NETWORK OPERATING SYSTEM AND METHOD

• US 20100161707A1
• Filed: 02/26/2010
• Published: 06/24/2010
• Est. Priority Date: 03/18/2003
• Status: Active Grant

• Current Assignee: Skai, Incorporated
• Original Assignee: Charles E. Henderson
• Inventors: Henderson, Charles E.
• Granted Patent: US 7,984,067 B2
• Time in Patent Office: Days
• US Class Current: 709/202
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 51/046 Interoperability with other network applications or services
• CPC Class Codes: H04L 51/08 Annexed information, e.g. attachments
• CPC Class Codes: H04L 51/216 Handling conversation history, e.g. grouping of messages in sessions or threads
• CPC Class Codes: H04L 51/42 Mailbox-related aspects, e.g. synchronisation of mailboxes

Abstract

The invention provides a system and method for a network operating system. The system includes a complex data medium that enables the continuous reconciliation of the collaborative information process and product. The system generally increases productivity by enabling a network dynamic among knowledge workers. The system unifies e-mail and shared file management, synchronous and asynchronous collaboration, serial and parallel work flow, top-down and bottom-up collaboration, and information lifecycle management.

Claims

1-11. -11. (canceled)

12. A computer implemented method of access evolution for automating the sharing of access rights in a computer environment having one or more access sharing relationships, comprising the steps of:

a) creating an access sharing relationship in which an access provider having a first set of access rights shares at least a subset of the first set of access rights with an access receiver having a second set of access rights, so that the second set of access rights evolves as an automated function of the first set of access rights by way of the shared subset, wherein the access sharing relationship is one of one or more access sharing relationships in a network of access control;

b) defining the subset based on constraints of the access sharing relationship; and

c) sharing the subset with the access receiver,

whereby the steps of defining and sharing comprise an iteration of access evolution, and

wherein the steps of creating, defining, and sharing are performed by a computer.

13. The computer implemented method of claim 12, wherein the sharing is implemented by derived access control, such that the access receiver derives access from the provider.

14. The computer implemented method of claim 12, wherein the access sharing relationship is a first access sharing relationship further comprising creating a second access sharing relationship in the computer environment, wherein the access receiver of the first access sharing relationship is also the access provider in the second access sharing relationship.

15. The computer implemented method of claim 12, wherein the access sharing relationship is a first access sharing relationship further comprising creating a second access sharing relationship in the computer environment, wherein the access provider of the first access sharing relationship is also the access receiver in the second access sharing relationship.

16. The computer implemented method of claim 12, further comprising creating another access sharing relationship that is symmetrical to the access sharing relationship, such that an access provider in the another access sharing relationship is the access receiver in the access sharing relationship and an access receiver in the another access sharing relationship is the access provider in the access sharing relationship, creating a bi-directional access sharing relationship.

17. The computer implemented method of claim 12, wherein the step for sharing shares access to at least one of an entity and a file.

18. The computer implemented method of claim 12, further comprising evolving the access rights of the receiver over time in response to changes in the access rights of the provider.

19. The computer implemented method of claim 12, wherein the access rights include access constraints.

20. The computer implemented method of claim 12, wherein the step of defining the subset includes removing from the subset another subset of access, wherein the another subset contains access for which a manage exclusion is applied, so that the evolution is deferred by the manage exclusion for a limited or unlimited period time during serial workflow.

21. The computer implemented method of claim 12, wherein the step of defining the subset includes adding to the subset another subset of access, wherein the another subset contains access for which a manage exclusion is released, so that access automatically evolves as a result of the completion of an iteration of serial workflow.

22. The computer implemented method of claim 12, wherein the access sharing relationship is defined between autonomous peers in a distributed network.

23. The computer implemented method of claim 22, wherein the access sharing relationship is defined between one company and another company.

24. The computer implemented method of claim 12, further comprising deferring an iteration of access evolution for some limited or unlimited period of time by a manage exclusion, providing serial workflow.

25. The computer implemented method of claim 12, further including executing parallel workflow if access evolution is not deferred for some limited or unlimited period of time by a manage exclusion, providing parallel workflow.

94. The computer implemented method of claim 17, wherein the entity comprises a tuple.

95. The computer implemented method of claim 12, wherein the access receiver having a second set of access rights evolving as an automated function of the first set of rights by way of the shared subset, becomes a second access provider and shares at least a subset of the evolving second set of access rights with a second access receiver having a third set of access rights evolving as an automated function of the second set of access rights, wherein the access sharing relationship is at least one access sharing relationship in a network of access control.

96. The computer implemented method of claim 12, wherein the access receiver is one of a plurality of access receivers and the access provider is one of a plurality of access providers, any access receiver becoming one of the plurality of access providers by granting access rights to any of the plurality of access receivers.

97. The computer-implemented method of claim 96, wherein the step of granting access rights to any of the plurality of access receivers creates a hierarchical tree of derived and evolving access.

98. The computer-implemented method of claim 12, wherein after the step of sharing the subset with the access receiver, any changes made by the access receiver to the entity or the file related to the subset automatically flow back to the access provider as long as the manage exclusion remains released.

99. The computer-implemented method of claim 12, wherein the step of sharing the subset with the access receiver shares the entity or file in real-time, subject to the evolving access rights of the access receiver.

120. The computer implemented method of claim 12, further comprising creating a hierarchy of access sharing based on a plurality of access evolution iterations.

122. The computer implemented method of claim 12, wherein the access provider comprises one of:

a user, a group, a task, a document, a file, a relation, a function.

123. The computer implemented method of claim 12, wherein the access receiver comprises one of:

a user, a group, a task, a document, a file, a relation, a function.

124. The computer implemented method of claim 12, wherein the access provider and the access receiver are entities linked together in a specific order or combination to establish one of:

a serial work flow, a parallel work flow, and a combination of serial and parallel work flow.

125. The computer implemented method of claim 17, wherein the entity comprises one of:

a form, a relationship, an access provider and an access receiver.

26-93. -93. (canceled)

100. A computer program product embodied in a computer readable storage medium as computer executable instructions for implementing access evolution for automating the sharing of access rights in a computer environment having one or more access sharing relationships, the instructions when executed by a computer performing the steps of:

a) creating an access sharing relationship in which an access provider having a first set of access rights shares at least a subset of the first set of access rights with an access receiver having a second set of access rights, so that the second set of access rights evolves as an automated function of the first set of access rights by way of the shared subset, wherein the access sharing relationship is one of one or more access sharing relationships in a network of access control;

b) defining the subset based on constraints of the access sharing relationship; and

c) sharing the subset with the access receiver,

whereby the steps of defining and sharing comprise an iteration of access evolution, and

wherein the steps of creating, defining, and sharing are performable by a computer.

101. The computer program product of claim 100, wherein the sharing is implemented by derived access control, such that the access receiver derives access from the provider.

102. The computer program product of claim 100, wherein the access sharing relationship is a first access sharing relationship further including creating a second access sharing relationship in the computer environment, wherein the access receiver of the first access sharing relationship is also the access provider in the second access sharing relationship.

103. The computer program product of claim 100, wherein the access sharing relationship is a first access sharing relationship further comprising creating a second access sharing relationship in the computer environment, wherein the access provider of the first access sharing relationship is also the access receiver in the second access sharing relationship.

104. The computer program product of claim 100, further comprising the step of creating another access sharing relationship that is symmetrical to the access sharing relationship, such that an access provider in the another access sharing relationship is the access receiver in the access sharing relationship and an access receiver in the another access sharing relationship is the access provider in the access sharing relationship, creating a bi-directional access sharing relationship.

105. The computer program product of claim 100, wherein the step for sharing shares access to at least one of the entity and the file.

106. The computer program product of claim 100, further comprising the step of evolving the access rights of the receiver over time in response to changes in the access rights of the provider.

107. The computer program product of claim 100, wherein the access rights include access constraints.

108. The computer program product of claim 100, wherein the step of defining the subset includes removing from the subset another subset of access, wherein the another subset contains access for which a manage exclusion is applied, so that the evolution is deferred by the manage exclusion for a limited or unlimited period time during serial workflow.

109. The computer program product of claim 100, wherein the step of defining the subset includes adding to the subset another subset of access, wherein the another subset contains access for which a manage exclusion is released, so that access automatically evolves as a result of the completion of an iteration of serial workflow.

112. The computer program product of claim 100, further comprising the step of deferring an iteration of access evolution for some limited or unlimited period of time by a manage exclusion, providing serial workflow.

113. The computer program product of claim 100, further including executing parallel workflow if access evolution is not deferred for some limited or unlimited period of time by a manage exclusion, providing parallel workflow.

114. The computer program product of claim 105, wherein the entity comprises a tuple.

115. The computer program product of claim 100, wherein the access receiver having a second set of access rights evolving as an automated function of the first set of rights by way of the shared subset, becomes a second access provider and shares at least a subset of the evolving second set of access rights with a second access receiver having a third set of access rights evolving as an automated function of the second set of access rights, wherein the access sharing relationship is at least one access sharing relationship in a network of access control.

116. The computer program product of claim 100, wherein the access receiver is one of a plurality of access receivers and the access provider is one of a plurality of access providers, any access receiver becoming one of the plurality of access providers by granting access rights to any of the plurality of access receivers.

117. The computer program product of claim 116, wherein the step of granting access rights to any of the plurality of access receivers creates a hierarchical tree of derived and evolving access.

118. The computer program product of claim 100, wherein after the step of sharing the subset with the access receiver, any changes made by the access receiver to the entity or the file related to the subset automatically flow back to the access provider as long as the manage exclusion remains released.

119. The computer program product of claim 100, wherein the step of sharing the subset with the access receiver shares the entity or file in real-time, subject to the evolving access rights of the access receiver.

121. The computer program product of claim 100, wherein the instructions perform the step of creating a hierarchy of access sharing based on a plurality of access evolution iterations.

126. The computer program product of claim 105, wherein the entity comprises one of:

a form, a relationship, an access provider and an access receiver.

110. The computer program product 100, wherein the access sharing relationship is defined between autonomous peers in a distributed network.

111. The computer program product of claim 110, wherein the access sharing relationship is defined between one company and another company.