Abstractions and automation for enhanced sharing and collaboration

• US 9,076,128 B2
• Filed: 02/23/2011
• Issued: 07/07/2015
• Est. Priority Date: 04/20/2004
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Horvitz, Eric J., Grudin, Jonathan T., Dewan, Prasun
• Primary Examiner(s): WILLIAMS, JEFFERY L
• Application Number:
  US13/033,409
• Publication Number:
  US 20110314555A1
• Time in Patent Office: 1,595 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06Q 10/10 Office automation; Time management

Abstract

The present invention provides methods for using abstractions of people, including dynamic and static groups of people, to enhance the efficiency of the specification and automation of policies for sharing information between users with a “need-to-know.” An instance of the present invention can also provide these users information based on a “time-to-know.”By providing access to information based on group affiliation and properties of the content of the information, the present invention maintains optimal information privacy while minimizing encumbrances to sharing data with appropriate users and even at appropriate times. The present invention can be integrated with other communication technologies to facilitate access to information in a time appropriate manner. Other instances of the present invention employ automated and semi-automated, mixed-initiative techniques, to make information-sharing decisions. Additional instances of the present invention include the employment of machine-learning techniques to facilitate construction of access policies from the actions or profile of a single user or a community of users, including the construction of automated sharing agents that work in an automated or mixed-initiative manner to respond to real-time requests for information.

Claims

1. A system that facilitates information access control, comprising:

one or more processors;

a component, implemented using at least one of the one or more processors, that receives an access request for a data item owned by a data item owner, the access request being based on a request from a requesting user; and

an access control component, implemented using at least one of the one or more processors, that;

determines whether the requesting user is a member of a dynamically created group of users based on at least one ongoing and changing activity of the requesting user that is common among the group of users;

dynamically selects an access policy based on the dynamically created group of users to which the requesting user is determined to belong and further based on at least one of availability of the data item owner or an activity of the data item owner; and

selectively provides access to the data item to the requesting user based on the access policy.

2. The system of claim 1, wherein:

the data item comprises current contact information for the data item owner; and

the access control component routes a communication from the requesting user to the data item owner based on the contact information to selectively provide the access to the data item to the requesting user.

3. The system of claim 1, wherein:

the data item comprises at least one selected from the group consisting of at least one data file, at least one data folder, at least one directory, at least one record, at least one audio file and at least one video file.

4. The system of claim 1, wherein:

the access control component selectively provides the access to the data item to the requesting user based on a type of the dynamically created group of users.

5. The system of claim 1, wherein:

the dynamically created group of users comprises one or more users that will be involved in a collaborative activity within a predetermined time.

6. The system of claim 1, wherein:

the access control component communicates the access request to the data item owner to dynamically select the access policy; and

the access control component allows the requesting user to access at least a portion of the data item when no response to the access request is received from the data item owner within a predetermined amount of time to selectively provide the access to the data item to the requesting user.

18. The system of claim 1, wherein:

the access control component selectively provides access to the data item to the requesting user based on an inferred time urgency of the data item.

7. A method of operating a computing device, the method comprising:

performing with at least one processor of the computing device;

receiving an access request for a data item owned by a data item owner, the access request being based on a request from a requesting user;

determining whether the requesting user is a member of a dynamically created group of users based on at least one ongoing and changing activity of the requesting user that is common among the group of users;

dynamically selecting an access policy based on the dynamically created group of users to which the requesting user is determined to belong, the dynamically selecting comprising

communicating the access request to the data item owner; and

selectively providing access to the data item to the requesting user based on the access policy, the selectively providing access comprising

when no response to the access request is received from the data item owner within a predetermined amount of time, allowing the requesting user to access at least a portion of the data item.

8. The method of claim 7, wherein:

the data item comprises current contact information for the data item owner; and

providing access to the data item comprises routing a communication from the requesting user to the data item owner based on the contact information.

9. The method of claim 7, wherein:

providing access to the data item comprises providing access based on a type of the dynamically created group of users.

10. The method of claim 7, wherein:

dynamically selecting the access policy further comprises selecting the access policy based on a context of the data item owner.

11. The method of claim 10, wherein:

the context of the data item owner comprises at least one selected from the group consisting of an activity performed by the data item owner, a location of the data item owner, an availability of the data item owner, an anticipated activity level of the data item owner, an anticipated location of the data item owner and communication means available to the data item owner.

12. The method of claim 7, wherein:

the dynamically created group of users comprises one or more users that will be involved in a collaborative activity within a predetermined time.

19. The method of claim 7, wherein:

the access policy is configured to request a reason for the requesting user to access the data item.

13. An article comprising a device having computer-executable instructions stored thereon that enable a processor-based system to perform operations, said computer-executable instructions comprising:

instructions for enabling the processor-based system to determine whether a requesting user is a member of a dynamically created group of users based on at least one ongoing and changing activity of the requesting user that is common among the group of users, a received access request for a data item owned by a data item owner being based on a request from the requesting user, the at least one ongoing and changing activity including a first ongoing and changing activity, the first ongoing and changing activity being a task, a project, or a meeting;

instructions for enabling the processor-based system to dynamically select an access policy based on the dynamically created group of users to which the requesting user is determined to belong; and

instructions for enabling the processor-based system to selectively provide access to the data item to the requesting user based on the access policy.

14. The article of claim 13, wherein:

the data item comprises current contact information for the data item owner; and

the instructions for enabling the processor-based system to selectively provide the access to the data item to the requesting user comprise instructions for routing a communication from the requesting user to the data item owner based on the contact information.

15. The article of claim 13, wherein:

each access of the requesting user to the data item is recorded into a log accessible to the data item owner; and

said computer-executable instructions further comprise instructions for enabling the processor-based system to provide a notification to the requesting user that the access of the requesting user to the data item is recorded into the log.

16. The article of claim 13, wherein:

the dynamically created group of users comprises one or more users that will be involved in a collaborative activity within a predetermined time.

17. The article of claim 13, wherein:

the instructions for enabling the processor-based system to dynamically select the access policy are configured to select the access policy further based on an employment status of the requesting user and at least one content property associated with the data item.

20. The article of claim 13, wherein:

the access policy allows a real-time change to an access control permission based on a change of information regarding at least one of the data item owner or the requesting user.