Data Access Sharing

• US 20140282828A1
• Filed: 03/15/2013
• Published: 09/18/2014
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: Sky Socket Llc (Broadcom, Inc.)
• Inventors: Stuntebeck, Erich
• Granted Patent: US 9,275,245 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules

Abstract

Data access sharing may be provided. Requests may be received to display an data item associated with a list of data items. Upon determining whether a property of the data item is restricted by an access control policy, the property may be modified prior to rendering a display of the data item.

Claims

1. A method comprising:

determining whether an access control policy prohibits propagation of a first plurality of data items associated with an entity; and

in response to determining that the access control policy does not prohibit propagation of the plurality of data items associated with the entity;

propagating the first plurality of data items to an external location accessible by the entity,

integrating the first plurality of data items with at least one second plurality of data items, and

displaying a combined view of the integrated first plurality of data items and the at least one second plurality of data items.

2. The method of claim 1, wherein the entity comprises a plurality of users.

3. The method of claim 2, wherein the first plurality of data items is associated with a first user of the plurality of users and the at least one second plurality of data items is associated with a second user of the plurality of users.

4. The method of claim 1, wherein the first plurality of data items comprises at least one of the following:

a plurality of calendar events, a plurality of contacts, a plurality of files and a plurality of messages.

5. The method of claim 1, wherein the first plurality of data items comprises an enterprise plurality of data items associated with a user and the second plurality of data items comprises a personal plurality of data items associated with a user.

6. The method of claim 1, further comprising:

determining whether a second access control policy prohibits propagation of the second plurality of data items associated with the entity; and

in response to determining that the second access control policy does not prohibit propagation of the second plurality of data items associated with the entity, propagating the second plurality of data items to the external location accessible by the entity.

7. The method of claim 1, wherein the external location accessible by the entity comprises a web server.

8. The method of claim 1, wherein each data item of the first plurality of data items comprises a plurality of properties.

9. The method of claim 8, further comprising:

determining whether the access control policy applies to only a subset of the plurality of properties associated with each of the first plurality of data items; and

in response to determining that the access control policy applies to only a subset of the plurality of data properties, propagating the subset of the plurality of properties associated with each of the first plurality of data items to an external location accessible by the entity in accordance with the access control policy.

10. An apparatus comprising:

a memory storage; and

a processor coupled to the memory storage, wherein the processor is configured to;

store, in the memory storage, a first data set comprising a first plurality of data items associated with a user of the apparatus,

store, in the memory storage, a second data set comprising a second plurality of data items associated with a user of the apparatus,

receive a request to display a combined view of the first data set and the second data set, and

display an integrated view of the first plurality of data items and a restricted view of the second plurality of data items.

11. The apparatus of claim 10, wherein the second plurality of data items comprises a plurality of event information and wherein the restricted view of the second plurality of data items comprises a status associated with a time of each of the second plurality of data items.

12. The apparatus of claim 10, wherein the second plurality of data items comprises a plurality of message information and wherein the restricted view of the second plurality of data items comprises a source of the message.

13. The apparatus of claim 10, wherein the restricted view of the second plurality of data items comprises censoring at least one attribute of each of the second plurality of data items.

14. The apparatus of claim 10, wherein the processor being configured to display a view of the first plurality of data items and a restricted view of the second plurality of data items comprises the processor being configured to:

identify a subset of public properties associated with the second plurality of events; and

publish the subset of public properties associated with the second plurality of events.

15. The apparatus of claim 14, wherein the processor is further configured to:

receive a request to access the published subset of public properties associated with the second plurality of data items;

determine whether the request to access the published subset of public properties associated with the second plurality of events is authorized; and

in response to determining that the request to access the published subset of public properties associated with the second plurality of events is authorized, provide access to the published subset of public properties associated with the second plurality of data items.

16. The apparatus of claim 10, wherein the first plurality of data items and the second plurality of data items each comprise at least one of the following:

a plurality of calendar events, a plurality of contacts, a plurality of files and a plurality of messages.

18. The computer-readable medium of claim 15, further comprising:

receiving a request to publish the plurality of data items to a network location; and

modifying at least one of the plurality of data items according to the access control policy.

19. The computer-readable medium of claim 18, wherein modifying the at least one of the plurality of data items comprises removing at least one of the plurality of properties of the at least one of the plurality of data items.

20. The computer-readable medium of claim 16, wherein the access control policy comprises one of a plurality of access control policies associated with the plurality of data items.

17. A computer-readable medium that stores a set of instructions that when executed performs a method executed by the set of instructions comprising:

receiving a request to display at least one data item of a plurality of data items, wherein the at least one data item comprises a plurality of properties;

determining whether at least one of the plurality of properties is restricted by an access control policy;

in response to determining that the at least one of the plurality of properties is restricted by the access control policy, modifying the at least one of the plurality of properties; and

rendering a display of the modified at least one data item.