Permission-based document server

• US 8,166,003 B2
• Filed: 05/05/2006
• Issued: 04/24/2012
• Est. Priority Date: 05/05/2006
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Friesenhahn, Dustin G., Xue, Mingquan
• Primary Examiner(s): Trujillo, James
• Assistant Examiner(s): Casanova, Jorge A
• Application Number:
  US11/418,746
• Publication Number:
  US 20070260648A1
• Time in Patent Office: 2,181 Days
• Field of Search: 707/203, 707/204, 707/695, 707/783
• US Class Current: 707/695
• CPC Class Codes: G06F 16/93 Document management systems
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment

Abstract

Detailed herein is a technology which, among other things, identifies and provides an audience-appropriate version of a document, upon request. In one approach to this technology, a request for the document is received at a document-specific access point associated with that document. This document request is associated with specific file access authorizations. These specific file access authorizations are used to identify one of the available versions of the document. The version of the document so identified is then retrieved.

Claims

1. A computer-implemented method of providing an audience-appropriate version of the document, the computer-implemented method being arranged to cause a computer to perform actions, comprising:

receiving a request for a document at a document access point associated with said document, said document comprising a plurality of document versions, wherein said request is associated with file access authorizations, and wherein said plurality of document versions are associated with file access permissions;

determining which of the plurality of document versions of the document has a majority of previous document accesses;

pre-fetching the determined document version for the document that has the majority of previous document accesses;

identifying based on a match between a file access authorization associated with the request and a file access permission corresponding to the identified document version one of said plurality of document versions, wherein the file access permissions of said identified of document versions correspond to said file access authorizations, such that the file access permissions include a security level value indicating a security level of the document version and an audience field indicating an authorized audience, wherein each of the plurality of the document versions is uniquely identified by a combination of a name of the documents and the security level of the document version, wherein the security level indicates an audience allowed access to the document;

wherein each of the plurality of document versions include a name field, a level field and the audience field; and

retrieving said one of said plurality of document versions.

2. The computer-implemented method of claim 1, wherein said data access point comprises a uniform resource locator (URL).

3. The computer-implemented method of claim 1, further comprising:

retrieving a most-commonly accessed version of said document; and

comparing said file access authorizations with the file access permissions associated with said most-commonly accessed version of said document.

4. The computer-implemented method of claim 1, wherein said file access permissions comprise one of a plurality of access levels.

5. The computer-implemented method of claim 1, further comprising:

authenticating a user; and

such that the security level of the document is one of a plurality of security levels and the authorized audience is a subset of authorized users.

6. The computer-implemented method of claim 5, wherein said receiving a request comprises receiving a request from said user.

7. The computer-implemented method of claim 6, further comprising:

returning said one of said plurality of document versions to said user.

8. A system for returning a most recent version of a document, said document server comprising:

a memory and a processor;

a network module for receiving a document request for a document, and transmitting a retrieved document version;

a document storage module, coupled to said network module, for storing a plurality of document versions for the document, each of said plurality of document versions having an associated permission requirement, an associated security level and an authorized audience requirement, wherein each of the plurality of the document versions is uniquely identified by a combination of the documents name and the associated security level of the document, wherein the security level indicates an audience allowed access to the document;

a document retrieval module that is coupled to the network module that determines the document version that has been accessed a majority of the time in previous document accesses and pre-fetches the determined most commonly accessed version of the document for the document before determining which of said plurality of document versions to provide in response to the request for the document;

an identification module, coupled to said network module, for identifying a clearance level associated with said document request; and

an authorization module, coupled to said identification module, for determining which of said plurality of document versions to retrieve, wherein said authorization module compares said clearance level associated with said document request with the associated permission requirement associated security level and authorized audience requirement for each of said plurality of document versions, and based on the comparison retrieves the determined version of the document.

9. The system of claim 8, further comprising:

a user interface, coupled to said network module, for receiving instructions and for displaying information.

10. The system of claim 8, wherein said document storage module comprises a database.

11. The system of claim 10, wherein said database comprises an SQL database.

12. The system of claim 8, further comprising:

an administration module, coupled with said document storage module, for setting said associated permission requirements for said plurality of document versions, such that the security level is one of a plurality of security levels and the authorized audience is a subset of authorized users.

13. The system of claim 12, wherein said associated permission requirements for said plurality of document versions comprise one of a plurality of access levels.

14. The system of claim 8, wherein, if more than one of said plurality of document versions corresponds to said document request, said authorization module retrieves a most recent version of said plurality of document versions.

15. A computer-readable storage medium having computer-executable instructions stored thereon causing a computer to perform actions comprising:

providing a single access point for accessing a plurality of versions of a document, each of said plurality of versions having associated permissions, the associated permissions including a security level and an authorized audience;

receiving a document request at said single access point, said document request comprising an authorization level;

determining which of the plurality of document versions of the document has a majority of previous document accesses;

retrieving the document version of the document that has the majority of previous document accesses;

after retrieving a most commonly accessed version of the document relating to the document request, comparing said authorization level with said associated security level and authorized audience permissions for each of said plurality of versions, wherein each of the plurality of the versions is uniquely identified by a combination of the documents name and the associated security level of the document version, wherein the security level indicates an audience allowed access to the document; and

based on the comparing, accessing one of said plurality of versions corresponding to said document request.

16. The computer-readable storage medium of claim 15, further comprising:

determining the availability of each of said plurality of versions.

17. The computer-readable storage medium of claim 16, further comprising:

determining the associated permissions for each of said plurality of versions;

and such that the security level is one of a plurality of security levels and the authorized audience is a subset of authorized users.

18. The computer-readable storage medium of claim 15, wherein said single access point comprises a uniform resource locator (URL).

19. The computer-readable storage medium of claim 18, further comprising:

providing a unique access point for each of said plurality of versions.

20. The computer-readable storage medium of claim 19, wherein each said unique access point comprises a URL.