Electronic document access validation

Patent metadata

Field	Value
Publication number	US-10650153-B2
Application number	US-201715420958-A
Country	US
Kind code	B2
Filing date	Jan 31, 2017
Priority date	Jan 31, 2017
Publication date	May 12, 2020
Grant date	May 12, 2020

Abstract

A document management computer system can validate a user with validation codes sent through a plurality of communication modes. The validated user may be provided with access to a stored electronic document.

First claim

What is claimed is:

1. A document management computer system comprising:
at least one processor;
a memory having stored thereon machine readable instructions which, when executed by the at least one processor, causes the system to:
receive a request from a first user authorized to access a stored electronic document to provide a second user with access to the stored electronic document on the document management computer system having a directory of registered users, wherein the second user is not registered in the directory, wherein the request includes user contact information facilitating contacting the second user via a plurality of communication modes;
send a first message to the second user according to the user contact information through a first communication mode of the plurality of communication modes, wherein the first message includes a first validation code and a link to the stored electronic document, wherein the link is associated with at least one of an address or a uniform resource locator associated with the stored electronic document;
in response to the link being accessed with a first code matching the first validation code by an electronic device associated with the second user, generate a second validation code, and send a second message to the user according to the user contact information through a second communication mode of the plurality of communication modes, wherein the second message includes the second validation code; and
in response to determining that a second code from the second user matches the second validation code, provide access to the stored electronic document without having to register the second user in the directory.

2. The document management computer system of claim 1 , wherein at least one of the first validation code and the second validation code are valid for a temporary period of time from being generated.

3. The document management computer system of claim 1 , wherein in response to receiving the request, the system is caused to:
store the user contact information in an entry in a table;
generate the first validation code; and
store the first validation code in the table entry for the user contact information.

4. The document management computer system of claim 3 , wherein the link is accessed by the electronic device, and the system is caused to:
receive the first code from the electronic device;
identify the user associated with the received code;
retrieve the first validation code from the table based on the identified user;
determine whether the received code from the electronic device matches the first validation code;
in response to the received code matching the first validation code, send the second message; and
in response to the received code not matching the first validation code, deny access to the stored electronic document.

5. The document management computer system of claim 4 , in response to the received code matching the first validation code, the system is caused to:
generate the second validation code; and
send the second message with the second validation code.

6. The document management computer system of claim 5 , wherein the system is caused to:
receive the second code in response to sending the second message;
determine whether the second code matches the second validation code;
in response to the second code matching the second validation code, allow access to the stored electronic document; and
in response to the second code not matching the second validation code, deny access to the stored electronic document.

7. The document management computer system of claim 5 , wherein the second validation code is randomly generated in response to the received code matching the first validation code.

8. The document management computer system of claim 1 , wherein the plurality of communication modes comprise a plurality of email, text, and voice call.

9. A computer-implemented method for electronic document access management, the method executed by at least one processor and comprising:
receiving a request from a first user authorized to access a stored electronic document to provide a second user with access to the stored electronic document on a document management system having a directory of registered users, wherein the second user is not registered on the directory;
generating a first validation code to validate the second user;
sending a first message, including the first validation code and a link to the stored electronic document, to the second user through a first communication mode, wherein the link is associated with at least one of an address or a uniform resource locator associated with the stored electronic document;
receiving a request for the second user to access the stored document, wherein the request includes a first code;
determining whether the first code matches the first validation code;
if the first code matches the first validation code, generating a second validation code to validate the second user;
sending a second message to the second user through a second communication mode different from the first communication mode;
receiving a second code responsive to the sending of the second message;
determining whether the second code matches the second validation code; and
if the second code matches the second validation code, providing the second user with access to the stored electronic document without having to register the second user in the directory.

10. The computer-implemented method of claim 9 , wherein at least one of the first validation code and the second validation code are valid for a temporary period of time from being generated.

11. The computer-implemented method of claim 9 , wherein the first and second communication modes comprise at least one of email, text, and voice call.

12. The computer-implemented method of claim 9 , wherein if the first code does not match the first validation code or the second code does not match the second validation code, denying the second user access to the stored electronic document.

13. The computer-implemented method of claim 9 , wherein receiving a request comprises receiving the request from the first user authorized to access the stored electronic document, and the request is for providing the second user with access to the stored electronic document.

14. A document management system comprising:
at least one processor;
a memory having stored thereon machine readable instructions which, when executed by the at least one processor, causes the system to:
receive a request from a first user of the document management system to provide a second user with access to a stored electronic document, wherein the first user is a registered user registered in a directory of registered users used for the document management system with privileges to access the stored electronic document via the document management system, and the second user is not a registered user in the directory and does not have the privileges to access the stored electronic document via the document management system;
invoke sending first and second messages, associated respectively with first and second validation codes, to the second user at different times via a plurality of communication modes associated respectively with the first and second messages, wherein the first message includes a link to the stored electronic document, wherein the link is associated with at least one of an address or a uniform resource locator associated with the stored electronic document;
receive codes responsive to sending the messages;
compare the received codes to the first and second validation codes

Assignees

• Ent Services Dev Corp Lp

Inventors

• Hussain Mohammed

Classifications

• H04L63/18

  using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215) · CPC title

• H04L63/108

  when the policy decisions are valid for a limited amount of time · CPC title

• G06F21/42

  using separate channels for security data · CPC title

• G06F21/6209 Primary

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title

• H04L63/101

  Access control lists [ACL] · CPC title