Systems and methods for controlling access to content distributed over a network

• US 8,495,751 B2
• Filed: 01/27/2012
• Issued: 07/23/2013
• Est. Priority Date: 10/11/2011
• Status: Active Grant

• Current Assignee: Paramount Pictures Corporation (Paramount Global (f/k/a ViacomCBS Inc.))
• Original Assignee: Paramount Pictures Corporation (Paramount Global (f/k/a ViacomCBS Inc.))
• Inventors: Joyce, Raymond G., Garrett, Damon, Huntsberry, Frederick, Tunila, Randy
• Primary Examiner(s): Arani, Taghi
• Assistant Examiner(s): Jeudy, Josnel
• Application Number:
  US13/359,981
• Publication Number:
  US 20130091550A1
• Time in Patent Office: 543 Days
• Field of Search: 713164-168, 713182-186, 726 12- 17, 726 26- 30, 726 2- 5
• US Class Current: 726/29
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data

Abstract

A computer-implemented method is provided for controlling use of a file on a user device. The method includes transmitting authentication information to a system and downloading the file from the system over the network upon successful authentication by the system. The method also includes limiting access of the file to a client application of the user device and preventing altering of the file, printing of the file and opening of the file outside of the client application. Notes corresponding to the file can be stored in a local storage area.

Claims

1. A computer-implemented method for controlling use of a file on a user device, the method comprising:

transmitting, by the user device, authentication information to a system, wherein the authentication information includes an identifier of the user device and at least one identification of a user associated with the user device;

downloading, by the user device, the file from the system upon successful authentication by the system;

limiting, by the user device, access of the file to a client application of the user device independent of a connection between the user device and the system;

preventing, by the user device, altering of the file, printing of the file and opening of the file outside of the client application;

storing, by the user device, notes corresponding to the file in a local storage area separate from the file;

transmitting, by the user device, at least a portion of the notes to the system;

permitting, by the user device, the user to designate the file for sharing with a second user to the system at least one of i) an identification of the second user or ii) an identification of a predefined group to which both the user and the second user belong, such that the system is enabled to send the file to the second user; and

removing, by the user device, the file from the user device as instructed by the system.

2. The method of claim 1 further comprising:

authenticating, by the user device, the at least one identification of the user when the user device is disconnected from the system; and

permitting, by the user device, the user to access a locally-stored copy of the file upon successful authentication by the user device.

3. The method of claim 1, wherein the system is adapted to instruct the user device to remove the file after detecting expiration of a time period associated with the file.

4. The method of claim 1, wherein the system is adapted to instruct the user device to remove the file when access privilege of the user in relation to the file is revoked by an administrator of the system.

5. The method of claim 1, wherein the at least portion of the notes is transmitted to the system after the system detects i) expiration of a time period associated with the file, or ii) access privilege of the user in relation to the file is revoked.

6. The method of claim 1, wherein the at least portion of the notes is transmitted to the system as instructed by the user.

7. The computer-implemented method of claim 1 further comprising:

storing, by the user device, the file in a first folder of the local storage area if the file is assigned to the user device by an administrator of the system; and

storing, by the user device, the file in a second folder of the local storage area if the file is shared with the user by a second user, wherein the user and the second user are in a group defined by the system.

8. The computer-implemented method of claim 1 wherein the user device is an iPad.

9. The computer-implemented method of claim 1 wherein the file is in a portable document format (PDF).

10. A system for controlling use of a file on a user device, the system comprising:

a services module, in communication with the user device, for performing;

i) authenticating the user device and one or more user credentials of a user associated with the user device,

ii) sending a file to the user device for downloading by the user device upon successful authentication,

iii) receiving at least a portion of notes from the user device corresponding to the file,

iv) removing the file from the user device upon expiration of a time period associated with the file or when access privilege of the user in relation to the file is revoked by an administrator, and

v) sharing the file with a second user by receiving a designation from the user via the user device, the designation comprising at least one of i) an identification of the second user or ii) an identification of a predefined group to which both the user and the second user belong,

wherein the user device is adapted to i) limit access of the file to a client application of the user device independent of a connection with the system and ii) prevent altering of the file, printing of the file and opening of the file outside of the client application; and

an application module for managing the file and an account of the user.

11. The system of claim 10 wherein the application module manages the account of the user by performing at least one of:

activating the account, setting an identification of the account, generating a watermark associated with the account, locking the account, or deactivating the account.

12. The system of claim 10 wherein the application module manages the file by performing at least one of:

uploading the file to a database in communication with the system, assigning the file to the user, assigning the file to a group of users, revoking access privilege of the user in relation to the file, revoking access privilege of a group of users in relation to the file, or setting the time period associated with the file.

13. The system of claim 10 wherein the application module is further configured to aggregate notes from a plurality of users corresponding to the file and generate a report for the file that includes the aggregated notes, wherein the report is generated without altering the file.

14. The system of claim 10 wherein the application module is further configured to manage a group of users by performing at least one of:

creating the group, assigning the user to the group, removing the user from the group, or deleting the group.

15. The system of claim 14 wherein the application module is adapted to prevent the user from sharing the file with a second user if the second user is not in the same group as the user or the file has been previously assigned to the second user.

16. The system of claim 10 wherein the application module is further configured to manage one or more user roles by performing at least one of:

creating the one or more user roles, defining the one or more user roles, assigning the one or more user roles to at least one user, removing the one or more user roles from at least one user, or deleting the one or more user roles.

17. The system of claim 16 wherein the application module is adapted to prevent the user from sharing a file with another user if the user does not have a sharing role.

18. A computer program product, tangibly embodied in a non-transitory computer readable medium, for controlling use of a file on a user device, the computer program product including instructions being operable to cause data processing apparatus to:

transmit authentication information to a system, wherein the authentication information includes an identifier of the user device and at least one identification of a user associated with the user device;

download the file from the system upon successful authentication by the system;

limit access of the file to a client application of the user device independent of a connection between the user device and the system;

prevent altering of the file, printing of the file and opening of the file outside of the client application;

permit the user to designate the file for sharing with a second user by transmitting to the system at least one of i) an identification of the second user or ii) an identification of a predefined group to which both the user and the second user belong; and

store notes corresponding to the file in a local storage area separate from the file.

19. A user device for controlling use of a file disposed on the user device, the user device including a client application and comprising:

an authentication module for transmitting authentication information to a system, the authentication information including an identifier of the user device and at least one identification of a user associated with the user device, wherein the authentication module is adapted to download the file from the system upon successful authentication by the system;

a reader module for limiting access of the file to the client application independent of a connection between the user device and the system, the reader module preventing altering of the file, printing of the file and opening of the file outside of the client application;

a notes module for storing notes corresponding to the file in a local storage area; and

a sharing module for permitting the user to designate the file for sharing with a second user and transmitting to the system at least one of i) an identification of the second user or ii) an identification of a group defined by the system to which both the user and the second user belongs, the file has not been previously assigned to the second user, and the user has a sharing role.