Back to results
US 9,805,376 B2Granted
Permitting granular distribution of privileges to contextual communities
AssigneeInternational Business Machines Corporation
InventorsPradipta De, Kuntal Dey
Life of this patent
Estimating the term…
Abstract
Methods and arrangements for the granular distribution of privileges to contextual communities. A user request for an active capability is assimilated. A code is generated which permits exercise of the active capability by the user and at least one secondary recipient. Execution of the active capability is permitted responsive to an attempt at executing the active capability by at least one taken from the group consisting of: the user and the at least one secondary recipient, and execution of the active capability is denied responsive to an attempt at executing the active capability by a recipient other than the user and the at least one secondary recipient.
Claims19
A method comprising:
- utilizing at least one processor to execute computer code configured to perform the steps of:
- assimilating a user request for an active capability of an electronic instrument;
- generating a code and embedding the code within the electronic instrument, wherein the code permits exercise of the active capability by the user and at least one secondary recipient, wherein the at least one secondary recipient comprises at least one recipient identified by the user through forwarding of the electronic instrument to the at least one recipient;
- permitting execution, by a policy enforcement engine, of the active capability responsive to an attempt at executing the active capability by at least one taken from the group consisting of:
- the user and the at least one secondary recipient, wherein the permitting execution of the active capability comprises determining that the one of:
- the user and the at least one secondary recipient is authorized to execute the active capability;
- and
- denying execution, by a policy enforcement engine, of the active capability responsive to an attempt at executing the active capability by a recipient other than the user and the at least one secondary recipient, wherein the denying execution of the active capability comprises determining that the recipient other than the user and the at least one secondary recipient is not authorized to execute the active capability;
- wherein said generating comprises imparting a use policy to the code;
- the use policy comprising a distribution policy;
- the distribution policy relating to a sharing depth with respect to the user.
8 more elements
An apparatus comprising:
- at least one processor;
- and
- a computer readable storage medium having computer readable program code embodied therewith and executable by the at least one processor, the computer readable program code comprising:
- computer readable program code configured to assimilate a user request for an active capability of an electronic instrument;
- computer readable program code configured to generate a code and embed the code within the electronic instrument, wherein the code permits exercise of the active capability by the user and at least one secondary recipient, wherein the at least one secondary recipient comprises at least one recipient identified by the user through forwarding of the electronic instrument to the at least one recipient;
- computer readable program code configured to permit execution, by a policy enforcement engine, of the active capability responsive to an attempt at executing the active capability by at least one taken from the group consisting of:
- the user and the at least one secondary recipient, wherein the computer readable program code configured to permit execution of the active capability is further configured to determine that the at least one of the user and the at least one secondary recipient is authorized to execute the active capability;
- and
- computer readable program code configured to deny execution, by a policy enforcement engine, of the active capability responsive to an attempt at executing the active capability by a recipient other than the user and the at least one secondary recipient, wherein the computer readable program code configured to deny execution of the active capability is further configured to determine that the recipient other than the user and the at least one secondary recipient is not authorized to execute the active capability;
- wherein the computer readable program code configured to generate the code is further configured to impart a use policy to the code;
- the use policy comprising a distribution policy;
- the distribution policy relating to a sharing depth with respect to the user.
9 more elements
A computer program product comprising:
- a non-transitory computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising:
- computer readable program code configured to assimilate a user request for an active capability of an electronic instrument;
- computer readable program code configured to generate a code and embed the code within the electronic instrument, wherein the code permits exercise of the active capability by the user and at least one secondary recipient, wherein the at least one secondary recipient comprises at least one recipient identified by the user through forwarding of the electronic instrument to the at least one recipient;
- computer readable program code configured to permit execution, by a policy enforcement engine, of the active capability responsive to an attempt at executing the active capability by at least one taken from the group consisting of:
- the user and the at least one secondary recipient, wherein the computer readable program code configured to permit execution of the active capability is further configured to determine that the at least one of the user and the at least one secondary recipient is authorized to execute the active capability;
- and
- computer readable program code configured to deny execution, by a policy enforcement engine, of the active capability responsive to an attempt at executing the active capability by a recipient other than the user and the at least one secondary recipient, wherein the computer readable program code configured to deny execution of the active capability is further configured to determine that the recipient other than the user and the at least one secondary recipient is not authorized to execute the active capability;
- wherein the computer readable program code configured to generate the code is further configured to impart a use policy to the code;
- the use policy comprising a distribution policy;
- the distribution policy relating to a sharing depth with respect to the user.
7 more elements
Dependencies are inferred from the claim text.