Controlling the distribution of information

• US 7,475,242 B2
• Filed: 12/18/2001
• Issued: 01/06/2009
• Est. Priority Date: 12/18/2001
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Baird, Jeffrey C., Blair, Timothy P., Baird, Roger T.
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Simitoski; Michael J
• Application Number:
  US10/024,964
• Publication Number:
  US 20030115481A1
• Time in Patent Office: 2,576 Days
• Field of Search: 713/154, 713/165, 713/166, 707/9, 726/28, 726/4, 715/233, 715/741
• US Class Current: 713/166
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control

Abstract

A source generates a request to receive a document. A determination is made regarding an authorization level associated with the source of the request. Another determination is made as to an authorization level required to view the requested document. If the source of the request is authorized to receive the requested document, the requested document is transmitted to the source of the request. If the source of the request is not authorized to receive the requested document, the unauthorized portions of the requested document are redacted and the redacted version of the requested document is transmitted to the source of the request.

Claims

1. A method comprising:

receiving with a server a request from a remote computer for a document;

identifying on the server a source of the request;

determining on the server an authorization level associated with the source of the request;

determining on the server an authorization level required to view the requested document;

if the source of the request is authorized to view the entire requested document, transmitting the requested document from the server to the remote computer via a network; and

if the source of the request is not authorized to view the entire requested document, redacting unauthorized portions of the requested document by visually blurring the unauthorized portions on the server and transmitting the redacted version of the requested document from the server to the remote computer via the network.

2. A method as recited in claim 1 wherein determining an authorization level required to view the requested document includes determining a plurality of required authorization levels, wherein each required authorization level is associated with a different portion of the requested document.

3. A method as recited in claim 1 wherein the requested document includes an image, and wherein the image has an associated required authorization level.

4. A method as recited in claim 1 wherein identifying a source of the request includes identifying a user ID associated with the source of the request.

5. A method as recited in claim 1 wherein determining an authorization level required to view the requested document includes determining an authorization level required to view the complete requested document.

6. A method as recited in claim 1 wherein determining an authorization level required to view the requested document includes determining an authorization level required to view at least a portion of the requested document.

7. The method of claim 1, wherein determining an authorization level associated with the source comprises determining whether a viewing fee has been paid.

8. A computer-readable media having stored thereon a plurality of instructions that, when executed by a processor, cause the processor to perform acts comprising:

identifying with a server a source of a request for a document received from a remote computer;

determining on the server an authorization level associated with the source of the request;

determining on the server an authorization level required to view the entire requested document;

if the source of the request is authorized to view the entire requested document, transmitting the requested document from the server to the remote computer via a network; and

if the source of the request is not authorized to view the entire requested document, redacting unauthorized portions of the requested document by visually blurring the unauthorized portions on the server and transmitting the redacted version of the requested document from the server to the remote computer via the network.

9. A computer-readable media as recited in claim 8 wherein determining an authorization level required to view the requested document includes determining a plurality of required authorization levels, wherein each required authorization level is associated with a different portion of the requested document.

10. A computer-readable media as recited in claim 8 wherein identifying a source of the request includes identifying a user ID associated with the source of the request.

11. A computer-readable media as recited in claim 8, wherein determining an authorization level required to view the entire requested document comprises determining whether a viewing fee has been paid.