Computerized system facilitating secured electronic communication between and with children
AssigneeGoogale (2009) Ltd.
InventorNir Michalowitz
Life of this patent
Estimating the term…
Abstract
A mail server operative to communicate with external recipients via a gateway to external communication network/s; and to communicate with internal recipient/s including pupil end-users via an internal secured network. Associations between individual parents who are nodes in external communication network/s and pupil end-users; and white-lists of authorized communicants for individual pupil end-users, are stored. A whitelist provided to memory for a first pupil end-user includes a second pupil, if and only if the first and second pupils' parents have both, via respective parent user-interfaces, authorized communication between the first and second pupils.
Claims28
A secure social networking system for pupils including:
- a server comprising a mail server and a gateway, the mail server including a processor, operative to:
- a. communicate with external recipients via the gateway to at least one external communication network serving the external recipients;
- and
- b. communicate with at least one internal recipient including pupil end-users, thereby to define an internal secured network;
- computer memory/storage accessible by the server and operative to store:
- associations between parent end-users who are nodes in the at least one external communication network and individual internal recipients from among the pupil end-users, thereby to associate at least one parent end-user of the parent end-users with each pupil end-user of the pupil end-users;
- and
- whitelists of authorized communicants for the pupil end-users, provided by the server;
- wherein the mail server is operative to interface with:
- a secured parent environment including a parent's user-interface for the parent end-users, operative, responsive to control by a processor, to allow a given parent end-user from among the parent end-users whose association with a given pupil end-user from among the pupil end-users is stored in said memory, to authenticate himself and subsequently to define for the server, a white-list of pupil end users with whom the given parent end-user authorizes the given pupil end-user, to communicate;
- and
- a secured pupil environment including a pupil's user-interface, operative, responsive to control by a processor, to allow a first pupil end-user to communicate via said server with any of the pupil end-users appearing on a whitelist of internal recipients stored in the memory for the first pupil end-user;
- wherein for at least one first and at least one second pupil end-user from among the pupil end-users, the server's logic is configured such that the whitelist provided to the memory for the first pupil end-user includes the second pupil end-user, if both the parent end-users associated with the first and second pupil end-users have each, via their respective parent's user-interface, authorized communication between the first and second pupil end-users, thereby to define the first and second pupil end-users as an authorized pair of communicants, wherein
- the mail server and gateway allow outgoing communication with external networks and the gateway comprises a one-way gateway which does not allow incoming communication, thereby to generate an internal network secured from incoming communication from the external networks,
- an identity manager is associated with the email server and is operative to control access of users depending on their roles as stored in computer memory, and subject to their providing authentication,
- a default internal recipient whitelist associated with each of the pupil-end users includes a plurality of pupil end-users of an individual class associated with the pupil end user, and
- the system is pre-configured such that no communication is possible other than communication between authorized pairs of communicants and wherein rules defining authorized pairs of communicants includes that pupil end-users of the individual class can all communicate with one another,
- the system including a pupil database storing a pupil data record for each of pupil end-users in a supported pupil population and wherein each pupil data record is operative for storing the association between each of the pupil end-users and the individual class.
A computer program product, comprising a non-transitory tangible computer readable medium having computer readable program code embodied therein, said computer readable program code adapted to be executed to implement a secure social networking method for pupils including:
- controlling a mail server including a processor, to:
- a. communicate with external recipients via a gateway to at least one external communication network serving the external recipients;
- and
- b. communicate with at least one internal recipient including pupil end-users, thereby to define an internal secured network;
- and
- controlling storage, in computer memory/storage accessible by a server, the server comprising the mail server and the gateway, of:
- associations between parent end-users who are nodes in the at least one external communication network and individual internal recipients from among the pupil end-users, thereby to associate at least one parent end-user of the parent end-users with each pupil end-user of the pupil end-users;
- and
- white-lists of authorized communicants for the pupil end-users, provided by the server operative to interface with:
- i. a secured parent environment including a parent's user-interface, operative, responsive to control by a processor, to allow a given parent end-user of the parent end-users whose association with a given pupil end-user from among the pupil end-users is stored in said memory, to authenticate himself and subsequently to define for the server, a white-list of pupil end-users with whom the given parent end-user authorizes the given pupil end-user to communicate;
- and
- ii. a secured pupil environment including a pupil's user-interface, operative, responsive to control by a processor, to allow a first pupil end-user to communicate via said server with any of the pupil end-users appearing on a whitelist of internal recipients stored in the memory for the first pupil end-user;
- wherein for at least one first and at least one second pupil end-user from among the pupil end-users, the whitelist provided to the memory for the first pupil end-user includes the second pupil, if both the parent end-users of the first and second pupil end-users have each, via their respective parent's user-interface, authorized communication between the first and second pupil end-users, thereby to define the first and second pupil end-users as an authorized pair of communicants,
- wherein the mail server and the gateway allow outgoing communication with external networks and the gateway comprises a one-way gateway which does not allow incoming communication, thereby to generate an internal network secured from incoming communication from the external networks.
A secure social networking method for pupils including:
- Using a server including a mail server and a gateway, the mail server including a processor, to:
- a. communicate with external recipients via the gateway to at least one external communication network serving the external recipients;
- and
- b. communicate with at least one internal recipient including pupil end-users, thereby to define an internal secured network;
- and
- storing, in computer memory/storage accessible by the server:
- associations between parent end-users who are nodes in the at least one external communication network and individual internal recipients from among the pupil end-users, thereby to associate at least one parent end-user of the parent end-users with each pupil end-user of the pupil end-users;
- and
- white-lists of authorized communicants for the pupil end-users, provided by the server operative to interface with:
- i. a secured parent environment including a parent's user-interface, operative, responsive to control by a processor, to allow a given parent end-user of the parent end-users whose association with a given pupil end-user from among the pupil end-users is stored in said memory, to authenticate himself and subsequently to define for the server, a white-list of pupil end-users with whom the given parent end-user authorizes the given pupil end-user to communicate;
- and
- ii. a secured pupil environment including a pupil's user-interface, operative, responsive to control by a processor, to allow a first pupil end-user to communicate via said server with any of the pupil end-users appearing on the whitelist of internal recipients stored in the memory for the first pupil end-user;
- wherein for at least one first and at least one second pupil end-user from among the pupil end-users, the whitelist provided to the memory for the first pupil end-user includes the second pupil, if both the parent end-users associated with the first and second pupil end users have each, via their respective parent's user-interface, authorized communication between the first and second pupil end-users, thereby to define the first and second pupil end-users as an authorized pair of communicants, wherein
- wherein the mail server and gateway allow outgoing communication with external networks and the gateway comprises a one-way gateway which does not allow incoming communication, thereby to generate an internal network secured from incoming communication from external networks, and
- an identity manager is associated with the email server and is operative to control access of users depending on their roles as stored in computer memory, and subject to their providing authentication.
Dependencies are inferred from the claim text.