# US 7,975,311 B2 · Media device access control mechanism > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 7,975,311 B2 - Document ID: US7975311B2 - Status: Granted - Kind: B2 - Application number: 12/353,390 - Filed: 2009-01-14 - Published: 2009-10-15 - Granted: 2011-07-05 - Earliest claimed: 2008-04-09 - Assignees: Egress Software Technologies Ltd. - Inventors: Neil Larkins; Tony Pepper; John Goodyear - Web page: https://patentgrep.com/patent/US7975311B2 ## CPC - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Invention embodiments are concerned with the problem of controlling access to a media storage device in response to, e.g., employees leaving or changing jobs. More specifically, embodiments provide a method of controlling access to a media storage device storing a plurality of media objects. Thus embodiments of the invention solve the afore-mentioned problem by providing a mechanism for updating the list of recipients based on data received from a user identification system after the media storage device has been dispatched. ## Claims ### Claim 1 A method of controlling access to a media storage device, the media storage device storing a plurality of media objects, the method comprising: receiving first data identifying the media storage device and second data identifying a list comprising at least one authorised recipient of the media storage device; storing the first data in association with the second data; issuing the media storage device to at least one recipient on the list; using a delivery session identifier to establish a delivery session for the issued media storage device with a user identification system corresponding to recipients associated with the second data; thereafter: updating the second data on the basis of data received from the user identification system and the delivery session identifier, thereby to modify the list of authorised recipients of the issued media storage device, wherein the delivery session identifier uniquely relates the issued media storage device and the media objects thereon to a given authorised recipient, and wherein the delivery session identifier is based on a combination of the first adapt and the second data. ### Claim 2 (depends on 1) A method according to claim 1, further comprising receiving cancellation instructions to cancel the delivery session identifier for the issued media storage device, and updating the second data in accordance with said cancellation instructions so as to prohibit access to the issued media storage device. ### Claim 3 (depends on 2) A method according to claim 2, in which the cancellation instructions identify one or more recipients listed in the second data. ### Claim 4 (depends on 2) A method according to claim 2, in which the cancellation instructions identify temporal parameters for use in controlling access to the issued media storage device. ### Claim 5 (depends on 1) A method according to claim 1, further comprising receiving modification instructions to modify at least one recipient associated with the delivery session identifier, and updating the second data in accordance with said modification instructions so as to modify access to the issued media storage device. ### Claim 6 (depends on 5) A method according to claim 5, in which the modification instructions identify a recipient other than said at least one recipient listed in the second data, and the method comprises updating the second data to include the other recipient. ### Claim 7 (depends on 2) A method according to claim 2, in which the first data identifies individual sets of multimedia objects stored on the media storage device, and the second data identifies recipients of individual said sets of said multimedia objects, in which the recipient of a first set of multimedia objects differs from a second, different, set of multimedia objects. ### Claim 8 (depends on 5) A method according to claim 5, in which the first data identifies individual sets of multimedia objects stored on the media storage device, and the second data identifies recipients of individual said sets of said multimedia objects, in which the recipient of a first set of multimedia objects differs from a second, different, set of multimedia objects. ### Claim 9 (depends on 2) A method according to claim 2, including storing said second data in a template, the template comprising a hierarchy identifying functional responsibilities associated with a corporation to which the media storage device is issued, each said functional responsibility having one or more predefined access rights to the media storage device, said list thereby defining access rights for recipients of the media storage device. ### Claim 10 (depends on 2) A method according to claim 2, further comprising receiving a request to access the issued multimedia storage device and validating said request on the basis of the second data. ### Claim 11 (depends on 8) A method according to claim 8, further comprising receiving a request to access the issued multimedia storage device and validating said request on the basis of the second data. ### Claim 12 A distributed access control system for controlling access to a media storage device, the media storage device storing a plurality of media objects, the distributed access control system comprising: an interface arranged to receive first data identifying the media storage device and second data identifying a list comprising at least one authorised recipient of the media storage device; a storage system arranged to store the first data in association with the second data; a device issuing system arranged to issue a media storage device to at least one recipient on the list, wherein the device issuing system is arranged to create a delivery session identifier to establish a delivery session for the issued media storage device with a user identification system corresponding to at least one recipient associated with the second data, and the storage system is arranged to update the second data on the basis of the delivery session and data received from the user identification system, thereby to modify the list of authorised recipients of the issued media storage device, and wherein the delivery session identifier uniquely relates the issued media storage device and the media objects thereon to a given authorised recipient, and wherein the delivery session identifier is based on a combination of the first adapt and the second data. ### Claim 13 (depends on 12) A distributed access control system according to claim 12, wherein the interface is arranged to receive cancellation instructions from the user identification system to cancel the delivery session identifier for the issued media storage device in respect of at least one recipient listed in the second data, and the storage system is arranged to update the second data in accordance with said cancellation instructions so as to prohibit at least one access attempt to the issued media storage device. ### Claim 14 (depends on 13) A distributed access control system according to claim 13, wherein the storage system is arranged to store temporal parameter data for use in controlling access to the issued media storage device, and the cancellation instructions include a value for said temporal parameter data in relation to at least one recipient listed in the second data, the storage system being arranged to update the temporal parameter data in accordance with said value so as to prohibit at least one access attempt to the issued media storage device. ### Claim 15 (depends on 12) A distributed access control system according to claim 12, wherein the interface is arranged to receive modification instructions from the user identification system to modify at least one recipient associated with the delivery session identifier, and the storage system is arranged to update the second data in accordance with said modification instructions so as to modify access to the issued media storage device. ### Claim 16 (depends on 15) A distributed access control system according to claim 15, in which the modification instructions identify a recipient other than said at least one recipient listed in the second data, and the storage system is arranged to update the second data to include the other recipient. ### Claim 17 A non-transitory computer readable medium comprising computer executable instructions for carrying out a method for controlling access to a media storage device, the media storage device storing a plurality of media objects, the method comprising: receiving first data identifying the media storage device and second data identifying a list comprising at least one authorised recipient of the media storage device; storing the first data in association with the second data; issuing the media storage device to at least one recipient on the list; using a delivery session identifier to establish a delivery session for the issued media storage device with a user identification system corresponding to recipients associated with the second data; and thereafter: updating the second data on the basis of data received from the user identification system and the delivery session identifier, thereby to modify the list of authorised recipients of the issued media storage device, wherein the delivery session identifier uniquely relates the issued media storage device and the media objects thereon to a given authorised recipient, and wherein the delivery session identifier is based on a combination of the first adapt and the second data. ### Claim 18 (depends on 17) A non-transitory computer readable medium according to claim 17, in which the method further comprises receiving cancellation instructions to cancel the delivery session identifier for the issued media storage device, and updating the second data in accordance with said cancellation instructions so as to prohibit access to the issued media storage device. ### Claim 19 (depends on 18) A non-transitory computer readable medium according to claim 18, in which the cancellation instructions identify one or more recipients listed in the second data. ### Claim 20 (depends on 18) A non-transitory computer readable medium according to claim 18, in which the cancellation instructions identify temporal parameters for use in controlling access to the issued media storage device. ### Claim 21 (depends on 17) A non-transitory computer readable medium according to claim 17, the method further comprising receiving modification instructions to modify at least one recipient associated with the delivery session identifier, and updating the second data in accordance with said modification instructions so as to modify access to the issued media storage device. ### Claim 22 (depends on 21) A non-transitory computer readable medium according to claim 21, in which the modification instructions identify a recipient other than said at least one recipient listed in the second data, and the method comprises updating the second data to include the other recipient. ### Claim 23 (depends on 18) A non-transitory computer readable medium according to claim 18, in which the first data identifies individual sets of multimedia objects stored on the media storage device, and the second data identifies recipients of individual said sets of said multimedia objects, in which the recipient of a first set of multimedia objects differs from a second, different, set of multimedia objects. ### Claim 24 (depends on 21) A non-transitory computer readable medium according to claim 21, in which the first data identifies individual sets of multimedia objects stored on the media storage device, and the second data identifies recipients of individual said sets of said multimedia objects, in which the recipient of a first set of multimedia objects differs from a second, different, set of multimedia objects. ### Claim 25 (depends on 18) A non-transitory computer readable medium according to claim 18, the method including storing said second data in a template, the template comprising a hierarchy identifying functional responsibilities associated with a corporation to which the media storage device is issued, each said functional responsibility having one or more predefined access rights to the media storage device, said list thereby defining access rights for recipients of the media storage device. ### Claim 26 (depends on 18) A non-transitory computer readable medium according to claim 18, the method further comprising receiving a request to access the issued multimedia storage device and validating said request on the basis of the second data. ### Claim 27 (depends on 24) A non-transitory computer readable medium according to claim 24, the method further comprising receiving a request to access the issued multimedia storage device and validating said request on the basis of the second data. ### Claim 28 An access control database for controlling access to a media storage device, the media storage device holding a plurality of media objects, the access control database system comprising an interface arranged to receive first data identifying the media storage device and to receive second data identifying a list comprising at least one authorised recipient of the media storage device, wherein the access control database is arranged to store the received first data in association with the received second data, wherein the access control database is operable to issue data indicative of at least one recipient from the stored second data to a device issuing system arranged to issue a media storage device, and wherein the access control database is further arranged to: store a delivery session identifier indicative of a delivery session established for the issued media storage device with a user identification system corresponding to recipients associated with the stored second data; and update the second data on the basis of data received from the user identification system and the stored delivery session identifier, thereby to modify the stored list of authorised recipients of the issued media storage device, and wherein the delivery session identifier uniquely relates the media storage device and the media objects thereon to a given authorised recipient, and wherein the delivery session identifier is based on a combination of the first adapt and the second data.