Data access sharing

• US 10,108,808 B2
• Filed: 01/11/2016
• Issued: 10/23/2018
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Stuntebeck, Erich
• Primary Examiner(s): Pham, Luu
• Assistant Examiner(s): Jackson, Jenise
• Application Number:
  US14/992,782
• Publication Number:
  US 20160125192A1
• Time in Patent Office: 1,016 Days
• Field of Search: 726 28
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules

Abstract

Data access sharing may be provided. Requests may be received to display an data item associated with a list of data items. Upon determining whether a property of the data item is restricted by an access control policy, the property may be modified prior to rendering a display of the data item.

Claims

1. A computer-implemented method for controlling data security when sharing content between personal and electronic corporate calendars, comprising:

obtaining, using a synchronization service executing on a server, a first calendar event originating from a personal electronic calendar of a first user, the first calendar event including first event details;

displaying the first calendar event and the first event details in a first electronic corporate calendar of the first user, the first electronic corporate calendar executing within a sandboxed environment that restricts export of data to applications executing outside the sandboxed environment;

obtaining, using the synchronization service executing on the server, a second calendar event originating from the first electronic corporate calendar of the first user, the second calendar event including second event details;

displaying the first calendar event on a second electronic corporate calendar for a second user without displaying the first event details;

displaying the second calendar event on the second electronic corporate calendar for the second user;

obtaining, using the synchronization service executing on the server, a third calendar event from the first electronic corporate calendar of the first user, the third calendar event comprising third event details;

providing the third calendar event to the personal electronic calendar of the first user without the third event details, wherein the third event details are omitted automatically by the server based on the third calendar event being provided from a corporate calendar to a personal electronic calendar, without requiring an initial input or selection from the first user and without the first user having to manually remove the third event details;

displaying the third calendar event on the personal electronic calendar of the first user without the third event details; and

restricting transmission of the first calendar event displayed on the second electronic corporate calendar for a second user from the second electronic corporate calendar to a second personal electronic calendar of the second user.

2. The computer-implemented method of claim 1, wherein displaying the first calendar event on the second electronic corporate calendar for the second user comprises displaying a pre-defined description of the first calendar event, without the event details.

3. The computer-implemented method of claim 1, further comprising, prior to displaying the first calendar event on the second electronic corporate calendar for the second user:

granting, by a proxy service, an access request for the first calendar event.

4. The computer-implemented method of claim 1, wherein displaying the second calendar event on the second electronic corporate calendar for the second user comprises displaying the second calendar event with the second event details.

5. A computer-readable storage device comprising instructions which, when executed by one or more processors, control data security when sharing content between personal and electronic corporate calendars, wherein the instructions are configured to:

obtain, using a synchronization service executing on a server, a first calendar event originating from a personal electronic calendar of a first user, the first calendar event including first event details;

display the first calendar event without the first event details in a first electronic corporate calendar of the first user, the first electronic corporate calendar executing within a sandboxed environment that restricts export of data to applications executing outside the sandboxed environment;

obtain, using the synchronization service executing on the server, a second calendar event originating from the first electronic corporate calendar of the first user, the second calendar event including second event details;

display the first calendar event on a second electronic corporate calendar for a second user without displaying the first event details;

display the second calendar event on the second electronic corporate calendar for the second user;

obtain, using the synchronization service executing on the server, a third calendar event from the first electronic corporate calendar of the first user, the third calendar event comprising third event details;

provide the third calendar event to the personal electronic calendar of the first user without the third event details, wherein the third event details are omitted automatically by the server based on the third calendar event being provided from a corporate calendar to a personal electronic calendar, without requiring an initial input or selection from the first user and without the first user having to manually remove the third event details;

display the third calendar event on the personal electronic calendar of the first user without the third event details; and

restrict transmission of the first calendar event displayed on the second electronic corporate calendar for a second user from the second electronic corporate calendar to a second personal electronic calendar of the second user.

6. The computer-readable storage device of claim 5, wherein displaying the first calendar event on the second electronic corporate calendar for the second user comprises displaying a pre-defined description of the first calendar event, without the event details.

7. The computer-readable storage device of claim 5, wherein, prior to displaying the first calendar event on the second electronic corporate calendar for the second user, the instructions, when executed:

grant, by a proxy service, an access request for the first calendar event.

8. The computer-readable storage device of claim 5, wherein displaying the second calendar event on the second electronic corporate calendar for the second user comprises displaying the second calendar event with the second event details.

9. A system for controlling data security when sharing content between personal and electronic corporate calendars, comprising:

a server executing a synchronization service;

a first user device executing a personal electronic calendar of a first user and a first electronic corporate calendar of the first user; and

a second user device executing a second corporate calendar for the second user, wherein the synchronization service is configured to;

obtain a first calendar event originating from the personal electronic calendar of the first user, the first calendar event including first event details, the first electronic corporate calendar executing within a sandboxed environment that restricts export of data to applications executing outside the sandboxed environment;

provide the first calendar event to the first electronic corporate calendar of the first user;

obtain a second calendar event originating from the first electronic corporate calendar of the first user, the second calendar event including second event details;

provide the first calendar event to the second electronic corporate calendar for a second user without the first event details;

provide the second calendar event to the second electronic corporate calendar for the second user;

obtain a third calendar event from the first electronic corporate calendar of the first user, the third calendar event comprising third event details;

provide the third calendar event to the personal electronic calendar of the first user without the third event details, wherein the third event details are omitted automatically by the server based on the third calendar event being provided from a corporate calendar to a personal electronic calendar, without requiring an initial input or selection from the first user and without the first user having to manually remove the third event details; and

restrict transmission of the first calendar event displayed on the second electronic corporate calendar for a second user from the electronic corporate calendar to a second personal electronic calendar of the second user.

10. The system of claim 9, wherein displaying the first calendar event on the second electronic corporate calendar for the second user comprises displaying a pre-defined description of the first calendar event, without the event details.

11. The system of claim 9, wherein, prior to displaying the first calendar event on the second electronic corporate calendar for the second user, the system is further configured to grant, by a proxy service, an access request by confirming that the second user has permission to access the first calendar event.