Method and system for personal policy-controlled automated response to information transfer requests

• US 7,631,048 B2
• Filed: 09/24/2003
• Issued: 12/08/2009
• Est. Priority Date: 09/24/2003
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: De Treville, John
• Primary Examiner(s): Dollinger; Tonia L
• Assistant Examiner(s): BILGRAMI, ASGHAR H
• Application Number:
  US10/671,185
• Publication Number:
  US 20050066010A1
• Time in Patent Office: 2,267 Days
• Field of Search: 709/207, 709/225, 709/223, 705/75
• US Class Current: 709/207
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A user'"'"'s computer system sends a policy controlled response to an information request from a requesting computing system. A user policy is set by the user, and the user policy defines parameters, i.e. rules and values, for use in controlling the response information to be provided in reply to information requests from the requesting computing system. When an information request is received from the requesting computing system, parameters of the user policy are applied to the information request to allocate a response and to set a response level based on the user policy. A response based on the response level is created and sent to the requesting computing system. In one embodiment of the invention a policy engine system in a computing cell phone controls automated responses from the computing cell phone to a requesting computing system. The controlled responses are based on a user policy specified by the user of the computing cell phone. The user policy is stored in a database. An apply policy module applies rules of the user policy to information requests from the requesting computing system. It also filters stored response information to create a filtered response for the requesting computing system based on the rules of the user policy. A delegate response module sends the filtered response along with a use policy to the requesting computing system. The use policy controls use of the information in the filtered response by the requesting computing system.

Claims

1. In a computer system, a method for sending from the computer system a user policy-controlled automated response to an information transfer request from a requesting computing system, the method comprising:

setting a user policy controlled by a user, the user policy defining parameters for use in controlling an automated reply to information transfer requests from the requesting computing system;

receiving the information transfer request from the requesting computing system;

applying parameters of the user policy to the information transfer request to allocate a response and to set a response level based on the user policy in order to provide the user policy-controlled automated response to the requesting computing system; and

delegating the response based on the response level and sending the response to the requesting computing system, wherein the act of delegating and sending the response comprises at least one of sending an unqualified response based on a first response level where the unqualified response is a complete response having no restrictions on use of transferred information; and

sending a qualified response based on a second response level where the qualified response is a partial response with restrictions on the use of the transferred information, wherein the act of sending the qualified response comprises;

detecting if use restrictions are to be included with the response sent to the requesting computing system, and attaching a restricted use policy to the response sent to the requesting computing system, the use policy controlling use and further distribution of the response by the requesting computing system.

2. The method of claim 1 wherein the response is response information requested by the requesting computing system.

3. The method of claim 1, wherein the act of delegating the response further comprises sending no response based on a third response level.

4. The method of claim 1, wherein the act of applying the user policy comprises:

comparing user policy parameters with request parameters in the information transfer request from the requesting computing system; and

allocating response information and setting the response level based on the comparison of the user policy parameters with the request parameters.

5. The method of claim 1 wherein the response is authorization for the requesting computing system to send information to the computer system.

6. The method of claim 5 further comprising:

delegating the response based on the response level and sending the response with a notification of restrictions on receipt of the information by the computer system, the restrictions being based on the response level.

7. A policy engine system stored in a computer readable storage medium in a computing cell phone for controlling automated responses from the computing cell phone to a requesting computing system, the controlled automated responses being based on a user policy specified by a user of the computing cell phone, the policy engine system comprising:

a set policy module controlled by the user for entering and updating the user policy and response information;

a database storing the user policy and response information;

an apply policy module applying parameters of the user policy to information transfer requests from the requesting computing system and filtering stored response information to create a filtered response for the requesting computing system based on the parameters of the user policy; and

a delegate response module sending the filtered response along with a use policy to the requesting computing system, wherein sending the filtered response comprises at least one of;

sending an unqualified response based on a first response level where the unqualified response is a complete response having no restrictions on use of transferred information; and

sending a qualified response based on a second response level where the qualified response is a partial response with restrictions on the use of the transferred information, wherein the act of sending the qualified response comprises;

detecting if use restrictions are to be included with the response sent to the requesting computing system, and attaching a restricted use policy to the response sent to the requesting computing system, the use policy controlling use and further distribution of the response by the requesting computing system.

8. The system of claim 7 wherein the information transfer request is a send request to send information to the computing cell phone and:

the apply policy module in response to the send request creates an authorization for the requesting computing system to send information to the computing cell phone; and

the delegate response module sends the authorization to the requesting computing system.

9. The system of claim 7, wherein the use policy contain rules for use of the filtered response by the requesting computing system.

10. The system of claim 7, wherein the use policy contains rules for distribution of the filtered response by the requesting computing system to other computing systems.

11. The system of claim 7, wherein the apply policy module comprises:

a retrieve module retrieving policy parameters of the user policy from the database;

a compare module comparing the policy parameters to request parameters in the information transfer request from the requesting computing system;

an allocate module generating the filtered response based on a match between the policy parameters and the request parameters; and

a compile module building the filtered response and a response level to pass to the delegate response module.

12. The system of claim 11, wherein the delegate response module comprises:

a test module detecting whether the use policy is to be included with the filtered response, the use policy controlling use of the filtered response by the requesting computing system; and

a send module sending the filtered response with the use policy when the test module detects the use policy is to be included and sending only the filtered response when the test module detects the use policy is not to be included.

13. The system of claim 7, wherein the computing cell phone is within communication domain of the requesting computing system and is being repeatedly polled by requests from the requesting computing system.

14. The system of claim 7 further comprising:

a test module detecting whether the apply policy module created a filtered response;

a query module for displaying the information transfer request and identity of the requesting computing system to the user when a filtered response was not created; and

an update module receiving new response information and new user policy rules from the user, storing the new response information and updating the user policy in the database.

15. A computer storage medium for storing computer instructions for a computer process for sending from a computer system a personal, policy-controlled automated response to an information transfer request from a requesting computing system, the computer process comprising:

receiving the information transfer request from the requesting computing system;

applying parameters of a user policy exclusively controlled by the user to the information transfer request to compile a response and a response level based on the user policy; and

sending the response to the requesting computing system based on the response level in order to provide the personal, policy-controlled automated response to the requesting computing system, wherein sending the response comprises at least one of;

sending an unqualified response based on a first response level where the unqualified response is a complete response having no restrictions on use of transferred information;

sending a qualified response based on a second response level where the qualified response is a partial response with restrictions on the use of the transferred information, wherein the act of sending the qualified response comprises;

detecting if use restrictions are to be included with the response sent to the requesting computing system, and attaching a restricted use policy to the response sent to the requesting computing system, the use policy controlling use and further distribution of the response by the requesting computing system; and

sending no response based on a third response level.

16. The computer storage medium of claim 15 wherein the computer process further comprises:

setting the user policy controlled by the user, the user policy defining parameters for use in controlling a response to be provided as an automated reply to information transfer requests from the requesting computing system.

17. The computer storage medium of claim 15 wherein the response is response information requested by the requesting computing system.

18. The computer storage medium of claim 15, wherein the act of applying the user policy comprises:

comparing user policy parameters with request parameters in the information transfer request from the requesting computing system; and

allocating response information and setting the response level based on the comparison of the user policy parameters with the request parameters.

19. The computer storage medium of claim 15 wherein the response is authorization for the requesting computing system to send information to the computer system.

20. The computer storage medium of claim 19 further comprising:

sending the response based on the response level and sending the response with a notification of restrictions on receipt of the information by the computer system, the restrictions being based on the response level.