Methods and systems for controlling access to presence information according to a variety of different access permission types

• US 7,636,753 B2
• Filed: 10/27/2004
• Issued: 12/22/2009
• Est. Priority Date: 02/29/2000
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Aggarwal, Sudhanshu M., Wong, Leon Chih Wen, Beebee, Peter L.
• Primary Examiner(s): Chankong; Dohm
• Application Number:
  US10/974,500
• Publication Number:
  US 20050086302A1
• Time in Patent Office: 1,882 Days
• Field of Search: 709204-207, 709223-225, 709/227, 709/228, 709/217, 709/229
• US Class Current: 709/204
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/54 Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users

Abstract

Methods and systems are described for controlling access to presence information using a plurality of different access permission types. Presence information is maintained over a computer network and describes availability of computers and associated users over that network. For example, instant messaging applications often involve maintaining presence information. Users control access to presence information using a number of different access permission types such as the right to view accurate presence information, the right to view any presence information, or the right to act on accessed presence information. By using several different access permission types, the present invention enables finer control over access to presence information.

Claims

1. A method in a computer system for controlling access to presence information of a first computer system, wherein the presence information comprises at least a first indication of an availability of the first computer system and a second indication of an availability associated with a user of the first computer system, the method comprising:

receiving from a first computer system a request to set access permission for a second computer system to access the presence information of the first computer system, the access permission indicating whether the second computer system has subscription access permission and whether the second computer system has presence access permission; and

setting the subscription access permission and the presence access permission according to the request received from the first computer system;

receiving a request from the second computer system to subscribe to the presence information of the first computer system;

determining whether the second computer system has subscription access permission to the first computer system;

when the second computer system does not have the subscription access permission, sending a response to the second computer system denying the request to subscribe to the presence information of the first computer system;

when the second computer system has the subscription access permission, determining whether the second computer system has the presence access permission to the first computer system;

when the second computer system has the presence access permission to the first computer system, providing to the second computer system accurate presence information of the first computer system; and

when the second computer system does not have the presence access permission, computing always manufacturing inaccurate presence information of the first computer system based on and contrary to different from the accurate presence information of the first computer system, and providing to the second computer system the computed manufactured inaccurate presence information, wherein the manufactured inaccurate presence information comprises information that indicates the user of the first computer system has not recently used the first computer system when the user has recently used the computer system.

2. The method of claim 1 wherein the computer system that controls access to the presence information is a server computer system and the first computer system and the second computer system are client computer systems.

3. The method of claim 2 wherein the server computer system sets the access permission based on receiving an indication of the access permission from the first computer system.

4. The method of claim 2 wherein the server computer system provides to the second computer system accurate presence information based on receiving an indication of presence information from the first computer system.

5. The method of claim 1 wherein receiving the request to set the access permission for the second computer system further indicates whether the second computer system has restricted ability to act on the presence information.

6. The method of claim 5 wherein the restricted ability prohibits the second computer system from sending messages to the first computer system.

7. The method of claim 1 wherein the first computer system and the second computer system communicate via instant messaging.

8. The method of claim 1 further comprising:

manufacturing the inaccurate presence information of the first computer system based on the accurate availability of the user of the first computer system.

9. The method of claim 8 wherein the manufactured inaccurate indication is one of a plurality of predetermined plausible responses.

10. The method of claim 1 wherein the inaccurate presence information inaccurately indicates the whereabouts of the user of the first computer system.

11. The method of claim 1 wherein the inaccurate presence information indicates that the first computer system is idle when the first computer system is active.

12. A computer-readable storage medium containing instructions for causing a server computer system to control access to presence information of a first computer system, wherein the presence information comprises at least a first indication of an availability of the first computer system and a second indication of an availability associated with a user of the first computer system, by a method comprising:

receiving from setting by a user of the first computer system a request to set access permission for a second computer system to access the presence information of the first computer system, the access permission indicating whether the second computer system has subscription access permission and, when the second computer system has subscription access permission, whether the second computer system has presence access permission;

upon receiving a request from the second computer system to subscribe to the presence information of the first computer system, determining whether the access permission indicates that the second computer system has the subscription access permission;

when the second computer system does not have the subscription access permission, sending a response to the second computer system denying the request to subscribe to the presence information of the first computer system;

when the second computer system has the subscription access permission, determining whether the second computer system has the presence access permission; and

when the second computer system does not have the presence access permission, computing always manufacturing inaccurate presence information of the first computer system based on and contrary to different from the accurate presence information, and providing to the second computer system the manufactured inaccurate presence information, wherein the manufactured inaccurate presence information comprises information that indicates the user of the first computer system has not recently used the first computer system when the user has recently used the computer system.

13. The computer-readable storage medium of claim 12 wherein the method further comprises providing the second computer system with accurate presence information of the first computer system when the second computer system has presence access permission.

14. The computer-readable storage medium of claim 12 wherein the server computer system provides to the second computer system accurate presence information based on receiving an indication of changed presence information from the first computer system.

15. The computer-readable storage medium of claim 12 wherein receiving the request to set the access permission for the second computer system further indicates whether the second computer system has restricted ability to act on the presence information of the first computer system.

16. The computer-readable storage medium of claim 15 wherein the restricted ability prohibits the second computer system from sending messages to the first computer system.

17. The computer-readable storage medium of claim 12 wherein the first computer system and the second computer system communicate via instant messaging.

18. A computer system for maintaining presence information and exercising control of access to the presence information, wherein the presence information comprises at least a first indication of an availability of the first computer system and a second indication of an availability associated with a user of the first computer system, comprising:

a component that sets access permission for a second computer system to access the presence information of the first computer system, the access permission specifiable by a user of the first computer system, the access permission indicating whether the second computer system has subscription access permission and whether the second computer system has presence access permission;

a component that receives a request from the second computer system to subscribe to the presence information of the first computer system;

a component that denies the request if the access permission indicates that the second computer system does not have the subscription access permission;

a component that determines whether the second computer system has the presence access permission if the access permission indicates that the second computer system has the subscription access permission;

a component that provides to the second computer system accurate presence information of the first computer system when the second computer system has presence access permission; and

a component that computes always manufactures inaccurate presence information of the first computer system based on and different from the accurate presence information and provides to the second computer system the computed manufactured inaccurate presence information when the second computer system does not have presence access permission wherein the inaccurate presence information is contrary to the accurate presence information, wherein the manufactured inaccurate presence information comprises information that indicates the user of the first computer system has not recently used the first computer system when the user has recently used the computer system.

19. The system of claim 18 wherein the computer system that controls access to the presence information is a server computer system and the first computer system and the second computer system are client computer systems.

20. The system of claim 19 wherein the server computer system sets the access permission based on receiving an indication of the access permission from the first computer system.

21. The system of claim 19 wherein the server computer system provides to the second computer system accurate presence information based on receiving an indication of presence information from the first computer system.

22. The system of claim 18 wherein the component that sets access permission further indicates whether the second computer system has restricted ability to act on the presence information.

23. The system of claim 22 wherein the restricted ability prohibits the second computer system from sending messages to the first computer system.

24. The system of claim 18 wherein the first computer system and the second computer system communicate via instant messaging.