Implicit population of access control lists

• US RE45,254 E1
• Filed: 05/31/2013
• Issued: 11/18/2014
• Est. Priority Date: 12/31/2002
• Status: Expired due to Term

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Inventors: Roskind, James A.
• Primary Examiner(s): POWERS, WILLIAM S
• Application Number:
  US13/907,761
• Time in Patent Office: 536 Days
• Field of Search: None
• US Class Current: 726/15
• CPC Class Codes: H04L 63/0272 Virtual private networks

Abstract

Communication applications may include lists of users with which a user of the application communicates. If two users of a communications application each include the other user on their user lists, an implicit trust may be established between the users. For example, if user A includes user B in her list and user B includes user A in his list, then it may be determined that each user knows and/or trusts the other user. As a result, a connection or communications pathway may be automatically created between the client devices of the users to facilitate communications between the users based on the implicit trust.

Claims

1. A method comprising:

logging, by a server, a first client device into a the server;

logging, by the server, a second client device into the server;

accessing, using by the server, a first user list associated with a first user of the first client device;

accessing, using by the server, a second user list associated with a second user of the second client device, wherein the first user list and the second user list are maintained separately from one another;

analyzing, using by the server, the accessed first user list to determine whether an identifier of the second user is included in the first user list;

analyzing, using by the server, the accessed second user list to determine whether an identifier of the first user is included in the second user list;

and

regulating, using by the server, a communications pathway communications between the first client device and the second client device based on both the determination of whether the identifier of the first user is included on the second user list and the determination of whether the identifier of the second user is included on the first user list.

2. The method of claim 1 wherein regulating the communications pathway communications includes establishing a virtual private network.

3. The method of claim 1 wherein regulating the communications pathway communications includes establishing a peer-to-peer connection between the first client device and the second client device.

4. The method of claim 1 wherein the first user list and the second user list comprise lists of identities for whom online presence is monitored.

5. The method of claim 1 further comprising receiving, at the server, a request from a first communications program executing on the first client device to establish a communications pathway communication with a second communications program executing on the second client device, wherein:

analyzing, using by the server, the accessed first user list to determine whether the identifier of the second user is included in the first user list comprises analyzing, using the server, the accessed first user list to determine whether the identifier of the second user is included in the first user list in response to receiving the request;

analyzing, using by the server, the accessed second user list to determine whether the identifier of the first user is included in the second user list comprises analyzing, using the server, the accessed second user list to determine whether the identifier of the first user is included in the second user list in response to receiving the request; and

regulating the communications pathway communications between the first client device and the second client device comprises establishing the communications pathway one or more communication types or pathways between the first communications program and the second communications program.

6. The method of claim 1 further comprising receiving a message from a first communications application executing on the first client device directed to a second communications application executing on the second client device, wherein:

analyzing, using by the server, the accessed first user list to determine whether the identifier of the second user is included in the first user list comprises analyzing, using by the server, the accessed first user list to determine whether the identifier of the second user is included in the first user list in response to receiving the message;

analyzing, using by the server, the accessed second user list to determine whether the identifier of the first user is included in the second user list comprises analyzing, using by the server, the accessed second user list to determine whether the identifier of the first user is included in the second user list in response to receiving the message; and

regulating the communications pathway communications between the first client device and the second client device comprises establishing the communications pathway one or more communication types or pathways between the first communications program and the second communications program.

7. The method of claim 1, wherein regulating, using by the server, a communications pathway communications between the first client device and the second client device, comprises automatically establishing a communications pathway one or more communication types or pathways between the first client device and the second client device.

8. The method of claim 1, wherein regulating, using by the server, a communications pathway communications between the first client device and the second client device, comprises sending a shared secret to the first client device and the second device, which enables the first client device and the second client device to authenticate themselves.

25. The method of claim 1, wherein regulating communications between the first client device and the second client device comprises establishing one or more communication pathways.

26. The method of claim 25, wherein establishing one or more communication pathways comprises simultaneously establishing a first communications type or pathway and a second communications type or pathway between the first client device and the second client device based on the determination of whether the identifier of the first user is included on the second user list and the determination of whether the identifier of the second user is included on the first user list.

27. The method of claim 1, wherein regulating communications between the first client device and the second client device comprises allowing the first client and the second client to view whether or not other users are online, exchange instant messages, participate in group chat rooms, trade files, find other users with similar interests, get customized news and stock quotes, or search the World Wide Web.

9. A system comprising:

a first client device;

a second client device; and

a server configured to that;

accessaccesses a first user list associated with a first user of thea first client device;

accessaccesses a second user list associated with a second user of thea second client device, wherein the first user list and the second user list are maintained separately from one another;

analyzeanalyzes the accessed first user list to determine whether an identifier of the second user is included in the first user list;

analyzeanalyzes the accessed second user list to determine whether an identifier of the first user is included in the second user list; and

regulate a communications pathwayregulates communications between the first client device and the second client device based on both the determination of whether the identifier of the first user is included on the second user list and the determination of whether the identifier of the second user is included on the first user list.

10. The system of claim 9 wherein, to regulate the communications pathway communications between the first client device and the second client device, the server is configured to establish establishes a virtual private network.

11. The system of claim 9 wherein, to regulate the communications pathway communications between the first client device and the second client device, the server is configured to establish establishes a peer-to-peer connection between the first client device and the second client device.

12. The system of claim 9 wherein the first user list and the second user list comprise lists of identities for whom online presence is monitored.

13. The system of claim 9 wherein:

the server is configured to receive receives a request from a first communications program executing on the first client device to establish a communications pathway communications with a second communications program executing on the second client device;

to analyze the accessed first user list to determine whether the identifier of the second user is included in the first user list, the server is configured to analyze analyzes the accessed first user list to determine whether the identifier of the second user is included in the first user list in response to receiving the request;

to analyze the accessed second user list to determine whether the identifier of the first user is included in the second user list the server is configured to analyze analyzes the accessed second user list to determine whether the identifier of the first user is included in the second user list in response to receiving the request; and

to regulate the communications pathway communications between the first client device and the second client device, the server is configured to establish the communications pathway establishes one or more communication types or pathways between the first communications program and the second communications program.

14. The system of claim 9 wherein:

the server is configured to receive receives a message from a first communications application executing on the first client device directed to a second communications application executing on the second client device;

to analyze the accessed first user list to determine whether the identifier of the second user is included in the first user list, the server is configured to analyze analyzes the accessed first user list to determine whether the identifier of the second user is included in the first user list in response to receiving the message;

to analyze the accessed second user list to determine whether the identifier of the first user is included in the second user list, the server is configured to analyze analyzes the accessed second user list to determine whether the identifier of the first user is included in the second user list in response to receiving the message; and

to regulate the communications pathway communications between the first client device and the second client device, the server is configured to establish the communications pathway establishes one or more communication types or pathways between the first communications program and the second communications program.

15. The system of claim 9, wherein the server is further configured to automatically establish a communications pathway establishes one or more communications types or pathways between the first client device and the second client device.

16. The system of claim 9, wherein the server is further configured to send sends a shared secret to the first client device and the second device, which enables the first client device and the second client device to authenticate themselves.

28. The system of claim 9, wherein regulating communications between the first client device and the second client device comprises establishing one or more communication pathways.

29. The system of claim 28, wherein establishing one or more communication pathways comprises simultaneously establishing a first communications type or pathway and a second communications type or pathway between the first client device and the second client device based on the determination of whether the identifier of the first user is included on the second user list and the determination of whether the identifier of the second user is included on the first user list.

30. The system of claim 9, wherein regulating communications between the first client device and the second client device comprises allowing the first client and the second client to view whether or not other users are online, exchange instant messages, participate in group chat rooms, trade files, find other users with similar interests, get customized news and stock quotes, or search the World Wide Web.

17. A host system comprising:

an interface to receive a communication from a first client device associated with a first user and to transmit a communication to a second client device associated with a second user;

storage to store a first user list associated with the first user and to store a second user list associated with the second user; and

a host configured to server that;

determinedetermines an identifier of the first user and an identifier of the second user;

accessaccesses the first user list associated with the first user of the first client device;

accessaccesses the second user list associated with the second user of the second client device, wherein the first user list and the second user list are maintained separately from one another;

analyzeanalyzes the accessed first user list to determine whether an identifier of the second user is included in the first user list;

analyzeanalyzes the accessed second user list to determine whether an identifier of the first user is included in the second user list; and

regulate a communications pathwayregulates communications between the first client device and the second client device based on both the determination of whether the identifier of the first user is included on the second user list and the determination of whether the identifier of the second user is included on the first user list.

18. The system of claim 17 wherein, to regulate the communications pathway communications between the first client device and the second client device, the host is configured to establish server establishes a virtual private network.

19. The system of claim 17 wherein, to regulate the communications pathway communications between the first client device and the second client device, the host is configured to establish server establishes a peer-to-peer connection between the first client device and the second client device.

20. The system of claim 17 wherein the first user list and the second user list comprise lists of identities for whom online presence is monitored.

21. The system of claim 17 wherein:

the communication from the first client device is a request received from a first communications program executing on the first client device to establish a communications pathway communications with a second communications program executing on the second client device;

to analyze the accessed first user list to determine whether the identifier of the second user is included in the first user list, the host is configured to analyze server analyzes the accessed first user list to determine whether the identifier of the second user is included in the first user list in response to receiving the request;

to analyze the accessed second user list to determine whether the identifier of the first user is included in the second user list, the host is configured to analyze server analyzes the accessed second user list to determine whether the identifier of the first user is included in the second user list in response to receiving the request; and

to regulate the communications pathway communications between the first client device and the second client device, the host is configured to establish the communications pathway server establishes one or more communication types or pathways between the first communications program and the second communications program.

22. The system of claim 17 wherein:

the communication from the first client device is a message from a first communications application executing on the first client device directed to a second communications application executing on the second client device;

to analyze the accessed first user list to determine whether the identifier of the second user is included in the first user list, the host is configured to analyze server analyzes the accessed first user list to determine whether the identifier of the second user is included in the first user list in response to receiving the message;

to analyze the accessed second user list to determine whether the identifier of the first user is included in the second user list the host is configured to analyze server analyzes the accessed second user list to determine whether the identifier of the first user is included in the second user list in response to receiving the message; and

to regulate the communications pathway communications between the first client device and the second client device, the host is configured to establish the communications pathway server establishes one or more communication types or pathways between the first communications program and the second communications program.

23. The system of claim 17, wherein the host is further configured to server automatically establish a communications pathway establishes one or more communications types or pathways between the first client device and the second client device.

24. The system of claim 17, wherein the host is further configured to send server sends a shared secret to the first client device and the second device, which enables the first client device and the second client device to authenticate themselves.

31. The system of claim 17, wherein regulating communications between the first client device and the second client device comprises establishing one or more communication pathways.

32. The system of claim 31, wherein establishing one or more communication pathways comprises simultaneously establishing a first communications type or pathway and a second communications type or pathway between the first client device and the second client device based on the determination of whether the identifier of the first user is included on the second user list and the determination of whether the identifier of the second user is included on the first user list.

33. The system of claim 17, wherein regulating communications between the first client device and the second client device comprises allowing the first client and the second client to view whether or not other users are online, exchange instant messages, participate in group chat rooms, trade files, find other users with similar interests, get customized news and stock quotes, or search the World Wide Web.