access said plurality of indications of authorization that were received in response to authority-designated settings by that said particular authority.