Validation of a location resource based on recipient access

• US 9,398,014 B2
• Filed: 04/04/2014
• Issued: 07/19/2016
• Est. Priority Date: 04/04/2014
• Status: Expired due to Fees

• Current Assignee: AirBNB Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Hewitt, Trudy L., Schembari, Francesco C., Schwenn, Robert M. Jr.
• Primary Examiner(s): Zecher, Dede
• Assistant Examiner(s): MCCOY, RICHARD ANTHONY
• Application Number:
  US14/245,427
• Publication Number:
  US 20150288693A1
• Time in Patent Office: 837 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 16/24 Querying
• CPC Class Codes: G06F 16/9566 URL specific, e.g. using aliases, detecting broken or misspelled links
• CPC Class Codes: H04L 51/046 Interoperability with other network applications or services
• CPC Class Codes: H04L 51/08 Annexed information, e.g. attachments
• CPC Class Codes: H04L 51/18 Commands or executable codes
• CPC Class Codes: H04L 51/48 Message addressing, e.g. address format or anonymous messages, aliases
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/025 for remote control or remote monitoring of applications
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal

Abstract

Aspects of the present disclosure relate to a method, a system, and a computer program product for validating a location resource, e.g., a hyperlink, embedded in a message for one or more recipients. The method includes receiving, by a computing node in a distributed computing environment and from a messaging application on a remote client computer, an identifier of a user profile and a location resource. The location resource is embedded in a message and that indicates a path to a computing resource outside of the remote client computer. The method also includes querying a repository in the distributed computing environment to obtain access permission information about the location resource. The method also includes determining, based upon the access permission information about the location resource, whether the user profile has access permission for the location resource.

Claims

1. A system, comprising:

a remote client computer that includes;

a messaging application configured to;

send a message to one or more recipients with a location resource that is embedded in the message and that indicates a path to a computing resource outside of the remote client computer, and

communicate, visually, permission to access the location resource by the one or more recipients of the message to a sender prior to the sender sending the message to the one or more recipients, the one or more recipients including a first recipient;

a distributed computing environment that includes;

a repository of the location resource with access permission information for a user profile associated with the first recipient; and

a processing engine, hosted by a computing node in the distributed computing environment, configured to;

receive, from the messaging application, the location resource and the user profile of the first recipient,

query, within the repository in the distributed computing environment, the location resource,

determine, based on an identifier of the user profile and the access permission information, whether the first recipient has the permission to access the location resource,

determine, as a background operation from a repository, and in response to receiving the identifier of the user profile and the location resource, an alternative location resource for the computing resource, wherein the repository is a cloud-based database in a relational format within the distributed computing environment, and

recommend the alternative location resource to the sender using the messaging application in response to the first recipient not having the permission to access the location resource.

2. The system of claim 1, wherein the messaging application is configured to communicate the permission to access the location resource by the one or more recipients by:

using colors to indicate the permission of each recipient.

3. The system of claim 1, wherein the messaging application is configured to communicate the permission to access the location resource by the one or more recipients by:

receiving a proportion of user profllcs recipients with permission to access the location resource; and

communicating the proportion of user profiles recipients with permission to access the location resource.

4. The system of claim 1, further comprising:

a network-based application with an application programming interface (API).

5. The system of claim 4, wherein the processing engine is configured to determine whether the first recipient has the permission to access the location resource by:

determining whether access permission data for the location resource exists in the repository;

requesting access permission data for the location resource in response to non-existence of the access permission data in the repository; and

storing the access permission data in the repository.

6. The system of claim 5, wherein requesting the access permission data includes:

sending a request for access permission data to the API;

providing an identification factor associated with the user profile to the API;

receiving the access permission data.

9. The system of claim 1, wherein the one or more recipients further includes a second recipient, and wherein the messaging application is configured to communicate the access permission for the recipient by:

assigning the first recipient a first color, the first color indicating that the first recipient has access permission for the location resource; and

assigning the second recipient a second color, the second color indicating that the second recipient does not have access permission for the location resource.

7. A computer program product comprising a computer readable storage device having a computer readable program stored therein, wherein the computer readable program, when executed on a computing device, causes the computing device to:

receive, by a computing node in a distributed computing environment and from a messaging application on a remote client computer, an identifier of a user profile of a user and a location resource that is embedded in a message and that indicates a path to a computing resource outside of the remote client computer;

query a repository in the distributed computing environment to obtain access permission information about the location resource;

determine, based upon the access permission information about the location resource and the user profile, whether the user has permission to access the location resource;

determine, in a background operation of the repository and in response to receiving the identifier of the user profile and the location resource, an alternative location resource for the computing resource;

wherein the repository is a cloud-based database in a relational format within the distributed computing environment;

recommend the alternative location resource to the messaging application in response to the user not having the permission; and

communicate, visually using the messaging application, the permission to a sender prior to the sender sending the message to the user.

8. The computer program product of claim 7, wherein the computer readable program causes the computing device to communicate, visually using the messaging application, the permission to the sender prior to the sender sending the message to the user by:

determining a proportion of users with access permission; and

communicating the proportion of users with access permission.

10. The computer program product of claim 7, wherein the computer readable program causes the computing device to communicate, visually using the messaging application, the permission to the sender prior to the sender sending the message to the user by:

assigning a first recipient of the message a first color, wherein the first color indicates that the first recipient has access permission for the location resource; and

assigning a second recipient of the message a second color, wherein the second color indicates that the second recipient does not have access permission for the location resource.