Systems and methods enabling a resource assertion environment for evaluating the appropriateness of computer resources for user purposes

• US 10,509,672 B2
• Filed: 08/10/2017
• Issued: 12/17/2019
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Advanced Elemental Technologies, Inc.
• Original Assignee: Advanced Elemental Technologies, Inc.
• Inventors: Shear, Victor Henry, Williams, Peter Robert, Rho, Jaisook, Redmond, Timothy St. John, Horning, James Jay
• Primary Examiner(s): Wai, Eric C
• Application Number:
  US15/674,429
• Publication Number:
  US 20180046518A1
• Time in Patent Office: 859 Days
• Field of Search: None
• CPC Class Codes: G06F 16/245 Query processing
• CPC Class Codes: G06F 16/24575 using context
• CPC Class Codes: G06F 16/248 Presentation of query results
• CPC Class Codes: G06F 16/285 Clustering or classification
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 40/00 Handling natural language data speech analysis or synthesis, speech recognition G10L
• CPC Class Codes: G06F 9/50 Allocation of resources, e.g. of the central processing unit [CPU]
• CPC Class Codes: G06F 9/5072 Grid computing
• CPC Class Codes: G06F 9/5083 Techniques for rebalancing the load in a distributed system
• CPC Class Codes: G06Q 10/0631 Resource planning, allocation, distributing or scheduling for enterprises or organisations
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 47/83 based on usage prediction
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A system, method, and computer-readable storage medium configured to facilitate user purpose in a computing architecture.

Claims

1. A system for secure and reliable publishing of, and subsequent use of, resource characterizing structured identification and assertion information sets, such structured identification and assertion information sets securely (a) specified and published by respective subject matter identification and assertion information set stakeholders, and (b) subsequently respectively used by computing arrangement end-users in determination of the suitability of using respective computer resources in fulfillment of such end-users'"'"' corresponding purposes, such system comprising:

a computing processor and memory arrangement for providing at least one of one or more standardized (a) resources and (b) specifications, to at least in part enable;

operating an at least in part standardized, interoperable, and secure resource identification and descriptive assertion information environment, wherein standardization at least in part ensures computer resource structured identification and assertion information set interoperability,

wherein such structured identification and assertion information sets are published by such sets'"'"' respective stakeholders for subsequent use by computing arrangement end-users, and wherein each such published information set comprises securely specified and associated resource identification and assertion information components, wherein each such published information set comprises at least in part;

a. an identification and assertion information set suitability to purpose component, wherein such information set component comprises, at least in part, (i) a purpose expression and (ii) an associated suitability to expressed purpose value expressed in a standardized form,

b. a subject matter resource identifier component,

c. an identification and assertion information set stakeholder person'"'"'s identifying information component, acquired at least in part through use of at least one at least in part biometric hardware sensor arrangement,

d. at least one attribute information component descriptive of such stakeholder person, such attribute information component comprising a securely governed, non-biometric, stakeholder characterizing, verifiable fact information set for subsequent use by identification and assertion information set end-users, and

e. at least one validation rule set component for end-user verification of such non-biometric fact information set of such stakeholder person, such verification performed using at least one hardware tamper resistant processing and memory arrangement for secure validation rule set fact testing;

wherein such structured identification and assertion information sets are at least in part cryptographically bound to their respective identification and assertion information set subject matter resources and/or resource identifiers;

wherein such identification and assertion information sets specified by such stakeholders, and used by such end-users, are employed in a distributed purposeful computing environment comprising personal computing arrangements and one or more network service arrangements, wherein such personal computing arrangements and such one or more network service arrangements are configured to support securely specifying and/or using such structured identification and assertion information sets through the use of tamper resistant processing and memory, wherein such secure tamper resistant specifying and/or using enables securely governed identification and assertion information set publishing and usage activities, such activities performed using respective computing arrangements of such distributed purposeful computing environment comprising personal computing, and network service, arrangements; and

wherein computing arrangement end-users use such identification and assertion information sets at least in part to respectively evaluate the suitability of one or more candidate computer resources for respective such end-users'"'"' purposes.

2. A system as in claim 1, wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables such specifying stakeholder of such identification and assertion information set to be a named organization, and to be represented by the named organization one or more human agents.

3. A system as in claim 1, wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables such identification and assertion information set associated suitability to expressed purpose value to comprise a value representing an aggregation of suitability to expressed purpose values for assertions respectively asserted by plural independent parties wherein such assertions'"'"' information sets employ the same purpose expression and subject matter identifier component.

4. A system as in claim 1, wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables such identification and assertion information set purpose expression to comprise a contextual purpose expression specification.

5. A system as in claim 1, wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables such identification and assertion information set to include at least one of (a) a second purpose expression for such subject matter resource, (b) a second suitability to expressed purpose value associated with at least one of such purpose expression and such second purpose expression, and (c) a second subject matter resource identifier.

6. A system as in claim 1, wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables such identification and assertion information set to include at least one counterpoint identification and assertion information set, such counterpoint identification and assertion information set regarding the same subject matter resource as such identification and assertion information set, wherein such counterpoint identification and assertion information set comprises (a) a purpose expression, (b) an associated suitability to expressed purpose value that is different from the non-counterpoint identification and assertion information set suitability to expressed purpose value, and (c) the same subject matter identifier as such identification and assertion information set.

9. A system as in any one of claims 1 and 7, wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables the subject matter identified by such identification and assertion information set to comprise, in part, a resource class.

10. A system as in any one of claims 1 and 7, wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables such identification and assertion information set to comprise at least one of:

(a) an assertion information set trust level with an associated suitability to expressed purpose value and (b) a reliability level with an associated suitability to expressed purpose value.

11. A system as in any one of claims 1 and 7, wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables a computing arrangement to support specifying plural such identification and assertion information sets, wherein at least one of (a) at least one identification and assertion information set identifies one or more other such identification and assertion information sets as its subject matter, and (b) at least one such identification and assertion information set includes one or more other such assertion information sets.

7. A system for secure reliable publishing of, and subsequent use of, resource characterizing structured identification and assertion information sets, such structured identification and assertion information sets securely (a) specified and published by respective subject matter identification and assertion information set asserters, and (b) subsequently respectively used by computing arrangement end-users in determination of the suitability of using respective computer resources in fulfillment of such end-users'"'"' corresponding purposes, such system comprising:

a computing processor and memory arrangement for providing at least one of one or more standardized (a) resources and (b) specifications, to at least in part enable;

operating an at least in part standardized, interoperable, and secure resource identification and descriptive assertion information environment, wherein standardization at least in part ensures computer resource structured identification and assertion information set interoperability,

wherein such providing enables a computing processor and memory arrangement supporting;

specifying identification and assertion information sets by respective asserters, wherein each such identification and assertion information set specifies at least in part;

i. an assertion regarding a uniquely identified subject matter, using at least one hardware tamper resistant processing and memory arrangement, wherein such subject matter is a resource set,

ii. an environment wide, unique identifier for such identification and assertion information set,

iii. a unique identifier for an assertion asserter of such identification and assertion information set, such identifier, at least in part, based upon biometric identification of such asserter, using at least one at least in part biometric hardware sensor arrangement,

iv. one or more asserted characteristics associated with such assertion asserter, using at least one hardware tamper resistant processing and memory arrangement,

 

wherein such one or more asserted characteristics are any one or more of asserted attribute types comprising;

 

a) asserter trustworthiness as associated with one or more purpose expressions,

 

b) asserter reliability as associated with one or more purpose expressions,

 

c) asserter affinity group membership, and

 

d) at least one of one or more professional and expertise credentials of such identified asserter, and

v. at least one validation rule set for validating such one or more asserted characteristics associated with such assertion asserter, wherein;

 

a) such validating uses at least one test procedure,

 

b) computing arrangement end-users are independently evaluating respective resources for their respective purposes, and

 

c) at least a portion of such validating is performed using at least one hardware tamper resistant processing and memory arrangement;

wherein each such identification and assertion information set is uniquely identified through use of a standardized, interoperably interpretable identification schema compliant with such computing arrangement at least one of one or more standardized (a) resources and (b) specifications, and wherein identification information from such uniquely identified identification and assertion information set'"'"'s unique identifier is interoperably interpretable by plural independent parties;

wherein such identification and assertion information sets are at least in part cryptographically bound to their respective identification and assertion information set subject matter resources and/or resource identifiers;

wherein such identification and assertion information sets specified by such asserters, and used by such end-users, are employed in a distributed purposeful computing environment comprising personal computing arrangements and one or more network service arrangements, wherein such personal computing arrangements and such one or more network service arrangements are configured to support securely specifying and/or using such structured identification and assertion information sets through the use of tamper resistant processing and memory, wherein such secure tamper resistant specifying and/or using enables securely governed identification and assertion information set publishing and usage activities, such activities performed using respective computing arrangements of such distributed purposeful computing environment comprising personal computing, and network service, arrangements; and

wherein computing arrangement end-users use such identification and assertion information sets at least in part to respectively evaluate the suitability of one or more candidate computer resources for respective such end-users'"'"' purposes.

8. A system as in claim 7, wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables at least one such specifying asserter of such identification and assertion information set to be a named organization, and to be represented by the named organization one or more human agents.

12. A method for secure and reliable publishing of, and subsequent use of, resource characterizing structured identification and assertion information sets, such structured identification and assertion information sets securely (a) specified and published by respective subject matter identification and assertion information set stakeholders, and (b) subsequently respectively used by computing arrangement end-users in determination of the suitability of using respective computer resources in fulfillment of such end-users'"'"' corresponding purposes, such method comprising:

providing, through use of a computing processor and memory arrangement, at least one of one or more standardized (a) resources and (b) specifications, to at least in part enable;

operating an at least in part standardized, interoperable, and secure resource identification and descriptive assertion information environment, wherein standardization at least in part ensures computer resource structured identification and assertion information set interoperability,

wherein such structured identification and assertion information sets are published by such sets'"'"' respective stakeholders for subsequent use by computing arrangement end-users, and wherein each such published information set comprises securely specified and associated resource identification and assertion information components, wherein each such published information set comprises at least in part components produced by;

a. securely specifying an identification and assertion information set suitability to purpose component, wherein such information set component comprises, at least in part, (i) a purpose expression and (ii) an associated suitability to expressed purpose value expressed in a standardized form,

b. securely specifying a subject matter resource identifier component,

c. identifying and specifying an identification and assertion information set stakeholder person'"'"'s identifying information component, acquired at least in part through use of at least one at least in part biometric hardware sensor arrangement,

d. specifying at least one non-biometric attribute information component descriptive of such stakeholder person, such attribute information component comprising a securely governed, non-biometric, stakeholder characterizing, verifiable fact information set for subsequent use by identification and assertion information set end-users, and

e. securely specifying at least one validation rule set component for end-user verification of such non-biometric fact information set of such stakeholder person, such verification performed using at least one hardware tamper resistant processing and memory arrangement for secure validation rule set fact testing;

wherein such structured identification and assertion information sets are at least in part cryptographically bound to their respective identification and assertion information set subject matter resources and/or resource identifiers;

wherein such identification and assertion information sets specified by such stakeholders, and used by such end-users, are employed in a distributed purposeful computing environment comprising personal computing arrangements and one or more network service arrangements, wherein such personal computing arrangements and such one or more network service arrangements are configured to support securely specifying and/or using such structured identification and assertion information sets through the use of tamper resistant processing and memory, wherein such secure tamper resistant specifying and/or using enables securely governed identification and assertion information set publishing and usage activities, such activities performed using respective computing arrangements of such distributed purposeful computing environment comprising personal computing, and network service, arrangements; and

wherein computing arrangement end-users use such identification and assertion information sets at least in part to respectively evaluate the suitability of one or more candidate computer resources for respective such end-users'"'"' purposes.

13. A method as in claim 12, wherein such providing at least in part enables at least one such specifying stakeholder of such identification and assertion information set to be a named organization, and to be represented by the named organization one or more human agents.

14. A method as in claim 12, wherein such providing at least in part enables such identification and assertion information set associated suitability to expressed purpose value to comprise a value representing an aggregation of suitability to expressed purpose values for assertions respectively asserted by plural independent parties wherein such assertions'"'"' information sets employ the same purpose expression and subject matter identifier component.

15. A method as in claim 12, wherein such providing at least in part enables such identification assertion information set purpose expression to comprise a contextual purpose expression specification.

16. A method as in claim 12, wherein such providing at least in part enables such identification and assertion information set to include at least one of (a) a second purpose expression for such subject matter resource, (b) a second suitability to expressed purpose value associated with at least one of such purpose expression and such second purpose expression, and (c) a second subject matter resource identifier.

17. A method as in claim 12, wherein such providing at least in part enables such identification and assertion information set to include at least one counterpoint identification and assertion information set, such counterpoint identification and assertion information set regarding the same subject matter resource as such identification and assertion information set, wherein such counterpoint identification and assertion information set comprises (a) a purpose expression, (b) an associated suitability to expressed purpose value that is different from the non-counterpoint identification and assertion information set suitability to expressed purpose value, and (c) the same subject matter identifier as such identification and assertion information set.

20. A method as in any one of claims 12 and 18, wherein such providing at least in part enables the subject matter identified by such identification and assertion information set to comprise, in part, a resource class.

21. A method as in any one of claims 12 and 18, wherein such providing at least in part enables such identification and assertion information set to comprise at least one of:

(a) an assertion information set trust level with an associated suitability to expressed purpose value and (b) a reliability level with an associated suitability to expressed purpose value.

22. A method as in any one of claims 12 and 18, wherein such providing at least in part enables a computing arrangement to support specifying plural such identification and assertion information sets wherein at least one of (a) at least one identification and assertion information set identifies one or more other such identification and assertion information sets as its subject matter, and (b) at least one such identification and assertion information set includes one or more other such assertion information sets.

18. A method for secure and reliable publishing of, and subsequent use of, resource characterizing structured identification and assertion information sets, such structured identification and assertion information sets securely (a) specified and published by respective subject matter identification and assertion information set asserters, and (b) subsequently respectively used by computing arrangement end-users in determination of the suitability of using respective computer resources in fulfillment of such end-users'"'"' corresponding purposes, such method comprising:

providing, through use of a computing processor and memory arrangement, at least one of one or more standardized (a) resources and (b) specifications, to at least in part enable;

operating an at least in part standardized, interoperable, and secure resource identification and descriptive assertion information environment, wherein standardization at least in part ensures computer resource structured identification and assertion information set interoperability,

wherein such providing enables a computing processor and memory arrangement supporting;

specifying identification and assertion information sets by respective asserters, wherein each such identification and assertion information set specifies at least in part;

i. an assertion regarding a uniquely identified subject matter, using at least one hardware tamper resistant processing and memory arrangement, wherein such subject matter is a resource set,

ii. an environment wide, unique identifier for such identification and assertion information set,

iii. a unique identifier for an assertion asserter of such identification and assertion information set, such identifier, at least in part, based upon biometric identification of such asserter, using at least one at least in part biometric hardware sensor arrangement,

iv. one or more asserted characteristics associated with such assertion asserter, using at least one hardware tamper resistant processing and memory arrangement,

 

wherein such one or more asserted characteristics are any one or more of asserted attribute types comprising;

 

a) asserter trustworthiness as associated with one or more purpose expressions,

 

b) asserter reliability as associated with one or more purpose expressions,

 

c) asserter affinity group membership, and

 

d) at least one of one or more professional and expertise credentials of such identified asserter, and

v. at least one validation rule set for validating such one or more asserted characteristics associated with such assertion asserter, wherein;

 

a) such validating uses at least one test procedure,

 

b) computing arrangement end-users are independently evaluating respective resources for their respective purposes, and

 

c) at least a portion of such validating is performed using at least one hardware tamper resistant processing and memory arrangement;

wherein each such identification and assertion information set is uniquely identified through use of a standardized, interoperably interpretable identification schema compliant with such computing arrangement at least one of one or more standardized (a) resources and (b) specifications, and wherein identification information from such uniquely identified identification and assertion information set'"'"'s unique identifier is interoperably interpretable by plural independent parties;

wherein such identification and assertion information sets are at least in part cryptographically bound to their respective identification and assertion information set subject matter resources and/or resource identifiers;

wherein such identification and assertion information sets specified by such asserters, and used by such end-users, are employed in a distributed purposeful computing environment comprising personal computing arrangements and one or more network service arrangements, wherein such personal computing arrangements and such one or more network service arrangements are configured to support securely specifying and/or using such structured identification and assertion information sets through the use of tamper resistant processing and memory, wherein such secure tamper resistant specifying and/or using enables securely governed identification and assertion information set publishing and usage activities, such activities performed using respective computing arrangements of such distributed purposeful computing environment comprising personal computing, and network service, arrangements; and

wherein computing arrangement end-users use such identification and assertion information sets at least in part to respectively evaluate the suitability of one or more candidate computer resources for respective such end-users'"'"' purposes.

19. A method as in claim 18, wherein such providing at least in part enables at least one such specifying asserter of such identification and assertion information set to be a named organization, and to be represented by the named organization one or more human agents.