Personalized online content access experiences using online session attributes

Patent metadata

Field	Value
Publication number	US-10325076-B2
Application number	US-201514952627-A
Country	US
Kind code	B2
Filing date	Nov 25, 2015
Priority date	Nov 25, 2015
Publication date	Jun 18, 2019
Grant date	Jun 18, 2019

Abstract

Systems for managing personalized access to shared online objects. A user accesses a server in a cloud-based environment, wherein the server is interfaced with storage devices that store one or more content objects. The server receives communications packets comprising at least one session attribute, wherein receiving the one or more communications packets is responsive, either directly or indirectly, to an act of the user to invoke a new content access session. The session attribute is used to generate personalized workspace properties that are based on explicitly-provided information or based on inferences that pertain to the invoked content access session. Access to content objects is personalized using explicit or inferred workspace session properties. Personalization includes any aspects of branding preferences, working group colleagues, roles, privileges, friends, etc. Personalization can be based on personalized workspace properties that are inferred based on rules or combinations of data.

First claim

What is claimed is:

1. A method comprising:
identifying a collaboration server in a cloud-based environment, wherein the collaboration server is interfaced with one or more storage devices that store one or more content objects;
identifying an identity server that initiates a protocol to provide login information by using one or more communications links to the collaboration server, wherein the login information is used to construct at least one online session attribute, the at least one online session attribute comprising user profile attributes and session attributes pertaining to a user accessing the one or more content objects, wherein the at least one online session attribute is structured in a security token;
receiving, by the collaboration server, from the identity server, one or more communications packets that comprises the security token having the at least one online session attribute, wherein receiving the one or more communications packets is responsive to an act of a first user to invoke a current content access session or operate within the current content access session;
extracting the at least one online session attribute from the security token to determine whether to generate a first set of workspace session properties corresponding to a first display of content in a first graphical user interface or a second set of workspace session properties corresponding to a second display of content in a second graphical user interface, wherein collaboration management data is applied to the at least one online session attribute to generate either the first set of workspace session properties or the second set of workspace session properties;
predicting user intent for the current content access session by using calculated session attributes derived from the at least one online session attribute extracted from the security token to identify additional content objects to include in the first set of workspace session properties, wherein the first display of content in the first graphical user interface comprises content that is different from the second display of content in the second graphical user interface; and
provisioning personalized content access by the first user to at least one of the one or more content objects and the additional content objects identified based at least in part on the first set of workspace session properties generated from the at least one online session attribute extracted from the security token.

2. The method of claim 1 , wherein the one or more communications packets comprise at least one of, a SAML assertion, or an OpenToken message.

3. The method of claim 2 , further comprising converting the communications packets from the SAML assertion to an OpenToken message.

4. The method of claim 2 , wherein the communications packets comprising the SAML assertion are constructed by an identity provider.

5. The method of claim 1 , wherein the at least one online session attribute comprises at least one user attribute associated with the first user or a second user.

6. The method of claim 5 , wherein the user attribute associated with the first user is at least one of, a security clearance, or an employment status, or a membership in a collaboration group, or a role, or a department, or an office location, or any combination thereof.

7. The method of claim 1 , wherein the at least one online session attribute is ephemeral, and is not persisted for access after closing of the current content access session.

8. The method of claim 1 , wherein generating the first set of workspace session properties or the second set of workspace session properties is based at least in part on an enterprise profile, or a user profile, or a combination thereof.

9. The method of claim 1 , wherein generating the first set of workspace session properties or the second set of workspace session properties is based at least in part on one or more session experience rules.

10. The method of claim 1 , wherein generating the first set of workspace session properties or the second set of workspace session properties is based at least in part on at least a portion of session history.

11. A computer program product, embodied in a non-transitory computer readable medium, the non-transitory computer readable medium having stored thereon a sequence of instructions which, when stored in memory and executed by a processor causes the processor to perform a set of acts, the acts comprising:
identifying a collaboration server in a cloud-based environment, wherein the collaboration server is interfaced with one or more storage devices that store one or more content objects;
identifying an identity server that initiates a protocol to provide login information by using one or more communications links to the collaboration server, wherein the login information is used to construct at least one online session attribute, the at least one online session attribute comprising user profile attributes and session attributes pertaining to a user accessing the one or more content objects, wherein the at least one online session attribute is structured in a security token;
receiving, by the collaboration server, from the identity server, one or more communications packets that comprises the security token having the at least one online session attribute, wherein receiving the one or more communications packets is responsive to an act of a first user to invoke a current content access session or operate within the current content access session;
extracting the at least one online session attribute from the security token to determine whether to generate a first set of workspace session properties corresponding to a first display of content in a first graphical user interface or a second set of workspace session properties corresponding to a second display of content in a second graphical user interface, wherein collaboration management data is applied to the at least one online session attribute to generate either the first set of workspace session properties or the second set of workspace session properties;
predicting user intent for the current content access session by using calculated session attributes derived from the at least one online session attribute extracted from the security token to identify additional content objects to include in the first set of workspace session properties, wherein the first display of content in the first graphical user interface comprises content that is different from the second display of content in the second graphical user interface; and
provisioning personalized content access by the first user to at least one of the one or more content objects and the additional content objects identified based at least in part on the first set of workspace session properties generated from the at least one online session attribute extracted from the security token.

12. The computer program product of claim 11 , wherein the one or more communications packets comprise at least one of, a SAML assertion, or an OpenToken message.

13. The computer program product of claim 11 , wherein the at least one online session attribute comprises at least one user attribute associated with the first user or a second user.

14. The computer program product of claim 13 , wherein the user attribute associated with the first user is at least one of, a security clearance, or an employment status, or a membership in a collaboration group, or a role, or a department, or an office location, or any combination thereof.

15. The computer program product of claim 11 , wherein the at least one online session attribute is ephemeral, and is not persi

Assignees

• Box Inc

Inventors

• Sardesai Vikram
• Warudkar Ketki
• Tiruvury Ravi Teja
• Self Matthew
• Wacker Rand

Classifications

• H04L63/0815

  providing single-sign-on or federations · CPC title

• H04L63/102 Primary

  Entity profiles · CPC title

• H04L67/1097

  for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] · CPC title

• G06F21/10 Primary

  Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} · CPC title

• G06Q10/105

  Human resources · CPC title