System and method for collaboration over shared storage

• US 8,417,935 B2
• Filed: 10/02/2009
• Issued: 04/09/2013
• Est. Priority Date: 10/10/2008
• Status: Active Grant

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: Kuehn, Dennis L, Stone, Kevin A, Bettger, David D
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): SHAIFER HARRIMAN, DANT B
• Application Number:
  US12/572,404
• Publication Number:
  US 20100095122A1
• Time in Patent Office: 1,285 Days
• Field of Search: 713/150
• US Class Current: 713/150
• CPC Class Codes: G06F 15/17331 Distributed shared memory [DSM], e.g. remote direct memory access [RDMA]
• CPC Class Codes: H04L 12/1831 Tracking arrangements for later retrieval, e.g. recording contents, participants activities or behavior, network status
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/104 Grouping of entities

Abstract

In accordance with one or more embodiments of the present disclosure, systems and methods disclosed herein enable synergy among a group of users by providing a real-time, secure collaboration environment that allows for cooperative interaction and decision making and provide the ability for users to simultaneously view, revise, and review a document or multimedia file that resides in a shared data storage location. Real-time, low latency, rich collaboration between producers and consumers provides organization efficiency, and this collaboration provides real-time, low latency transmission of data.

Claims

1. A method for real-time collaboration among a group of users over one or more networks in a shared storage system, the method comprising:

initiating a collaboration session, including;

receiving a request for setting up the collaboration session by a metadata server from an initiating user of the group of users;

sending, by the metadata server, a designated data location for the collaboration session to the initiating user;

writing at least one collaboration message, wherein;

the collaboration message is written to and stored in the designated data location;

playing back collaboration data, comprising;

retrieving the collaboration message from the designated data location;

sharing the collaboration data among the group of users over the one or more networks in the shared storage system; and

persisting the collaboration data, comprising;

retaining the collaboration data; and

identifying the designated data location as non-visible until a user of the group of users is provided with a metadata record, wherein the user needs the metadata record to re-assemble the collaboration data.

2. The method of claim 1, further comprising:

setting up encryption for the collaboration session;

changing an encryption key for the collaboration session;

setting a security classification for the collaboration session; and

changing a security level for the collaboration session.

3. The method of claim 1, wherein a location in the shared storage system for the collaboration session is only visible to participants in the collaboration session.

4. The method of claim 1, wherein the data in the collaboration session is protected by encryption.

5. The method of claim 4, wherein participation in the collaboration session is restricted by controlling access to at least one of an encryption key and a decryption key.

6. The method of claim 5, wherein multiple encryption keys and decryption keys are used to encrypt and decrypt data, respectively, in the collaboration session, and wherein access to the encryption and decryption keys is provided to one or more participants in the collaboration session, and wherein access to the encryption and decryption keys restricts the data each participant views or contributes.

7. The method of claim 1, wherein a security classification is associated with each message in the collaboration session.

8. The method of claim 7, wherein participation in the collaboration session is restricted by controlling access based on the security classification of the message and the credentials of a participant of the collaboration session.

9. The method of claim 1, wherein the data from the collaboration session is recorded and stored for at least one of retrieval, playback, and broadcast.

10. The method of claim 9, wherein playback of a recorded collaboration session is time-shifted.

11. The method of claim 1, wherein an identity of each participant in the collaboration session is associated with data related to each participant.

12. The method of claim 11, wherein association of the identity of each participant with each participant'"'"'s correspondence provides non-repudiation.

13. The method of claim 11, wherein a historical record is retained of each interaction in the collaboration session.

14. The method of claim 13, wherein the historical record ensures “

What You See Is What You Sign”

protection for each participant in the collaboration session.

15. A shared storage system for real-time collaboration among a group of users over one or more networks, the shared storage system comprising:

means for initiating a collaboration session, including;

means for receiving a request for setting up the collaboration session by a metadata server from an initiating user of the group of users;

means for sending, by the metadata server, a designated data location for the collaboration session to the initiating user;

means for writing at least one collaboration message, wherein;

the collaboration message is written to and stored in the designated data location;

means for playing back collaboration data, comprising;

means for retrieving the collaboration message from the designated data location;

means for sharing the collaboration data the users over the one or more networks in the shared storage system; and

means for persisting the collaboration data, comprising;

means for retaining the collaboration data and

means for identifying the designated data location as non-visible until a user of the group of users is provided with a metadata record, wherein the user needs the metadata record to re-assemble the collaboration data.

16. The shared storage system of claim 15, further comprising:

means for setting up encryption for the collaboration session;

means for changing an encryption key for the collaboration session;

means for setting a security classification for the collaboration session; and

means for changing a security level for the collaboration session.

17. The shared storage system of claim 15, wherein the location in the shared storage system is only visible to participants in a collaboration session.

18. The shared storage system of claim 15, wherein the data in the collaboration session is protected by encryption, and wherein participation in the collaboration session is restricted by controlling access to at least one of an encryption key and a decryption key.

19. The shared storage system of claim 18, wherein multiple encryption keys and decryption keys are used to encrypt and decrypt data, respectively, in the collaboration session, and wherein access to the encryption and decryption keys is provided to one or more participants in the collaboration session, and wherein access to the encryption and decryption keys restricts the data each participant views or contributes.

20. The shared storage system of claim 15, further comprising means for associating a security classification with each message in the collaboration session.

21. The shared storage system of claim 15, further comprising means for restricting participation in the collaboration session by controlling access based on security classification of the collaboration message and the credentials of a participant of the collaboration session.

22. Software encoded in one or more non-transitory computer readable device and when executed operable to facilitate real-time collaboration among a group of users over one or more networks in a shared storage system, the software further operable to:

initiate a collaboration session, including;

receive a request for setting up the collaboration session by a metadata server from an initiating user of the group of users;

send, by the metadata server, a designated data location for the collaboration session to the initiating user;

write at least one collaboration message, wherein;

the collaboration message is written to and stored in the designated data location;

play back collaboration data, comprising;

retrieve the collaboration message from the designated data location;

share the collaboration data among the group of users over the one or more networks in the shared storage system; and

persist the collaboration data, comprising;

retain the collaboration data; and

identify the designated data location as non-visible until a user of the group of users is provided with a metadata record, wherein the user needs the metadata record to re-assemble the collaboration data.

23. The software of claim 22, further operable to:

set up encryption for the collaboration session;

change an encryption key for the collaboration session;

set a security classification for the collaboration session; and

change a security level for the collaboration session.

24. The software of claim 22, wherein the data in the collaboration session is protected by encryption, and wherein participation in the collaboration session is restricted by controlling access to at least one of an encryption key and a decryption key.

25. The software of claim 24, wherein multiple encryption keys and decryption keys are used to encrypt and decrypt data, respectively, in the collaboration session, and wherein access to the encryption and decryption keys is provided to one or more participants in the collaboration session, and wherein access to the encryption and decryption keys restricts the data each participant views or contributes.