Method and apparatus for providing limited access to data objects or files within an electronic software delivery and management system

• US 20060287957A1
• Filed: 06/20/2005
• Published: 12/21/2006
• Est. Priority Date: 06/20/2005
• Status: Active Grant

• Current Assignee: Flexera Software LLC
• Original Assignee: Flexera Software LLC
• Inventors: Brentano, James, Pieper, Tobid, Martinelli, Paul, Thompson, Brad, Turtle, Donald, Pietrzak, Brent
• Granted Patent: US 8,271,387 B2
• Time in Patent Office: Days
• US Class Current: 705/51
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

A method and apparatus for providing limited access to data objects or files within an electronic software delivery and management system are described. A data object is transmitted to the system for storage in a library. Input of one or more restriction parameters is further requested for the stored data object. A user interface is displayed in a display window for facilitating input of the restriction parameters. At least one customer is selected, such as, for example, one or more users authorized to receive the stored data object. The stored data object is further designated as restricted data object for the selected users. Finally, the user restriction information is stored in appropriate tables within a database.

Claims

1. A computer implemented method, comprising the steps of:

receiving a request to input customer restrictions on access to a data object stored in a library;

responsive to said request, facilitating selection of at least one customer authorized to receive said data object; and

storing said customer restrictions in a database to enable access to said data object only to said at least one authorized customer.

2. A computer implemented method, comprising the steps of:

receiving a request from a customer to access a data object stored in a library;

retrieving customer restrictions associated with said data object from a database;

determining whether said customer is authorized to access said data object.

3. An electronic software delivery and management (ESDM) system, comprising:

a library for storing a plurality of digital objects, said objects being accessible by at least one customer who has either earlier subscribed to, or been entitled by an owner or developer of said digital objects to, ESDM services offered by an ESDM entity that operates said ESDM system;

a plurality of digital object manufacturers;

a plurality of channel partners, each channel partner having a predetermined business relationship with at least one said manufacturer;

wherein said manufacturers and said channel partners access said ESDM system via corresponding client machines residing at their respective sites;

a plurality of types of front-end web servers, which comprise any of servers that deliver web pages to multiple customers, servers that deliver images to be displayed within web pages, and servers that dynamically deliver content information to any of said customers, said manufacturers, and said channel partners;

at least one communication server for providing automated electronic communications to/from said customers, said manufacturers, and said channel partners;

at least one back-end server for facilitating delivery of digital objects from said manufacturers and said channel partners to their aggregated customer base which comprises said customers;

at least one processing server for authenticating customers according to temporary access codes and, upon successful authentication, making digital objects from said library available to said customers pursuant to a predetermined mapping;

wherein said ESDM system manages discovery and delivery of digital objects from said library to customers that are authorized to receive such objects by subscription, contract, payment, or other arrangement;

a database comprising a number of tables having entries, or records, that are linked by indices and keys, said database containing metadata relating to operation of said servers, said database comprising at least one customer table which contains records for each entity or customer of said ESDM system, said database also comprising accounts tables, which may be linked to the customer tables and may be populated with account, product, and/or order information related to each customer of said ESDM system;

said customer tables comprising web server access codes, comprising a list of recognized users and password or other login information required to use a web site supported by said web servers, said customer tables also containing a mapping of which customers are authorized to access which of said stored digital objects contained in said library, according to their original purchase of products associated with such digital objects;

said database comprising a plurality of tables, which may also be linked to said customer table, including at least one manufacturer table that is configured to store data related to manufacturers that are allowed to access said ESDM system, and at least one channel partner table that is configured to store data related to channel partners that are allowed to access said ESDM system; and

said database further comprising one or more user-to-object tables that are configured to define which customers can access specific data objects or files within said library;

wherein if a customer restriction is placed on a data object, then said data object is only exposed to the respective customer; and

wherein if no user restrictions exist, then said data object is available to any customer entitled to receive the respective information.

4. The system of claim 3, wherein each manufacturer controls actions that an associated channel partner may perform while accessing said ESDM system by defining in partner tables which of existing permissions apply to the respective channel partner, wherein said permissions comprise any of accounts permissions which enable the channel partner to add and modify accounts, order permissions which enable the channel partner to process and modify orders submitted by the customers and/or by the channel partner, and product management permissions which enable the channel partner to add and modify product information stored in said library.

5. The system of claim 3, wherein each manufacturer controls each channel partners'"'"' access to any of account, order, or product information that has originated from the respective manufacturer by electing to share such information with specified channel partners.

6. A computer implemented method for facilitating input of customer restrictions associated with respective data objects or files, comprising the steps of:

transmitting a data object to a ESDM system for storage in a library;

requesting input of one or more restriction parameters for said stored data object;

receiving aninterface in a display window for facilitating input of said restriction parameters;

said manufacturer activating a restrict button or link to restrict the stored data object to specific customers or to remove prior restrictions placed on the stored data object;

selecting at least one customer authorized to receive the stored data object from the library;

designating the stored data object as a restricted data object for the selected one or more customers; and

transmitting the customer restriction information to said ESDM system for storage in appropriate tables within a database.

7. The method of claim 6, wherein customers are authorized to access data objects or files based on entitlement data.

8. The method of claim 6, wherein said objects are grouped in packages which are made available as a whole to customers who are entitled, wherein only specifically identified accounts can access certain data objects or files within the package, and wherein said data objects or files are made available to said customers without the need to create an additional entitlements.

9. The method of claim 6, further comprising the steps of:

said manufacturer selecting a customer to be removed from the restriction list; and

said ESDM system removing the customer restrictions from the tables within the database.

10. A computer implemented method for facilitating delivery of data objects or files from software manufacturers and channel partners to restricted customer, comprising the steps of:

receiving a request to access a data object in stored a library;

retrieving customer entitlement information from a database, wherein said entitlement information is associated with a customer from tables within the database;

retrieving restriction parameters for the requested data object;

determining whether the stored data object is restricted to specific customers;

if the stored data object is restricted to specific customers, then determining whether the customer that requested the stored data object is authorized to access the data object., wherein if the customer is not authorized, then access to the data object is denied;

if the stored data object has no associated customer restrictions, or if the customer is authorized to access the data object, then allowing access to the data object; and

transmitting an approval of access to the customer.