Elastic virtual information access ecosystem

A system for securely limiting access to a plurality of documents each having a plurality of segments, the system comprising:

• a processor and a memory coupled to the processor, the memory comprising a use-zone definition software engine, a use zone instancing software engine, and instructions that when executed by then processor cause:
• the use-zone definition software engine to:
• define a plurality of teams, each team comprising a plurality of users, wherein each team and each user is associated with a unique id, each of the unique id used to uniquely identify a respective one of the plurality of teams or plurality of users;
• define the plurality of documents, each document associated with only one of the plurality of teams indicated as an owning team, the each respective document associated with the respective unique id of the respective owning team to establish the respective owning team;
• for each document of the plurality of documents, define by the respective owning team a plurality of segments each associated with a segment id, each of the segment ids used to uniquely identify a respective segment wherein each of the plurality of segments is a unique portion of and comprised by the each document;
• define a plurality of use-zones, for each of the plurality of use-zones:
• define a first set of one or more parameters from a spatial category including a designation of a building,
• define a second set of one or more parameters from a temporal category,
• define a third set of one or more parameters from a communications category, and
• define the first, second, and third sets of one or more parameters as use-zone parameters,
• whereby the use-zone parameters determine conditions governing document related activities and constraints thereof that a user is authorized to perform on a document segment;
• for each of the plurality of segments of each of the plurality of documents:
• associate, by the respective owning team, the each segment with one or more of the plurality of use-zones;
• for each of the plurality of users:
• receive user credentials that identify the each user,
• receive mobile device information for uniquely identifying a mobile device to be used by the user,
• receive a proposed association between the each user and each of one or more pairs, each pair including one of the plurality of segments and one of the associated one or more of the plurality of use-zones;
• for each of the proposed associations,
• receive an acceptance of or receive a rejection of, from a member of the respective owning team of the segment within the respective proposed pair, the proposed association;
• and the use-zone instancing software engine to:
• for each of the mobile devices identifiable by the received mobile device information:
• provide an executable program to the each mobile device,
• receive from the respective executable program, user credentials from a using user upon using the each mobile device,
• provide a copy of one or more segments to the each mobile device;
• attach the respective provided executable program to each of the provided copies of the one or more segments;
• wherein the respective executable program is configured to:
• upon each attempted access to any of the provided copies by the using user using the mobile device,
• collect zone status characterizing the attempted access,
• determine applicable use-zones by using the segment id of the any of the provided copies to identify corresponding use-zones previously associated with the corresponding segment, from which the any of the provided copies was copied,
• for each applicable use-zones, perform a comparison on between the collected zones status data and each the respective associated defined use-zone parameters to verify both:
• that the attempted access to the any of the provided copies is compliant with the each applicable use-zone including that the mobile device being used to access the any of the provided copies is located inside the building;
• and
• that the using user was the each user of an accepted proposed association between the each user and at least one pair, the at least one pair including:
• the any of the provided copies and
• at least one of the each applicable use-zones;
• and, upon disverification of either, destroy the any of the provided copies residing on the respective each of the mobile devices.