Distributed management framework for personal attributes
A technique for distributed management of attributes includes propagating attributes based upon attribute-granularity permissions. An example of a system according to the technique may include a server, coupled to a first client and a second client, that includes a module that receives attribute data from the first client; a permissions database where first permissions associated with the first client are set at the individual attribute level for the second client; an engine for updating the permissions database and for validating the first permissions for the second client; and an engine for distributing first client updates based on validated permissions to destinations associated with the one or more second destination stores.
1. A method comprising:
maintaining first attributes associated with a first entity of a plurality of entities and second attributes associated with a second entity of the plurality of entities;
linking the first entity with a second entity;
providing first destinations, associated with the first entity, for the second attributes;
granting first permissions for the first attributes to the second entity;
providing second destinations, associated with the second entity, for the first attributes;
granting second permissions for the second attributes to the first entity;
facilitating the propagation of shared attributes to the second destinations through the first permissions;
managing subsequent changes of attributes to create a syndicated distributed secure data exchange.
2. The method of claim 1 , further comprising:
reading user ID from a local cache;
if permissions are not stored locally, calling a server method to request permissions for the user ID;
if permissions are stored locally, reading permissions from a local file.
3. The method of claim 1 , further comprising:
calling a server method to request a personal attribute record (PAR) if the PAR is stored remotely;
reading the PAR from a local file if the PAR is stored locally.
4. The method of claim 1 , further comprising:
getting transactions by either requesting pending transactions from a server or waiting or the server to send the transactions.
5. The method of claim 1 , further comprising:
selecting one or more grantees from a contact list;
enabling attribute permissions for selected contacts;
calling a server method to update permission settings on a server.
6. The method of claim 1 , further comprising:
updating a permissions table as specified by a grantor;
for each new device owned by the grantor, sending new permission settings;
for each device owned by a grantee, sending new attribute values;
if the grantor is granting permission, sending the attribute value sent in an update permissions call;
if the grantor is taking away permissions, sending a null value.
7. The method of claim 1 , further comprising:
selecting from a permissions table grantees for attributes of a grantor;
joining grantees with the attribute changes;
creating attribute transactions; sending the attribute transactions changes to destinations associated with the grantees.
8. The method of claim 1 , further comprising:
selecting from a device table devices of a grantor;
joining grantees with the attribute changes;
creating personal attribute record (PAR) transactions;
sending PAR changes to destinations associated with the grantor.
9. A method comprising:
maintaining first attributes associated with a first entity of a plurality of entities and second attributes associated with a second entity of the plurality of entities;
linking the first entity with a second entity;
providing first destinations, associated with the first entity, for the second attributes;
granting first permissions for the first attributes to the second entity;
providing second destinations, associated with the second entity, for the first attributes;
granting second permissions for the second attributes to the first entity;
facilitating the propagation of shared attributes to the second destinations through the first permissions;
managing subsequent changes of attributes to create a syndicated distributed secure data exchange.