System and method for identity managed collaboration

• US 8,682,975 B2
• Filed: 02/29/2008
• Issued: 03/25/2014
• Est. Priority Date: 03/02/2007
• Status: Active Grant

• Current Assignee: Solomon Technologies Incorporated (Technipower Systems, Inc.)
• Original Assignee: Solomon Technologies Incorporated (Technipower Systems, Inc.)
• Inventors: Vilis, Raymond A.
• Primary Examiner(s): Taha, Shaq
• Application Number:
  US12/040,015
• Publication Number:
  US 20080215682A1
• Time in Patent Office: 2,216 Days
• Field of Search: 709/205
• US Class Current: 709/205
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

A system and method for identity managed collaboration (IMC) that in various embodiments can provide for: identity management of participants within a collaboration session to set entitlement; identity security for participants to allow participants to determine what identity is projected; participation in a collaboration session in a monitoring mode via a browser without the need to install client software on an access appliance; audio collaboration via a plurality of communication media; and Leave Existing & Add Preferred (LEAP) capability to allow participants to dynamically changes access appliances.

Claims

1. An apparatus for identity managed collaboration comprising a memory for storing instructions and at least one processor for executing the instructions stored in memory, the instructions when executed by the processor configuring the apparatus to provide:

a connection control module for establishing communication with a plurality of access devices authorized to participate in a collaboration session between a plurality of participants each using at least one of the plurality of access devices;

a collaboration media module for providing a plurality of types of media included in the collaboration session available to one or more of the plurality of access devices;

an access control module for;

assigning a respective access mode to each of the plurality of participants in the collaboration session based on a security level assigned to the respective participant and a device used by the respective participant to access the collaboration session, the access mode identifying one or more of the plurality of types of media to provide to the respective participant to restrict access to types of media the respective participant is authorized to access in the collaboration session, the respective access modes assigned to the plurality of participants based on individual participant entitlement records associated with the plurality of participants, each of the entitlement records defining the security level assigned to the respective participant and the types of access devices that can be used by the participant to access the collaboration session; and

providing access to at least one of the plurality of types of media from the collaboration media module to at least one of the access devices connected to the connection control module based on the respective access mode assigned to the each of the plurality of participants each associated with the respective access device wherein each of the plurality of participants will only have access to one or more of the plurality of types of media in the collaboration session based upon the respective assigned access mode; and

an identity and session manager storing;

the plurality of participant entitlements each specifying;

which access modes the participant can use;

which participant identity security record is to be used to announce the participant'"'"'s arrival in and departure from the collaboration session; and

the participant'"'"'s privilege to change access devices during the collaboration;

one or more collaboration session rules specifying characteristics of the collaboration session; and

a plurality of participant identity security records, each one corresponding to one of the plurality of participants and specifying an identity to be used to identify the participant in the collaboration session.

2. The apparatus as claimed in claim 1, wherein the one or more collaboration session rules specify:

which of the plurality of communication media can be used in the collaboration session;

which of the plurality of participants can connect to the collaboration session; and

which participants are to be contacted to connect to the collaboration session.

3. The apparatus as claimed in claim 2, wherein the identity and session manager are further for managing the plurality of participant entitlements, the one or more collaboration session rules.

4. The apparatus as claimed in claim 3, wherein the arrival and departure of each participant to and from the collaboration session is announced using the identity specified in the corresponding participant identity record specified for use in the corresponding participant entitlement record.

5. The apparatus as claimed in claim 1, further comprising an access rules module for the storage and management of access rules that specify which one of the plurality of access modes will be assigned to each participant responsive to an authenticated access device used by the participant to connect to the collaboration session.

6. The apparatus as claimed in claim 5, wherein the access control module assigns the respective access mode according to one or more access rules.

7. The apparatus as claimed in claim 1, wherein the access control module further for re-assigning an access mode when any of the participants switches from a first of the plurality of access devices to a second of the plurality of the access devices.

8. The apparatus as claimed in claim 4, wherein the connection control module establishes communication with a second access device associated with a participant before severing communication with the access device used by the participant.

9. The apparatus as claimed in claim 1, wherein the connection control module manages communication between the plurality of authenticated access devices and the connection control module.

10. The apparatus as claimed in claim 9, wherein the connection control module allows and disallows connections to the connection control module based on the collaboration session rules and the participant entitlement corresponding to each participant.

11. The apparatus as claimed in claim 10, wherein the connection control module initiates connections with participants responsive to the collaboration session rules when the collaboration session is initiated.

12. The apparatus as claimed in claim 1, wherein the connection control module accepts connections from participants responsive to the collaboration session rules and the corresponding participant entitlements.

13. The apparatus as claimed in claim 1, wherein the connection control module notifies the identity and session manager of the establishment and termination of a connection to each authenticated access device.

14. The apparatus as claimed in claim 1, wherein the connection control module provides collaboration continuity when a participant of the plurality of participants switches from a first access devices to a second access devices for connecting to the collaboration session wherein the access mode associated with participant is dynamically adjusted when the switch occurs.

15. The apparatus as claimed in claim 1, further comprising a session trigger module for initiating the collaboration session.

16. The apparatus as claimed in claim 1, wherein the collaboration media module provides one or more of:

an audio stream;

a video stream;

interactive file sharing;

instant messaging text areas; and

shared workspaces.

17. A method for identity managed collaboration comprising:

establishing communication with a plurality of access devices authorized to participate in a collaboration session between a plurality of participants each using at least one of the plurality of access devices;

providing a plurality of types of media used in the collaboration session to one or more of the plurality of access devices;

assigning a respective access mode to each participant, and associated one or more access devices, in the collaboration session based on a security level assigned to the respective participant and a device used by the respective participant to access the collaboration session, the access mode identifying one or more of the plurality of media types accessible to the respective participant to restrict access to types of media the respective participant is authorized to access in the collaboration session, the respective access mode assigned based on individual participant entitlement records associated with the plurality of participants, each of the entitlement records defining;

the security level assigned to a participant and the type of access device that can be used by the participant to access the collaboration session;

which access modes the participant can use;

which participant identity security record is to be used to announce the participant'"'"'s arrival in and departure from the collaboration session; and

the participant'"'"'s privilege to change access devices during the collaboration; and

providing access to at least one of the plurality of types of media from the collaboration media module to at least one of the access devices connected to the connection control module based on the respective access mode assigned to the participant associated with the respective access device, one or more collaboration session rules specifying characteristics of the collaboration session;

and a participant identity security record specifying an identity to be used to identify the participant in the collaboration session;

wherein each of the plurality of users will only have access to one or more of the plurality of types of media in the collaboration session based upon the respective assigned access mode.

18. A non-transitory computer readable memory containing the instructions for execution by a processor, the instructions for providing identity managed collaboration comprising:

establishing communication with a plurality of access devices authorized to participate in a collaboration session between a plurality of participants each using at least one of the plurality of access devices;

providing a plurality of types of media used in the collaboration session to one or more of the plurality of access devices;

assigning a respective access mode to each participant, and associated one or more access devices, in the collaboration session based on a security level assigned to the respective participant and a device used by the respective participant to access the collaboration session, the access mode identifying one or more of the plurality of media types accessible to the respective participant to restrict access to types of media the respective participant is authorized to access in the collaboration session, the respective access mode assigned based on individual participant entitlement records associated with the plurality of participants, each of the entitlement records defining;

the security level assigned to a participant and the type of access device that can be used by the participant to access the collaboration session;

which access modes the participant can use;

which participant identity security record is to be used to announce the participant'"'"'s arrival in and departure from the collaboration session; and

the participant'"'"'s privilege to change access devices during the collaboration;

providing access to at least one of the plurality of types of media from the collaboration media module to at least one of the access devices connected to the connection control module based on the respective access mode assigned to the participant associated with the respective access device, one or more collaboration session rules specifying characteristics of the collaboration session;

and a participant identity security record specifying an identity to be used to identify the participant in the collaboration session;

wherein each of the plurality of users will only have access to one or more of the plurality of types of media in the collaboration session based upon the respective assigned access.