Back to results
US 12,724,911 B1Granted
Applying an authorization policy across multiple application programs with requests submitted through mobile app
AssigneeNextLabs, Inc.
InventorsKeng Lim, Poon Fung
Life of this patent
Estimating the term…
Abstract
A technique and system provide protection to information or documents via an authorization policy that is applied to multiple application programs and authorization requests are submitted through a REST API over HTTP or HTTPS. Methods, techniques, and systems control access to protected information or documents and use of content in protected information or documents to support information management policies.
Claims20
A method comprising:
- providing a document repository having a plurality of protected documents;
- providing a policy server having a first plurality of policies, wherein the first plurality of policies controls access to the plurality of protected documents;
- providing a secured viewing server having access to the document repository, wherein the secured viewing server provides access to the plurality of protected documents from a web browser;
- providing a content access governor having a second plurality of policies, wherein the second plurality of policies comprises a subset of the first plurality of policies;
- providing a data protection client having a third plurality of policies, wherein the data protection client has access to the document repository, wherein the third plurality of policies comprises a subset of the first plurality of policies;
- at the policy server, sending a policy in the first plurality of policies to the content access governor, wherein the policy controls access to a protected document in the document repository;
- at the policy server, sending the policy to the data protection client;
- at a mobile app, logging on to the secured viewing server by a first user;
- at the mobile app, opening the protected document by the first user;
- at the secured viewing server, receiving a first request to open the protected document;
- at the secured viewing server, sending a query to the content access governor with information relevant to the first request, wherein the secured viewing server invokes a content access governor application programming interface to send the query, wherein the information relevant to the first request comprises information about the open action, the protected document and the first user;
- at the content access governor, selecting a first subset of policies from the second plurality of policies relevant to the open action, the protected document and the first user;
- at the content access governor, evaluating the first subset of policies to produce a first decision on whether the first request is allowed;
- at the content access governor, sending the first decision to the secured viewing server in response to the query;
- at the secured viewing server, when the first request is allowed, obtaining a plurality of rights granted to the first user on the protected document from the content access governor;
- at the secured viewing server, when the first request is allowed, sending the protected document to the mobile app in response to the first request according to the plurality of rights granted;
- and
- at the mobile app, when the first request is allowed, loading the protected document in the mobile app, wherein loading the protected document implements the plurality of rights granted to the first user on the protected document.
15 more elements
A method comprising:
- providing a document repository having a plurality of protected documents;
- providing a policy server having a first plurality of policies, wherein the first plurality of policies controls access to the plurality of protected documents;
- providing a rights managed application running on a mobile computing device, wherein the rights managed application comprises a second plurality of policies, and the second plurality of policies comprises a subset of the first plurality of policies;
- providing a rights management server having access to the document repository, wherein the rights management server provides access to the plurality of protected documents from the rights managed application;
- providing a data protection client having a third plurality of policies, wherein the data protection client has access to the document repository, wherein the third plurality of policies comprises a subset of the first plurality of policies;
- at the policy server, sending a policy in the first plurality of policies to the rights managed application, wherein the policy controls access to a protected document in the document repository;
- at the policy server, sending the policy to the data protection client;
- at the rights managed application, opening the protected document by a first user, wherein the opening the protected document invokes an open operation;
- at the rights managed application, selecting a first subset of policies from the second plurality of policies relevant to the open operation, the protected document and the first user;
- at the rights managed application, evaluating the first subset of policies to produce a first decision on whether the open operation is allowed;
- at the rights managed application, when the open operation is allowed, analyzing the first subset of policies to produce a plurality of rights granted to the first user on the protected document;
- at the rights managed application, when the open operation is allowed, implementing an application program feature consistent with the plurality of rights granted;
- and
- at the rights managed application, when the open operation is allowed, rendering content of the protected document on the rights managed application.
11 more elements
Dependencies are inferred from the claim text.