Media device access control mechanism

A distributed access control system for controlling access to a media storage device, the media storage device storing a plurality of media objects, the distributed access control system comprising:

• an interface arranged to receive first data identifying the media storage device and second data identifying a list comprising at least one authorised recipient of the media storage device;
• a storage system arranged to store the first data in association with the second data;
• a device issuing system arranged to issue a media storage device to at least one recipient on the list,
• wherein the device issuing system is arranged to create a delivery session identifier to establish a delivery session for the issued media storage device with a user identification system corresponding to at least one recipient associated with the second data, and
• the storage system is arranged to update the second data on the basis of the delivery session and data received from the user identification system, thereby to modify the list of authorised recipients of the issued media storage device, and
• wherein the delivery session identifier uniquely relates the issued media storage device and the media objects thereon to a given authorised recipient, and
• wherein the delivery session identifier is based on a combination of the first adapt and the second data.

A non-transitory computer readable medium comprising computer executable instructions for carrying out a method for controlling access to a media storage device, the media storage device storing a plurality of media objects, the method comprising:

• receiving first data identifying the media storage device and second data identifying a list comprising at least one authorised recipient of the media storage device;
• storing the first data in association with the second data;
• issuing the media storage device to at least one recipient on the list;
• using a delivery session identifier to establish a delivery session for the issued media storage device with a user identification system corresponding to recipients associated with the second data;
• and
• thereafter:
• updating the second data on the basis of data received from the user identification system and the delivery session identifier, thereby to modify the list of authorised recipients of the issued media storage device,
• wherein the delivery session identifier uniquely relates the issued media storage device and the media objects thereon to a given authorised recipient, and wherein the delivery session identifier is based on a combination of the first adapt and the second data.

An access control database for controlling access to a media storage device, the media storage device holding a plurality of media objects, the access control database system comprising an interface arranged to receive first data identifying the media storage device and to receive second data identifying a list comprising at least one authorised recipient of the media storage device, wherein the access control database is arranged to store the received first data in association with the received second data,

• wherein the access control database is operable to issue data indicative of at least one recipient from the stored second data to a device issuing system arranged to issue a media storage device, and
• wherein the access control database is further arranged to:
• store a delivery session identifier indicative of a delivery session established for the issued media storage device with a user identification system corresponding to recipients associated with the stored second data;
• and
• update the second data on the basis of data received from the user identification system and the stored delivery session identifier, thereby to modify the stored list of authorised recipients of the issued media storage device, and
• wherein the delivery session identifier uniquely relates the media storage device and the media objects thereon to a given authorised recipient, and
• wherein the delivery session identifier is based on a combination of the first adapt and the second data.

A method of controlling access to an email to be sent to at least one recipient, the method comprising:

• receiving first data identifying the email and second data identifying a list comprising at least one authorised recipient of the email;
• storing the first data in association with the second data;
• using a delivery session identifier to establish a delivery session for the said email with a user identification system corresponding to recipients associated with the second data;
• thereafter:
• updating the second data on the basis of data received from the user identification system and the delivery session identifier, thereby to modify the list of authorised recipients of the email,
• wherein the delivery session identifier uniquely relates the email to a given authorised recipient, and
• wherein the delivery session identifier is based on a combination of the first data and the second data.

A distributed access control system for controlling access to an email to be sent to at least one recipient, the distributed access control system comprising:

• an interface arranged to receive first data identifying the email and second data identifying a list comprising at least one authorised recipient of the email;
• a storage system arranged to store the first data in association with the second data,
• wherein the email sending system is arranged to create a delivery session identifier to establish a delivery session for the email with a user identification system corresponding to at least one recipient associated with the second data, and
• the storage system is arranged to update the second data on the basis of the delivery session and data received from the user identification system, thereby to modify the list of authorised recipients of the email, and
• wherein the delivery session identifier uniquely relates the email to a given authorised recipient, and wherein the delivery session identifier is based on a combination of the first data and the second data.

A non-transitory computer readable medium comprising computer executable instructions for carrying out a method for controlling access to an email to be sent to at least one recipient, the method comprising:

• receiving first data identifying the email and second data identifying a list comprising at least one authorised recipient of the email;
• storing the first data in association with the second data;
• using a delivery session identifier to establish a delivery session for the email with a user identification system corresponding to recipients associated with the second data;
• and
• thereafter:
• updating the second data on the basis of data received from the user identification system and the delivery session identifier, thereby to modify the list of authorised recipients of the email, wherein the delivery session identifier uniquely relates the email to a given authorised recipient and wherein the delivery session identifier is based on a combination of the first data and the second data.