Masking restrictive access control for a user on multiple devices

• US 10,614,119 B2
• Filed: 01/19/2017
• Issued: 04/07/2020
• Est. Priority Date: 01/19/2016
• Status: Active Grant

• Current Assignee: Regwez, Inc.
• Original Assignee: Regwez, Inc.
• Inventors: Eleish, Ragy Farouk
• Primary Examiner(s): Le, Chau
• Assistant Examiner(s): Gadalla, Hany S.
• Application Number:
  US15/410,675
• Publication Number:
  US 20170208068A1
• Time in Patent Office: 1,174 Days
• CPC Class Codes: G06F 16/2468 Fuzzy queries
• CPC Class Codes: G06F 16/248 Presentation of query results
• CPC Class Codes: G06F 16/289 Object oriented databases
• CPC Class Codes: G06F 16/41 Indexing; Data structures therefor; Storage structures
• CPC Class Codes: G06F 16/4393 Multimedia presentations, e.g. slide shows, multimedia albums
• CPC Class Codes: G06F 16/51 Indexing; Data structures therefor; Storage structures
• CPC Class Codes: G06F 16/58 Retrieval characterised by using metadata, e.g. metadata not derived from the content or metadata generated manually
• CPC Class Codes: G06F 16/5838 using colour
• CPC Class Codes: G06F 16/5846 using extracted text
• CPC Class Codes: G06F 16/5866 using information manually generated, e.g. tags, keywords, comments, manually generated location and time information
• CPC Class Codes: G06F 16/901 Indexing; Data structures therefor; Storage structures for retrieval from the web G06F16/951
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 16/9538 Presentation of query results
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 3/0482 Interaction with lists of selectable items, e.g. menus
• CPC Class Codes: G06F 3/04842 : Selection of displayed objects or displayed text elements G06F3/0482 takes precedence
• CPC Class Codes: G06F 3/0486 : Drag-and-drop
• CPC Class Codes: G06F 3/04883 : for inputting data by handwriting, e.g. gesture or text
• CPC Class Codes: G06F 3/061 : Improving I/O performance
• CPC Class Codes: G06F 3/0638 : Organizing or formatting or addressing of data
• CPC Class Codes: G06F 3/0673 : Single storage device
• CPC Class Codes: G06F 40/186 : Templates
• CPC Class Codes: G06F 40/30 : Semantic analysis
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 : Access control lists [ACL]
• CPC Class Codes: H04L 67/535 : Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34

Abstract

A system for enforcing restrictive access control with respect to a set of digital objects accessible by a first device and second device of a user. The system includes the first device of the user configured to: detect an update associated with a first system access control rule, wherein the first system access control rule is to block access to at least a first digital object included in the set of digital objects on the first device; determine, based at least in part on the update to the first system access control rule, to block access to at least a second digital object included in the set of digital objects on a second device; and provide, to the second device, the update associated with a first system access control rule to maintain restrictive access control over the set of digital objects on a second device.

Claims

1. A system for enforcing restrictive access control with respect to a set of digital objects accessible by a first device and second device of a first user, comprising:

a datastore configured to store access control rules for a plurality of devices or systems, including the first and second devices, the access controls rules for one or more layers defining access to a set of digital objects stored on the devices or systems by the other devices or systems within the plurality of devices or systems;

an access control rules synchronization network;

a central server coupled with the data store, the central server configured to run programs and applications that cause the central server to access the access control rules in order to enforce the access control rules with respect to accessing digital objects stored on one of the plurality of devices or systems by one or more of the other devices and systems of the plurality of devices and systems via the access control rules synchronization network;

the first device of the first user comprising a user interface, and a processor configured to run programs or applications configured to cause the first device to;

detect an update associated with a first access control rule, wherein the first access control rule is to block access by the other devices and systems of the plurality of devices and systems, but not including the second device of the first user, to at least a first digital object included in the set of digital objects on the first device;

determine, based at least in part on the update to the first access control rule, to block access to at least a second digital object included in the set of digital objects on the second device; and

provide, to the second device, comprising a user interface, and a processor configured to run programs or applications, the update associated with the first access control rule to maintain restrictive access control over the set of digital objects on a second device.

2. The system of claim 1, wherein the first access control rule is based at least in part on an attribute of an application, and the update associated with the first access control rule is a change in the attribute of an application.

3. The system of claim 2, wherein the update associated with the first access control rule further comprises a status change to the first access control rule and a metadata change.

4. The system of claim 3, where to provide, to the second device, the update further comprises providing updates to the attribute change independent of any status change or metadata change.

5. The system of claim 3, where to provide, to the second device, the update further comprises providing updates to the status change independent of any attribute change or metadata change.

6. The system of claim 3, where to provide, to the second device, the update further comprises providing updates to the metadata change independent of any status change or attribute change.

7. The system of claim 1, wherein the update associated with the first access control rule is a status change to the first access control rule to disable or enable the first access control rule.

8. The system of claim 1, wherein the first access control rule is based at least in part on metadata, and the update associated with the first access control rule is a change to the metadata.

9. The system of claim 1, wherein the first device and the second device are configured to engage in a browsing session wherein the user browses the set of digital objects via the first device and the second device.

10. The system of claim 1, wherein the first device and the second device are updated via a peer-to-peer network.

11. The system of claim 1, wherein the first device and the second device are updated via a central server.

12. The system of claim 1, the processor is configured to:

in response to an update to content of the first digital object, updating the content associated with the second digital object.

13. The system of claim 1, wherein the one or more layers comprise at least one of a universal layer, a system layer, an application layer, and a session layer.

14. The system of claim 1, further comprising a data object meta-data synchronization network configured to synchronize meta-data related to digital objects stored on the plurality of devices and systems to enable searching of digital objects on one of the plurality of devices or systems by others device or system of the plurality of devices or systems.