Group-based external sharing of electronic data

Patent metadata

Field	Value
Publication number	US-10140434-B2
Application number	US-201615197068-A
Country	US
Kind code	B2
Filing date	Jun 29, 2016
Priority date	May 3, 2016
Publication date	Nov 27, 2018
Grant date	Nov 27, 2018

Abstract

A computing system that provides access to electronic content includes a processor, a data store, and a user interface component. The data store is coupled to the processor and configured to store the electronic content. The user interface component is coupled to the processor and configured to generate a user interface allowing an internal user to generate a sharing request to share electronic content with an external user. The processor is configured to determine whether the internal user is a member of a group that is allowed to externally share content and to inhibit external sharing of the electronic content if the internal user is not a member of the group that is allowed to externally share the electronic content.

First claim

What is claimed is:

1. A computing system configured to provide access to electronic content, the system comprising:
a processor;
memory storing instructions executable by the processor, wherein the instructions, when executed, configure the computing system to:
store the electronic content in a data store associated with the computing system, wherein a plurality of internal users are associated with the computing system;
provide an access control component that stores security group information that:
defines a set of users as members of a security group, the set of users comprises some, but not all, of the plurality of internal users, and
defines a security permission for the members of the security group relative to external content sharing;

receive a sharing request to share the electronic content with an external user, the sharing request being associated with a particular one of the internal users; and
based on the security group information,
allow external sharing of the electronic content with the external user if the particular internal user is a member of the security group that is allowed to externally share the electronic content; and
inhibit external sharing of the electronic content with the external user if the internal user is not a member of the security group that is allowed to externally share the electronic content.

2. The computing system of claim 1 , wherein the electronic content includes a site stored in the data store.

3. The computing system of claim 1 , wherein the electronic content includes a folder stored in the data store.

4. The computing system of claim 1 , wherein the electronic content includes a file stored in the data store.

5. The computing system of claim 1 , and wherein the instructions configure the computing system to generate a notification that the sharing request has been denied.

6. The computing system of claim 5 , wherein the notification is provided to the particular internal user.

7. The computing system of claim 1 , wherein the plurality of internal users are associated with an organization and the external user is external to the organization.

8. The computing system of claim 7 , wherein the instructions configure the computing system to engage the access control component to determine if the particular internal user is a member of a security group that is allowed to share the electronic content externally.

9. The computing system of claim 7 , wherein the access control component includes a listing of electronic content that is externally sharable for each security group.

10. The computing system of claim 9 , wherein the instructions configure the computing system to engage the access control component to determine if the particular internal user is a member of a security group that is allowed to share the electronic content externally.

11. A computing system comprising:
a processor;
memory storing instructions executable by the processor, wherein the instructions, when executed, configure the computing system to provide:
a storage component configured to:
store the electronic content in a data store associated with the computing system; and
store internal user information that identifies a plurality of internal users associated with the computing system; and

an access control component configured to:
access security group information that:
defines a set of users as members of a security group, the set of users comprises some, but not all, of the plurality of internal users, and
defines a security permission for the members of the security group relative to external content sharing;

receive, from a particular one of the internal users, an external sharing request that requests external sharing of the electronic content with an external user, that is a user other than the plurality of internal users; and

based on the security group information,
allow external sharing of the electronic content with the external user if the particular internal user is a member of the security group that is allowed to externally share content; and
inhibit external sharing of the electronic content with the external user if the internal user is not a member of the security group that is allowed to externally share the electronic content.

12. The computing system of claim 11 , wherein the access control component is further configured to determine if the external sharing request is also for content that the group of internal users is allowed to externally share.

13. The computing system of claim 12 , wherein the access control component is configured to generate a notification that the external sharing request is denied.

14. The computing system of claim 12 , wherein the access control component is configured to generate a sharing link to share the content externally.

15. The computing system of claim 11 , wherein the external sharing request is received through an application programming interface (API).

16. A computer-implemented method comprising:
receiving a request from a particular internal user, of a plurality of internal users associated with a data storage system, to share electronic content stored in the data storage system with an external user that is external to the plurality of internal users associated with the data storage system;
accessing security group information that:
defines a set of users as members of a security group, the set of users comprises some, but not all, of the plurality of internal users, and
defines a security permission for the members of the security group relative to external content sharing;

based on the security group information, determining if the particular internal user is a member of a security group for whom external sharing is allowed; and
if the particular internal user is a member of a security group of internal users for whom external sharing is allowed, allowing external sharing the electronic content to the external user.

17. The computer-implemented method of claim 16 , wherein the request is received through an application programming interface of the data storage system.

18. The computer-implemented method of claim 17 , wherein the application programming interface is configured to receive a request from a plurality of different user device modalities.

19. The computer-implemented method of claim 16 , and further comprising generating a notification indicating that the particular internal user is not a member of the defined group if the particular internal user is not a member of the defined group for whom external sharing is allowed.

Assignees

• Microsoft Technology Licensing Llc

Inventors

• Lopez-Uricoechea Rafael
• Doshi Gaurav
• Subramaniam Sarat C

Classifications

• G06F2221/034

  Test or assess a computer or a system · CPC title

• H04L63/104

  Grouping of entities · CPC title

• G06F21/577

  Assessing vulnerabilities and evaluating computer system security · CPC title

• H04W4/08

  User group management · CPC title

• G06F21/6218 Primary

  to a system of files or objects, e.g. local or distributed file system or database · CPC title