Control for inviting an unauthenticated user to gain access to display of content that is otherwise accessible with an authentication mechanism

• US 20060184997A1
• Filed: 12/20/2005
• Published: 08/17/2006
• Est. Priority Date: 01/29/2004
• Status: Active Grant

• Current Assignee: Slack Technologies, Inc. (Salesforce.com, Inc.)
• Original Assignee: Yahoo! Inc. (Apollo Global Management, Inc.)
• Inventors: Sample, Neal, Brody, Paul, La Rotonda, Michael, Farmer, F., Perelman, Ellen
• Granted Patent: US 8,584,258 B2
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 51/52 for supporting social networking services
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: Y10S 707/916 Audio
• CPC Class Codes: Y10S 707/959 Network
• CPC Class Codes: Y10S 707/961 Associative
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99939 Privileged access
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing

Abstract

Enabling an unauthenticated user to access content associated with an authenticated user as though the unauthenticated user had a selected user relationship with the authenticated user. The user relationship may comprise a relationship degree, a relationship category, a relationship rating, and/or the like. An invitation to join an electronic service, such as an online social network, is sent to the unauthenticated user at an address known to the authenticated user. The invitation includes a time-limited token, such as a URL, that includes an invitation identifier, which relates the invitation to the authenticated user content. The token may be encrypted in the invitation. The unauthenticated user returns the token as a request to preview the authenticated user content without first becoming an authenticated user of the electronic service. If the token is still valid, access is granted. The unauthenticated user may also request to establish a connection with the authenticated user.

Claims

1. A method for enabling access to electronic content, comprising:

associating the content with an authenticated user of an electronic service;

associating the content with a user relationship that indicates a relationship with the authenticated user that is required to access the content;

associating the content with a token;

providing the token to an unauthenticated user;

receiving the token as a request to access the content;

determining whether the token is valid; and

enabling access to the content associated with the token if the token is valid.

2. The method of claim 1, wherein the content comprises a subset of data associated with the authenticated user, and wherein another subset of data is associated with a different user relationship.

3. The method of claim 1, wherein the content comprises a preview of data associated with the authenticated user.

4. The method of claim 1, wherein the user relationship comprises at least one of the following:

a degree of relationship with the authenticated user that is required to access the content;

a category of relationship with the authenticated user that is required to access the content; and

a rating of the relationship with the authenticated user that is required to access the content.

5. The method of claim 1, wherein the token comprises a universal resource locator (URL).

6. The method of claim 1, further comprising:

encrypting the token prior to providing the token to the unauthenticated user; and

decrypting the token upon receiving the token.

7. The method of claim 1, wherein the token is provided to the unauthenticated user an invitation to participate in the electronic service.

8. The method of claim 1, wherein determining whether the token is valid comprises at least one of the following:

determining that an expiration period associated with the token has not elapsed;

determining that the authenticated user associated with the token is still an authenticated user of the electronic service; and

determining that the token includes an identifier that is stored by the electronic service.

9. The method of claim 1, further comprising modifying the content prior to enabling access to the content, such that access is enabled to the modified content if the token is valid.

10. The method of claim 1, further comprising:

receiving a request from the unauthenticated user to establish a user relationship connection between the unauthenticated user and the authenticated user, wherein the request includes the token; and

establishing the user relationship connection between the unauthenticated user and the authenticated user within the electronic service.

11. A computer readable medium, comprising executable instructions for performing actions of claim 1.

12. A modulated data signal for communicating data over a network, the modulated data signal comprising instructions that enable a computing device to perform the actions of claim 1.

13. A server for enabling access to electronic content of an electronic service, comprising:

a communication interface in communication with an authenticated client and an unauthenticated client;

a memory for storing instructions; and

a processor in communication with the communication interface and with the memory, wherein the processor performs actions based at least in part on the stored instructions, including;

associating the content with the authenticated client;

associating the content with a user relationship that indicates a relationship with the authenticated client that is required to access the content;

associating the content with a token;

providing the token to the unauthenticated client;

receiving the token from the unauthenticated client;

determining whether the token is valid; and

enabling the unauthenticated client to access the content associated with the token if the token is valid.

14. The server of claim 13, wherein the user relationship comprises at least one of the following:

a degree of relationship with the authenticated client that is required to access the content;

a category of relationship with the authenticated client that is required to access the content; and

a rating of the relationship with the authenticated client that is required to access the content.

15. The server of claim 13, wherein the token comprises a universal resource locator (URL).

16. The server of claim 13, wherein the processor actions further include:

determining whether the unauthenticated client is in secure communication with the server;

encrypting the token prior to sending the token to the unauthenticated client if the unauthenticated client is not in secure communication with the server; and

decrypting the token upon receiving the token from the unauthenticated client if the unauthenticated client is not in secure communication with the server.

17. The server of claim 13, wherein the electronic service comprises an online social network service.

18. A method for accessing electronic content, comprising:

receiving a token that is associated with the content, wherein the content is also associated with an authenticated user of an electronic service and the content is further associated with a user relationship that indicates a relationship with the authenticated user that is required to access the content;

communicating the token to the electronic service that determines whether the token is valid; and

receiving access to the content if the token is valid.

19. The method of claim 18, further comprising displaying the token as a URL link such that a user selection of the URL link causes the token to be communicated to the electronic service.

20. The method of claim 18, wherein the method is executed by a mobile terminal.