Distributed management framework for personal attributes

• US 8,938,423 B2
• Filed: 11/27/2013
• Issued: 01/20/2015
• Est. Priority Date: 04/04/2005
• Status: Active Grant

• Current Assignee: YOUnite Inc.
• Original Assignee: YOUnite Inc.
• Inventors: Fitzpatrick, Mark, Siress, Anthony
• Primary Examiner(s): Vy, Hung T
• Application Number:
  US14/092,741
• Publication Number:
  US 20140181148A1
• Time in Patent Office: 419 Days
• Field of Search: 707/635, 707/704, 707/636, 717/168, 709/206, 713/201
• US Class Current: 707/636
• CPC Class Codes: G06F 16/11 File system administration, e.g. details of archiving or snapshots file system backup G06F11/14
• CPC Class Codes: G06F 16/27 Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A technique for distributed management of attributes includes propagating attributes based upon attribute-granularity permissions. An example of a system according to the technique may include a server, coupled to a first client and a second client, that includes a module that receives attribute data from the first client; a permissions database where first permissions associated with the first client are set at the individual attribute level for the second client; an engine for updating the permissions database and for validating the first permissions for the second client; and an engine for distributing first client updates based on validated permissions to destinations associated with the one or more second destination stores.

Claims

1. A method, comprising:

maintaining first attributes associated with a first entity of a plurality of entities and second attributes associated with a second entity of the plurality of entities;

linking the first entity with a second entity;

providing a first destination, associated with the first entity, for the second attributes;

granting first permissions for the first attributes to the second entity;

facilitating propagation of shared attributes of the first attributes and the second attributes to the first destination and a second destination associated with the second entity through the first permissions and second permissions for the second attributes to the first entity;

managing subsequent changes of attributes to create a syndicated distributed secure data exchange.

2. The method of claim 1, further comprising:

reading user ID and device ID from a local cache;

if permissions are not stored locally, calling a server method to request permissions for the user ID;

if permissions are stored locally, reading permissions from a local file.

3. The method of claim 1, further comprising:

calling a server method to request a personal attribute record (PAR) if the PAR is stored remotely;

reading the PAR from a local file if the PAR is stored locally.

4. The method of claim 1, further comprising:

getting transactions by either requesting pending, transactions from a server or waiting or the server to send the transactions.

5. The method of claim 1, further comprising:

selecting one or more grantees from a contact list;

enabling attribute permissions for selected contacts;

calling a server method to update permission settings on a server.

6. The method of claim 1, further comprising:

updating a permissions table as specified by a grantor;

for each new device owned by the grantor, sending new permission settings;

for each device owned by a grantee, sending new attribute values;

if the grantor is granting permission, sending the attribute value sent in an update permissions call;

if the grantor is taking away permissions, sending a null value.

7. The method of claim 1, further comprising:

selecting from a permissions table grantees for attributes of a grantor;

joining grantees with the attribute changes;

creating attribute transactions;

sending the attribute transactions changes to destinations associated with the grantees.

8. The method of claim 1, further comprising:

selecting from a device table devices of a grantor;

joining grantees with the attribute changes;

creating personal attribute record (PAR) transactions;

sending PAR changes to destinations associated with the grantor.

9. The method of claim 1, wherein the first entity comprises a mobile device, and the second entity comprises a mobile device.

10. A system comprising:

at least one processor;

a memory storing instructions configured to instruct the at least one processor to perform;

maintaining first attributes associated with a first entity of a plurality of entities and second attributes associated with a second entity of the plurality of entities;

linking the first entity with a second entity;

providing a first destination, associated with the first entity, for the second attributes;

granting first permissions for the first attributes to the second entity;

facilitating propagation of shared attributes of the first attributes and the second attributes to the first destination and a second destination associated with the second entity through the first permissions and second permissions for the second attributes to the first entity;

managing subsequent changes of attributes to create a syndicated distributed secure data exchange.

11. The system of claim 10, wherein the memory stores instructions configured to instruct the at least one processor to perform:

reading user ID and device ID from a local cache;

if permissions are not stored locally, calling a server method to request permissions for the user ID;

if permissions are stored locally, reading permissions from a local file.

12. The system of claim 10, wherein the memory stores instructions configured to instruct the at least one processor to perform:

calling a server method to request a personal attribute record (PAR) if the PAR is stored remotely;

reading the PAR from a local file if the PAR is stored locally.

13. The system of claim 10, wherein the memory stores instructions configured to instruct the at least one processor to perform getting transactions by either requesting pending, transactions from a server or waiting or the server to send the transactions.

14. The system of claim 10, wherein the memory stores instructions configured to instruct the at least one processor to perform:

selecting one or more grantees from a contact list;

enabling attribute permissions for selected contacts;

calling a server method to update permission settings on a server.

15. The system of claim 10, wherein the memory stores instructions configured to instruct the at least one processor to perform:

updating a permissions table as specified by a grantor;

for each new device owned by the grantor, sending new permission settings;

for each device owned by a grantee, sending new attribute values;

if the grantor is granting permission, sending the attribute value sent in an update permissions call;

if the grantor is taking away permissions, sending a null value.

16. The system of claim 10, wherein the memory stores instructions configured to instruct the at least one processor to perform:

selecting from a permissions table grantees for attributes of a grantor;

joining grantees with the attribute changes;

creating attribute transactions;

sending the attribute transactions changes to destinations associated with the grantees.

17. The system of claim 10, wherein the memory stores instructions configured to instruct the at least one processor to perform:

selecting from a device table devices of a grantor;

joining grantees with the attribute changes;

creating personal attribute record (PAR) transactions;

sending PAR changes to destinations associated with the grantor.

18. The system of claim 10, wherein the first entity comprises a mobile device, and the second entity comprises a mobile device.

19. A non-transitory computer storage medium storing computer-executable instructions that, when executed, cause a computer system to perform a computer-implemented method comprising:

maintaining first attributes associated with a first entity of a plurality of entities and second attributes associated with a second entity of the plurality of entities;

linking the first entity with a second entity;

providing a first destination, associated with the first entity, for the second attributes;

granting first permissions for the first attributes to the second entity;

facilitating propagation of shared attributes of the first attributes and the second attributes to the first destination and a second destination associated with the second entity through the first permissions and second permissions for the second attributes to the first entity;

managing subsequent changes of attributes to create a syndicated distributed secure data exchange.