Method and system for managing security compatibility of electronic content

• US 9,832,204 B2
• Filed: 09/19/2014
• Issued: 11/28/2017
• Est. Priority Date: 09/19/2014
• Status: Active Grant

• Current Assignee: D2L Corporation
• Original Assignee: D2L Corporation
• Inventors: Cepuran, Brian, Ghassemi, Ali, Dingle, Nicholas, Geurts, Jeffrey, Lockhart, David, Campbell, Matthew, Avis, Jeffrey, Batiste, David, Sumner, Victor, Cottrell, Rylan, Yo, Sean, Hsu, Johnson, Xu, Eric
• Primary Examiner(s): ZHAO, DON GORDON
• Application Number:
  US14/490,907
• Publication Number:
  US 20160087990A1
• Time in Patent Office: 1,166 Days
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

There is provided a method and system for managing security compatibility of electronic content. The method includes: receiving electronic content; parsing the electronic content into one or more elements; determining a content security profile of the electronic content; determining an element security profile of the one or more elements of the electronic content; determining whether the element security profile of the one or more elements is compatible with the content security profile; and for each of the one or more elements: if the element security profile is not compatible with the content security profile, modifying the element to have a compatible element security profile, otherwise, not modifying the element.

Claims

1. A method for managing security compatibility of electronic content, the method comprising:

receiving a request for electronic content to be provided over a network;

parsing the electronic content into one or more elements;

determining a content security profile of the electronic content;

determining one or more element security profiles corresponding to the one or more elements of the electronic content;

determining whether the one or more element security profiles of the one or more elements are compatible with the content security profile;

for each of the one or more elements;

if a corresponding one or more element security profiles of the each element are not compatible with the content security profile, modifying the each element to have a compatible element security profile, wherein the modifying of the each element to have the compatible element security profile comprises substituting the each element with a functionally equivalent element that has a corresponding element security profile that is compatible with the content security profile,

otherwise, not modifying the element; and

providing electronic content to a client device over the network, wherein in response to at least one of the one or more elements being modified, the electronic content provided to the client device over the network includes the at least modified one or more elements.

2. The method of claim 1, wherein the determining whether the one or more element security profile of the one or more elements is compatible with the content security profile comprises:

determining a content security level associated with the electronic content security profiles; and

determining whether a security level associated with the corresponding one of the one or more element security profiles corresponding to the one or more elements is compatible with the content security level.

3. The method of claim 1, wherein the determining whether the element security profile corresponding to the one or more elements is compatible with the content security profile comprises:

determining a content delivery protocol associated with the electronic content security profile; and

determining whether a delivery protocol associated with the element security profile of the one or more elements is compatible with the content delivery protocol.

4. The method of claim 1, wherein the modifying of the element comprises modifying an element security level associated with the element security profile.

5. The method of claim 1, wherein the modifying of the element comprises:

determining whether a functional equivalent element of the element comprising an incompatible security profile is retrievable; and

if the functional equivalent element is retrievable, replacing the element with the functional equivalent element.

6. The method of claim 5, wherein if the functional equivalent element is not retrievable, transmitting a notification of the incompatible element security profile to a user.

7. The method of claim 5, wherein if the functional equivalent element is not retrievable, transmitting the element with the incompatible element security profile as separate electronic content.

8. The method of claim 5, wherein determining whether the functional equivalent element is retrievable comprises:

modifying a delivery protocol of the element to a delivery protocol that is compatible with the security profile of the electronic content;

determining whether the element with a modified delivery protocol is retrievable; and

if the element with a modified delivery protocol is retrievable, replacing the element with the functional equivalent element.

9. The method of claim 5, wherein retrieving the functional equivalent element comprises associating a protocol relative locator with the security profile of the element.

20. The method of claim 1, wherein the security profile includes information indicating a transmission protocol or format to be used.

10. A system for managing security compatibility of electronic content, the system comprising a storage device and a processor configured to:

receive a request for electronic content to be provided over a network;

parse the electronic content into one or more elements;

determine a content security profile of the electronic content;

determine one or more element security profiles corresponding to the one or more elements of the electronic content;

determine whether the one or more element security profiles of the one or more elements are compatible with the content security profile;

for each of the one or more elements;

if a corresponding one or more element security profiles of the each element are not compatible with the content security profile, modify the each element to have a compatible element security profile, wherein the modifying of the each element to have a compatible element security profile comprises substituting the each element with a functionally equivalent element that has a corresponding element security profile that is compatible with the content security profile,

otherwise, not modifying the element; and

provide electronic content to a client device over the network, wherein in response to at least one of the one or more elements being modified, the electronic content provided to the client device over the network includes the at least modified one or more elements.

11. The system of claim 10, wherein the processor is further configured to:

determine a content security level associated with the electronic content security profile; and

determine whether a security level associated with the corresponding one of the one or more element security profiles corresponding to the one or more elements is compatible with the content security level.

12. The system of claim 10, wherein the processor is further configured to:

determine a content delivery protocol associated with the electronic content security profile; and

determine whether a delivery protocol associated with the element security profile of the one or more elements is compatible with the content delivery protocol.

13. The system of claim 10, wherein the processor is configured to modify an element security level associated with the security profile.

14. The system of claim 10, wherein the processor is further configured to:

determine whether a functional equivalent element of the element comprising an incompatible security profile is retrievable; and

if the functional equivalent element is retrievable, replacing the element with the functional equivalent element.

15. The system of claim 14, wherein if the functional equivalent element is not retrievable, the element modification module is configured to transmit a notification of the incompatible element security profile to a user.

16. The system of claim 14, wherein if the functional equivalent element is not retrievable, the element modification module is configured to transmit the element with the incompatible element security profile as separate electronic content.

17. The system of claim 14, wherein the processor is further configured to:

modify a delivery protocol of the element to a delivery protocol that is compatible with the security profile of the electronic content;

determine whether the element with a modified delivery protocol is retrievable; and

if the element with the modified delivery protocol is retrievable, replace the element with the functional equivalent element.

18. A method for managing security compatibility of electronic content within a learning management system, the method comprising:

receiving a request for electronic content from the learning management system to be provided over a network;

parsing the electronic content into one or more elements;

determining a content security profile of the electronic content;

determining one or more element security profiles corresponding to the one or more elements of the electronic content;

determining whether the one or more element security profiles of the one or more elements are compatible with the content security profile;

for each of the one or more elements;

if a corresponding one or more element security profiles of the each element are not compatible with the content security profile, modifying the each element to have a compatible element security profile, wherein the modifying of the each element to have a compatible element security profile comprises substituting the each element with a functionally equivalent element that has a corresponding element security profile that is compatible with the content security profile,

otherwise, not modifying the element; and

providing electronic content to a client device over the network, wherein in response to at least one of the one or more elements being modified, the electronic content provided to the client device over the network includes the at least modified one or more elements.

19. The method of claim 18 wherein the electronic content has secure educational course content.