Segmented architecture method and system

• US 8,959,656 B1
• Filed: 02/24/2013
• Issued: 02/17/2015
• Est. Priority Date: 03/03/2012
• Status: Active Grant

• Current Assignee: NRT Technology Corp.
• Original Assignee: Joingo, LLC (NRT Technology Corp.)
• Inventors: Greer, Russell S., Boyle, Stephen S.
• Primary Examiner(s): Rahman, Mohammad L
• Assistant Examiner(s): CHANG, KENNETH W
• Application Number:
  US13/775,226
• Time in Patent Office: 723 Days
• Field of Search: 726/27
• US Class Current: 726/27
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

A method and system for segmented architecture for managing access to electronic documents having private data and public data is disclosed herein. A request for an electronic document is sent to a segmentation server, and the request becomes two queries: one for the public or non-confidential data of the electronic document and one for the private or confidential data of the electronic document. The segmentation server determines if the request is made over a private network or a public network to determine whether private data should be sent in response to the request.

Claims

1. A method for managing access to private information in an electronic document having private information and public information, the method comprising:

requesting from a data capable communication device at a request site a request for an electronic document comprising publicly accessible data and data accessible at a first privacy level for an enterprise, the request sent to a patron server of the enterprise;

segmenting the request for the electronic document at the patron server into a request for public data and a request for private data;

determining a privacy distribution level for the request site at the patron server, wherein determining the privacy distribution level for the request site comprises analyzing an Internet Protocol (IP) address transmitted with the request to determine if the request is transmitted over a public network or a private network based on recognition of the IP address as controlled by the enterprise, or determining a location of the request site use Global Positioning (GPS) or a tower triangulation mechanism;

qualifying at the patron server that the data accessible at the first privacy level is accessible at the privacy distribution level of the request site, wherein qualifying that the first privacy level is accessible comprises analyzing an IP address of the request from the data capable communication device;

generating the electronic document in a form for the privacy distribution level for the request site; and

displaying the electronic document on the data capable communication device at the request site, the electronic document comprising the publicly accessible data and data accessible at the first privacy level for an enterprise.

2. The method according to claim 1 wherein the request site is within the enterprise

or a secure home office site.

3. The method according to claim 1 wherein the data capable communication device comprises a mobile resident app configured to transmit requests for electronic documents comprising publicly accessible data and data accessible at a first privacy level for the enterprise, and the mobile resident app configured to display data in an electronic document according to a privacy distribution level for the request site.

4. A method for managing access to private information in an electronic document having private information and public information, the method comprising:

requesting from a data capable communication device at a request site a request for an electronic document comprising publicly accessible data and data accessible at a first privacy level for an enterprise, the request sent to a segmentation server associated with the enterprise;

determining at the segmentation server a privacy distribution level for the request site, wherein determining the privacy distribution level for the request site comprises analyzing an Internet Protocol (IP) address transmitted with the request to determine if the request is transmitted over a public network or a private network based on recognition of the IP address as controlled by the enterprise, or determining a location of the request site use Global Positioning (GPS) or a tower triangulation mechanism;

determining that the data accessible at the first privacy level is not accessible at the privacy distribution level of the request site, wherein determining that the first privacy level is not accessible comprises analyzing an IP address of the request from the data capable communication device;

generating the electronic document in a form for the privacy distribution level for the request site; and

displaying on the data capable communication device the electronic document at the request site, the electronic document comprising only the publicly accessible data.

5. The method according to claim 4 wherein the data capable communication device is a tablet computer or a mobile phone.

6. The method according to claim 4 wherein the request site is a public forum.

7. The method according to claim 4 wherein the request site is a non-enterprise facility.

8. The method according to claim 4 wherein the data capable communication device comprises a mobile resident app configured to transmit requests for electronic documents comprising publicly accessible data and data accessible at a first privacy level for the enterprise, and the mobile resident app configured to display data in an electronic document according to a privacy distribution level for the request site.

9. The method according to claim 8 wherein the mobile resident app is configured to determine privacy distribution level for the request site.

10. A system for managing access to private information in an electronic document having private information and public information, the system comprising:

at least one communication network;

a plurality of mobile data capable communication devices, each of the plurality of mobile data capable communication devices comprising a mobile resident app and a transmitter;

a segmentation server configured to receive a request for an electronic document from at least one of the plurality of mobile data capable communication devices at a request site, the electronic document comprising publicly accessible data and data accessible at a first privacy level for an enterprise;

wherein the mobile resident app of each of the mobile data capable communication devices is configured to determine a privacy distribution level for the request site, wherein determining the privacy distribution level for the request site comprises analyzing an Internet Protocol (IP) address transmitted with the request to determine if the request is transmitted over a public network or a private network based on recognition of the IP address as controlled by the enterprise, or determining a location of the request site use Global Positioning (GPS) or a tower triangulation mechanism, configured to qualify that the data accessible at the first privacy level is accessible at the privacy distribution level of the request site, wherein determining that the first privacy level is accessible comprises analyzing an IP address of the request from the mobile data capable communication device, configured to receive the electronic document over a network and decrypt the electronic document to generate the electronic document according to privacy distribution level for the request site, and configured to display the electronic document comprising the data accessible at the privacy distribution level for the request site.

11. The system according to claim 10 wherein the request site is one of a public forum, a non-enterprise facility, the enterprise, and a secure home office site.

12. The system according to claim 10 further comprising a database at an enterprise site, the database comprising a plurality of electronic documents.