EMAIL EFFECTIVITY FACILTY IN A NETWORKED SECURE COLLABORATIVE EXCHANGE ENVIRONMENT

• US 20170093870A1
• Filed: 12/16/2016
• Published: 03/30/2017
• Est. Priority Date: 04/27/2012
• Status: Active Grant

• Current Assignee: IntraLinks Incorporated (SS&C Technologies Holdings Incorporated)
• Original Assignee: IntraLinks Incorporated (SS&C Technologies Holdings Incorporated)
• Inventors: Meyer, Jerry Lee
• Granted Patent: US 10,356,095 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 51/08 Annexed information, e.g. attachments
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

In embodiments of the present invention improved capabilities are described for managing access to a secure exchange environment managed by an intermediate business entity through a user email identity, the method comprising establishing a secure exchange server hosted by an intermediate business entity, wherein communications and access to a collection of files established by a first business entity are managed for a second business entity; and establishing an email effectivity facility that allows a user of the first business entity to specify a condition for email-based access to at least one resource in the collection of files, wherein the condition expresses (a) an effective period for using an email providing access to the resource and (b) a condition of email access to the resource by a designated individual of the second business entity, wherein the access permission was assigned using a specific email address of the designated individual.

Claims

1. A method for managing access to a secure exchange environment managed by an intermediate business entity, the method comprising:

establishing a secure exchange server hosted by an intermediate business entity, wherein communications and access to a collection of files established by a first business entity are managed to allow conditional secure access to resources of the collection of files by individuals of a second business entity different than the first business entity; and

establishing an email effectivity facility, managed by the secure exchange server, that allows a user of the first business entity to specify conditions for email-based access by a designated individual of the second business entity to at least one resource in the collection of files of the first business entity,

wherein an access permission is assigned using at least one individual user email identity including at least one specific email account of the designated individual of the second business entity, and

wherein the conditions for email-based access permit access, viewing, and editing of the collection of files stored on a computer device of the designated individual while the computing device is disconnected from a communication network.

2. The method of claim 1, further comprising associating multiple specific email accounts with the at least one individual user email identity of the designated individual of the second business entity.

3. The method of claim 1, wherein the first business entity provides updates to the conditions for email-based access as an association of the designated individual of the second business entity with the first business entity changes.

4. The method of claim 1, wherein the conditions of email access further include a status of an email account of the designated individual of the second business entity, and the status of the email account continues to be monitored when the designated individual of the second entity is no longer employed by the second business entity.

5. The method of claim 1, wherein the collection of files stored on the computing device can be accessed through the use of the at least one of the plurality of encryption keys if the limited number of uses for the key has not been exceeded.

6. The method of claim 5, wherein the encrypted data file is access-controlled through digital rights management.

7. The method of claim 1, wherein the conditions for email-based access identify a number of offline accesses the second user is permitted while disconnected from the communication network.

8. A method for managing access to a secure exchange environment managed by an intermediate business entity, the method comprising:

establishing a secure exchange server hosted by an intermediate business entity, wherein communications and access to a collection of files established by a first business entity are managed to allow conditional secure access to resources of the collection of files by individuals of a second business entity different than the first business entity; and

establishing an email effectivity facility, managed by the secure exchange server, that allows a user of the first business entity to specify conditions for email-based access by a designated individual of the second business entity to at least one resource in the collection of files of the first business entity,

wherein an access permission is assigned using at least one individual user email identity including at least one specific email account of the designated individual of the second business entity, and

wherein the conditions for email-based access permit rendering files of the collection of files as actively rendered documents from the secure exchange server to a computer device of the designated individual through a rendering viewer on the computer device.

9. The method of claim 8, further comprising associating multiple specific email accounts with the at least one individual user email identity of the designated individual of the second business entity.

10. The method of claim 8, wherein the first business entity provides updates to the conditions for email-based access as an association of the designated individual of the second business entity with the first business entity changes.

11. The method of claim 8, wherein the conditions of email access further include a status of an email account of the designated individual of the second business entity, and the status of the email account continues to be monitored when the designated individual of the second entity is no longer employed by the second business entity.

12. The method of claim 8, wherein the actively rendered documents are not capable of being viewed by an application running locally on the computing device or through a remote connection to an application running on another computing device.

13. The method of claim 12, wherein the rendering viewer is adapted to deny permission to take screen-shots of the actively rendered documents.

14. The method of claim 8, further wherein the rendering viewer runs through a browser running on the computing device.

15. A method for managing access to a secure exchange environment managed by an intermediate business entity, the method comprising:

establishing a secure exchange server hosted by an intermediate business entity, wherein communications and access to a collection of files established by a first business entity are managed to allow conditional secure access to resources of the collection of files by individuals of a second business entity different than the first business entity; and

establishing an email effectivity facility, managed by the secure exchange server, that allows a user of the first business entity to specify conditions for email-based access by a designated individual of the second business entity to at least one resource in the collection of files of the first business entity, wherein the specified conditions include the ability to revoke access to the at least one resource after the at least one resource has been downloaded to a computing device by the designated individual; and

assigning an access permission using at least one individual user email identity including at least one specific email account of the designated individual of the second business entity.

16. The method of claim 15, further comprising associating multiple specific email accounts with the at least one individual user email identity of the designated individual of the second business entity.

17. The method of claim 15, wherein the first business entity provides updates to the conditions for email-based access as an association of the designated individual of the second business entity with the first business entity changes.

18. The method of claim 15, wherein the conditions of email access further include a status of an email account of the designated individual of the second business entity, and the status of the email account continues to be monitored when the designated individual of the second entity is no longer employed by the second business entity.

19. The method of claim 15, wherein the secure exchange server tracks viewing of the collection of files.

20. The method of claim 15, wherein revoking access to the at least one resource comprises revoking access to all copies of the at least one resource.

21. The method of claim 15, wherein the at least one resource is a secure encrypted computer data content.

22. The method of claim 15, wherein the at least one resource is a digital rights management encoded computer data content.

23. The method of claim 15, further comprising:

granting, by a user of the first business entity, access to the at least one resource;

downloading, by the designated individual, the at least one resource to a computing device;

receiving a request from the user of the first business entity to revoke access to the at least one resource by the designated individual; and

revoking access to the at least one resource in response to the received request from the user to revoke access.

24. The method of claim 23, wherein revoking access to the at least one resource comprises a change in the digital rights management of the at least one resource.