IP Library Granted Patent US 11,281,731
Granted Patent B2
US 11,281,731 · App. 15/406,462 · Granted Mar 22, 2022

Providing access with separate authentication to secure content in repositories

Inventor: Will Abson (Maidenhead, GB)
Assignee: HYLAND UK OPERATIONS LIMITED.
G06F16/9535G06F16/248G06F16/283H04L63/0227H04L63/0428H04L63/067H04L63/102H04L63/104
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,281,731
App. No.
15/406,462
Granted
Mar 22, 2022
Kind
B2
Abstract

A request from a user to access a report associated with one or more content items maintained by an electronic content management system can be received. A query, associated with the request and including one or more attributes of the request to access the report can be executed. A set of user permissions can be set. The requested report can be based on one or more results returned from the executing of the query. The requested report can include information consistent with the set of user permissions and generated to include a link to the one or more content items maintained by the electronic content management system. The analytics engine can be logically separate from the electronic content management system. A request can be received through the query to access the one or more content items. The one or more content items can then be presented to the user.

Claims (48)

1. A system comprising:

one or more physical processors; and

at least one memory configured to store computer-readable instructions, which, when executed by the one or more physical processor, cause the one or more physical processors to perform one or more operations, the operations comprising:

receiving a request from a user to access a report associated with one or more content items maintained by an electronic content management system;

executing a query, the query including one or more attributes of the request to access the report and a set of user permissions;

generating, by an analytics engine, the requested report based on one or more results returned from the executing of the query, the requested report including information consistent with the set of user permissions and generated to include two or more links to the one or more content items maintained by the electronic content management system;

receiving a request from the user to access the one or more content items, the request being initiated through the user's interaction with a first link or a second link, the first link and the second link being in the report;

requesting access for the user to the one or more content items associated with the first link or the second link from the electronic content management system; and

denying access to a first content associated with the first link in the report, in response to determining that the user does not have permission to access the first content, despite the user having permission to view the generated report including the first link, wherein the first link in the report is associated with a first content but not associated with the user's identity, such that the user selection of the first link fails to grant access to the first content based on the user's identity; and

granting access to a second content associated with the second link in the report, in response to determining that the user has permission to access the second content, wherein the second link comprises a one-time-use cryptographic key associated with the user's identity, such that the user selection of the second link modifies the one-time-use cryptographic key based on the user's identity.

2. The system as in claim 1 , wherein the one-time-use cryptographic key is generated by the electronic content management system and provided to the analytics engine for embedding in the at least one of the first link or the second link.

3. The system as in claim 1 , wherein the operations further comprise:

receiving a request from a user to access the analytics engine, the request including verification information associated with the user; and

verifying, by the analytics engine, the user's verification information.

4. The system of claim 3 , wherein the analytics engine transmits to the electronic content management system, the user's verification information;

the electronic content management system verifies user privileges associated with the user based on the user's verification information; and

the electronic content management system transmits to the analytics engine, an electronic link to the one or more content items, in response to verifying that the user has the required privileges to access the one or more content items.

5. The system of claim 1 , wherein the generated report distinguishes between the one or more content items maintained by the electronic content management system.

6. The system of claim 1 , further comprising granting access to a second content associated with the second link in the report, in response to determining that the user has permission to access the second content, despite denying access to a first content associated with the first link in the report.

7. The system of claim 1 , wherein the set of user permissions limit an input for the query.

8. A method comprising:

receiving a request from a user to access a report associated with one or more content items maintained by an electronic content management system;

executing a query, the query including one or more attributes of the request to access the report and a set of user permissions;

generating, by an analytics engine, the requested report based on one or more results returned from the executing of the query, the requested report including information consistent with the set of user permissions and generated to include two or more links to the one or more content items maintained by the electronic content management system;

receiving a request from the user to access the one or more content items, the request being initiated through the user's interaction with a first link or a second link, the first link and the second link being in the report;

requesting access for the user to the one or more content items associated with the first link or the second link from the electronic content management system; and

denying access to a first content associated with the first link in the report, in response to determining that the user does not have permission to access the first content, despite the user having permission to view the generated report including the first link, wherein the first link in the report is associated with a first content but not associated with the user's identity, such that the user selection of the first link fails to grant access to the first content based on the user's identity; and

granting access to a second content associated with the second link in the report, in response to determining that the user has permission to access the second content, wherein the second link comprises a one-time-use cryptographic key associated with the user's identity, such that the user selection of the second link modifies the one-time-use cryptographic key based on the user's identity.

9. The method of claim 8 , wherein generating the requested report includes generating and embedding the first link and the second link in the report.

10. The method of claim 9 , wherein the one-time-use cryptographic key is generated by the electronic content management system and provided to the analytics engine for embedding in the at least one of the first link or the second link.

11. The method of claim 8 further comprising:

generating, in response to receiving a request from the user to access the one or more content items, an electronic link to the one or more content items, the one-time-use cryptographic key providing an indication that the user has the requisite permissions to access the one or more content items;

providing the one-time-use cryptographic key from the analytics engine to the electronic content management system; and

receiving, from the electronic content management system the one or more content items for presenting to the user.

12. A computer program product having logic code embedded in a non-transitory computer readable medium, the logic code when executed by a processor causing operations being performed, the operations comprising:

receiving a request from a user to access a report associated with one or more content items maintained by an electronic content management system;

executing a query, the query including one or more attributes of the request to access the report and a set of user permissions;

generating, by an analytics engine, the requested report based on one or more results returned from the executing of the query, the requested report including information consistent with the set of user permissions and generated to include two or more links to the one or more content items maintained by the electronic content management system;

receiving a request from the user to access the one or more content items, the request being initiated through the user's interaction with a first link or a second link, the first link and the second link being in the report;

requesting access for the user to the one or more content items associated with the first link or the second link from the electronic content management system; and

denying access to a first content associated with the first link in the report, in response to determining that the user does not have permission to access the first content, despite the user having permission to view the generated report including the first link, wherein the first link in the report is associated with a first content but not associated with the user's identity, such that the user selection of the first link fails to grant access to the first content based on the user's identity; and

granting access to a second content associated with the second link in the report, in response to determining that the user has permission to access the second content, wherein the second link comprises a one-time-use cryptographic key associated with the user's identity, such that the user selection of the second link modifies the one-time-use cryptographic key based on the user's identity.

13. The computer program product of claim 12 , wherein generating the requested report includes generating and embedding the first link and the second link in the report.

14. The computer program product of claim 13 , wherein the one-time-use cryptographic key is generated by the electronic content management system and provided to the analytics engine for embedding in the at least one of the first link or the second link.

15. The computer program product of claim 12 , wherein the operations further comprise:

generating, in response to receiving a request from the user to access the one or more content items, an electronic link to the one or more content items, the one-time-use cryptographic key providing an indication that the user has the requisite permissions to access the one or more content items;

providing the one-time-use cryptographic key from the analytics engine to the electronic content management system; and

receiving, from the electronic content management system the one or more content items for presenting to the user.

Assignments (11)
SECURITY INTEREST Recorded Jan 17, 2024
From: HYLAND UK OPERATIONS LIMITED
To: GOLUB CAPITAL MARKETS LLC, AS COLLATERAL AGENT
Reel/Frame 066339/0332 →
RELEASE OF SECURITY INTEREST RECORDED AT REEL/FRAME 055820/0369 Recorded Sep 24, 2023
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT, A BRANCH OF CREDIT SUISSE
To: ALFRESCO SOFTWARE LIMITED (K/N/A HYLAND UK OPERATIONS LIMITED)
Reel/Frame 065018/0057 →
RELEASE OF SECURITY INTEREST RECORDED AT REEL/FRAME 55820/0343 Recorded Sep 21, 2023
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT, A BRANCH OF CREDIT SUISSE
To: ALFRESCO SOFTWARE LIMITED (K/N/A HYLAND UK OPERATIONS LIMITED)
Reel/Frame 064974/0425 →
CHANGE OF NAME Recorded Oct 13, 2021
From: ALFRESCO SOFTWARE LIMITED
To: HYLAND UK OPERATIONS LIMITED
Reel/Frame 057909/0840 →
SECURITY AGREEMENT SUPPLEMENT (FIRST LIEN) Recorded Mar 26, 2021
From: ALFRESCO SOFTWARE LIMITED
To: CREDIT SUISSE
Reel/Frame 055820/0343 →
SECURITY AGREEMENT SUPPLEMENT (SECOND LIEN) Recorded Mar 26, 2021
From: ALFRESCO SOFTWARE LIMITED
To: CREDIT SUISSE
Reel/Frame 055820/0369 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 15, 2021
From: ALFRESCO SOFTWARE, INC.
To: ALFRESCO SOFTWARE LIMITED
Reel/Frame 054935/0642 →
RELEASE OF SECURITY INTEREST IN PATENTS AT R/F 50372/0079 Recorded Oct 27, 2020
From: GUGGENHEIM CREDIT SERVICES, LLC, AS COLLATERAL AGENT
To: ALFRESCO SOFTWARE, INC.
Reel/Frame 054229/0133 →
NOTICE OF ASSIGNMENT OF PATENT SECURITY AGREEMENT RECORDED AT R/F 045602/0578 Recorded Sep 13, 2019
From: GUGGENHEIM CORPORATE FUNDING, LLC, AS RETIRING AGENT
To: GUGGENHEIM CREDIT SERVICES, LLC, AS SUCCESSOR AGENT
Reel/Frame 050372/0079 →
PATENT SECURITY AGREEMENT Recorded Mar 14, 2018
From: ALFRESCO SOFTWARE, INC.
To: GUGGENHEIM CORPORATE FUNDING, LLC
Reel/Frame 045602/0578 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 24, 2017
From: ABSON, WILL
To: ALFRESCO SOFTWARE, INC.
Reel/Frame 042499/0198 →
Continuity (1)
Related Publication 20180203931A1 · Jul 19, 2018