METHOD AND SYSTEM FOR CONTROLLING DATA ACCESS ON USER INTERFACES

• US 20120240220A1
• Filed: 03/15/2011
• Published: 09/20/2012
• Est. Priority Date: 03/15/2011
• Status: Abandoned Application

• Current Assignee: Raytheon Company (Rtx Corporation)
• Original Assignee: Raytheon Company (Rtx Corporation)
• Inventors: Smith, Timothy D.
• Application Number:
  US13/048,341
• Publication Number:
  US 20120240220A1
• Time in Patent Office: Days
• US Class Current: 726/17
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/84 output devices, e.g. displays or monitors
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control

Abstract

A system for controlling access to data at the user interface level includes a device permissions manager to manage user access to data on a device including a device permissions comparator configured to receive a plurality of user profiles corresponding to users in proximity to the device and including user permissions to the data, and to generate a comparison of the user permissions. The device permissions manager also includes a device access controller configured to control access to the data on the device in response to the comparison of the user permissions.

Claims

1. A system, comprising:

a device permissions manager to manage user access to data on a device, comprising;

a device permissions comparator configured to receive a plurality of user profiles, each user profile corresponding to a user in proximity to the device and comprising user permissions to the data, and to generate a comparison of the user permissions; and

a device access controller configured to control access to the data on the device in response to the comparison of the user permissions.

2. The system of claim 1, wherein user proximity to the device corresponds to users located within an interface zone about the device.

3. The system of claim 2, wherein the device permissions manager is configured to receive user profile updates based on a predetermined condition corresponding to at least one of:

a user entering the interface zone about the device or a user exiting the interface zone about the device.

4. The system of claim 1, wherein user proximity to the device corresponds to the device being located within at least one interface zone defined about each user.

5. The system of claim 4, wherein the device permissions manager is configured to receive user profile updates based on a predetermined condition corresponding to a device location relative to the at least one interface zone.

6. The system of claim 1, wherein the device includes a plurality of devices.

7. The system of claim 6, wherein the plurality of devices is located in a predetermined location.

8. The system of claim 6, wherein the plurality of devices is associated with a predetermined device type.

9. The system of claim 1, wherein the device permissions manager is unable to extract user identification information from the plurality of user profiles.

10. A method for controlling data access on a device, comprising:

receiving a plurality of user profiles, each user profile corresponding to a user in proximity to a device and comprising user permissions to data;

generating a comparison of user permissions to determine data access on the device; and

in response to the comparison of user permissions, controlling access to data on the device.

11. The method of claim 10, further comprising:

determining user proximity to the device based on users located within an interface zone about the device.

12. The method of claim 11, wherein receiving a plurality of user profiles comprises:

receiving user profile updates based on a predetermined condition corresponding to at least one of a user entering the interface zone about the device or a user exiting the interface zone about the device.

13. The method of claim 10, further comprising:

determining user proximity to the device based on the device being located within interface zones defined about each user.

14. The method of claim 13, wherein receiving a plurality of user profiles comprises:

receiving user profile updates based on a predetermined condition corresponding to a device location relative to at least one of the interface zones.

15. The method of claim 10, wherein the device includes a plurality of devices.

16. The method of claim 15, wherein the plurality of devices is located in a predetermined location.

17. The method of claim 15, wherein the plurality of devices is associated with a predetermined device type.

18. A computer readable medium having encoded thereon software for controlling access to data, said software comprising instructions for:

receiving a plurality of user profiles, each user profile corresponding to a user in proximity to a device and comprising user permissions to data;

generating a comparison of user permissions to determine data access on the device; and

in response to the comparison of user permissions, controlling access to data on the device.

19. The computer readable medium of claim 18, said software further comprising instructions for:

determining user proximity to the device based on users located within an interface zone about the device.

20. The computer readable medium of claim 18, wherein receiving a plurality of user profiles comprises:

receiving user profile updates based on a predetermined condition corresponding to at least one of a user entering the interface zone about the device or a user exiting the interface zone about the device.

21. The computer readable medium of claim 18, said software further comprising instructions for:

determining user proximity to the device based on the device being located within interface zones defined about each user.

22. The computer readable medium of claim 21, wherein receiving a plurality of user profiles comprises:

receiving user profile updates based on a predetermined condition corresponding to a device location relative to at least one of the interface zones.

23. The computer readable medium of claim 18, wherein the device includes a plurality of devices.

24. The computer readable medium of claim 23, wherein the plurality of devices is located in a predetermined location.

25. The system of claim 23, wherein the plurality of devices is associated with a predetermined device type.