Validation of a location resource based on recipient access

• US 9,692,766 B2
• Filed: 04/28/2016
• Issued: 06/27/2017
• Est. Priority Date: 04/04/2014
• Status: Active Grant

• Current Assignee: AirBNB Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Schwenn, Jr., Robert M., Hewitt, Trudy L., Schembari, Francesco C.
• Primary Examiner(s): Zecher, Dede
• Assistant Examiner(s): MCCOY, RICHARD ANTHONY
• Application Number:
  US15/141,244
• Publication Number:
  US 20160241568A1
• Time in Patent Office: 425 Days
• Field of Search: None
• CPC Class Codes: G06F 16/24 Querying
• CPC Class Codes: G06F 16/9566 URL specific, e.g. using aliases, detecting broken or misspelled links
• CPC Class Codes: H04L 51/046 Interoperability with other network applications or services
• CPC Class Codes: H04L 51/08 Annexed information, e.g. attachments
• CPC Class Codes: H04L 51/18 Commands or executable codes
• CPC Class Codes: H04L 51/48 Message addressing, e.g. address format or anonymous messages, aliases
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/025 for remote control or remote monitoring of applications
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal

Abstract

Aspects of the present disclosure relate to a method, a system, and a computer program product for validating a location resource, e.g., a hyperlink, embedded in a message for one or more recipients. The method includes receiving, by a computing node in a distributed computing environment and from a messaging application on a remote client computer, an identifier of a user profile and a location resource. The location resource is embedded in a message and that indicates a path to a computing resource outside of the remote client computer. The method also includes querying a repository in the distributed computing environment to obtain access permission information about the location resource. The method also includes determining, based upon the access permission information about the location resource, whether the user profile has access permission for the location resource.

Claims

1. A method comprising:

receiving, by a computing node in a distributed computing environment and from a messaging application on a remote client computer, an identifier of a user profile of a user and a location resource that is embedded in a message and that indicates a path to a computing resource outside of the remote client computer;

querying a repository in the distributed computing environment to obtain access permission information about the location resource;

determining, based upon the access permission information about the location resource and the user profile, whether the user has permission to access the location resource; and

communicating, visually using the messaging application, the permission to a sender prior to the sender sending the message to the user by color coding a user address of the user in an address bar of the messaging application.

2. The method of claim 1, wherein determining whether the user has the permission to access the location resource includes:

determining whether access permission data for the location resource exists in the repository;

requesting, from a network-based application and in response to non-existence of the access permission data in the repository, access permission data for the location resource; and

storing, in response to receiving access permission data from the network-based application, the access permission data in the repository.

3. The method of claim 2, wherein requesting the access permission data includes:

sending request for access permission data to the network-based application;

providing an identification factor associated with the user profile to the network-based application;

determining whether the network-based application recognizes the identification factor; and

receiving the access permission data in response to the network-based application recognizing the identification factor.

4. The method of claim 3, wherein sending the request for access permission data to the application includes:

sending the request for access permission data to an application programming interface of the network-based application.

5. The method of claim 1, further comprising:

determining a proportion of users with permission to access the location resource; and

communicating the proportion of user with permission to access the location resource.

6. The method of claim 1, wherein the identifier of the user profile includes an email address.

7. The method of claim 1, wherein the location resource includes a Uniform Resource Locator (URL).

8. The method of claim 1, wherein communicating, visually using the messaging application, the permission to the sender prior to the sender sending the message to the user comprises:

assigning a first recipient of the message a first color, wherein the first color indicates that the first recipient has permission to access the location resource; and

assigning a second recipient of the message a second color, wherein the second color indicates that the second recipient does not have permission to access the location resource.

9. A system, comprising:

a remote client computer that includes;

a messaging application configured to;

send a message to one or more recipients with a location resource that is embedded in the message and that indicates a path to a computing resource outside of the remote client computer, each of the one or more recipients having a recipient address, and

communicate, visually, permission to access the location resource by the one or more recipients of the message to a sender prior to the sender sending the message to the one or more recipients by color coding the recipient addresses of the one or more recipients in an address bar of the messaging application, the one or more recipients including a first recipient;

a distributed computing environment that includes;

a repository of the location resource with access permission information for a user profile associated with the first recipient; and

a processing engine, hosted by a computing node in the distributed computing environment, configured to;

receive, from the messaging application, the location resource and the user profile of the first recipient,

query, within the repository in the distributed computing environment, the location resource, and

determine, based on an identifier of the user profile and the access permission information, whether the first recipient has the permission to access the location resource.

10. The system of claim 9, wherein communicating the permission to access the location resource by the one or more recipients further includes:

receiving a proportion of recipients with permission to access the location resource; and

communicating the proportion of recipients with permission to access the location resource.

11. The system of claim 9, further comprising:

a network-based application with an application programming interface (API).

12. The system of claim 11, wherein the processing engine is configured to determine whether the first recipient has the permission to access the location resource by:

determining whether access permission data for the location resource exists in the repository;

requesting access permission data for the location resource in response to non-existence of the access permission data in the repository; and

storing the access permission data in the repository.

13. The system of claim 12, wherein requesting the access permission data includes:

sending a request for access permission data to the API;

providing an identification factor associated with the user profile to the API;

receiving the access permission data.

14. The system of claim 9, wherein the one or more recipients further includes a second recipient, and wherein communicating, visually, permission to access the location resource by the one or more recipients of the message by color coding the recipient addresses of the one or more recipients in the address bar of the messaging application includes:

assigning the first recipient a first color, the first color indicating that the first recipient has permission to access the location resource; and

assigning the second recipient a second color, the second color indicating that the second recipient does not have permission to access the location resource.

15. A computer program product comprising a computer readable storage device having a computer readable program stored therein, wherein the computer readable program, when executed on a computing device, causes the computing device to:

receive, by a computing node in a distributed computing environment and from a messaging application on a remote client computer, an identifier of a user profile of a user and a location resource that is embedded in a message and that indicates a path to a computing resource outside of the remote client computer;

query a repository in the distributed computing environment to obtain access permission information about the location resource;

determine, based upon the access permission information about the location resource and the user profile, whether the user has permission to access the location resource;

communicate, visually using the messaging application, the permission to a sender prior to the sender sending the message to the user by color coding a user address of the user in an address bar of the messaging application.

16. The computer program product of claim 15, wherein the computer readable program, when executed on the computing device, further causes the computing device to:

determine a proportion of users with permission to access the location resource; and

communicate the proportion of users with permission to access the location resource.

17. The computer program product of claim 15, wherein communicating, visually using the messaging application, the permission to the sender prior to the sender sending the message to the user by color coding the user address of the user in the address bar of the messaging application includes:

assigning a first recipient of the message a first color, wherein the first color indicates that the first recipient has access permission for the location resource; and

assigning a second recipient of the message a second color, wherein the second color indicates that the second recipient does not have access permission for the location resource.

18. The computer program product of claim 16, wherein the location resource includes a Uniform Resource Locator (URL), the URL being embedded in the message, and wherein communicating the proportion of users with permission to access the location resource includes color coding the URL in the message based on a percentage of recipients that have permission to access the location resource.

19. The computer program product of claim 15, wherein determining whether the user has the permission to access the location resource includes:

determining whether access permission data for the location resource exists in the repository;

requesting, from a network-based application and in response to non-existence of the access permission data in the repository, access permission data for the location resource; and

storing, in response to receiving access permission data from the network-based application, the access permission data in the repository.

20. The computer program product of claim 19, wherein requesting the access permission data includes:

sending request for access permission data to the network-based application;

providing an identification factor associated with the user profile to the network-based application;

determining whether the network-based application recognizes the identification factor; and

receiving the access permission data in response to the network-based application recognizing the identification factor.