Protecting online meeting access using secure personal universal resource locators

Patent metadata

Field	Value
Publication number	US-9219735-B2
Application number	US-201313740454-A
Country	US
Kind code	B2
Filing date	Jan 14, 2013
Priority date	Oct 1, 2012
Publication date	Dec 22, 2015
Grant date	Dec 22, 2015

Abstract

Access to online collaborative resources such as an online meeting, web conference, online chat room, an online video conference, an online audio conference, a collaboratively edited document, a collaborative browsing session, an online social networking group, or a web site is secured by providing a first user-specific URL to a first user for addressing collaborative resource; responsive to the first user accessing the first user-specific URL, granting by a computing system access to the collaborative event to the first user; and responsive to a second user accessing the first user-specific URL, preventing by a computing system access to the collaborative event to the second user. Optionally, time criteria for accessing the first user-specific URL may be used to invalidating the first user-specific URL, wherein access to the collaborative resource is disabled.

First claim

What is claimed is:

1. A method for protecting online access to collaborative resources comprising:
generating and storing in a cache by a computing system a unique universal resource locator (URL) for addressing collaborative resource, wherein the unique URL includes a locator address portion or a domain name portion including an encrypted first user identifier thereby making the unique URL an invalid resource location which obscures an actual location of the collaborative resource;
responsive to a first user attempting to access the collaborative resource using the unique URL resulting in execution of a resource-not-found error handler, granting by a computing system access to the collaborative resource to the first user according to the unique URL in the cache;
disabling the unique URL by the computer system to prevent future access of the identified collaborative resource; and
responsive to a subsequent attempt to access the collaborative resource using the unique URL, preventing by a computing system access to the collaborative resource to a subsequent requesting user.

2. The method as set forth in claim 1 , further comprising:
providing by a computing system a time criteria for accessing the unique URL; and
responsive to detecting an elapsed time exceeding the time criteria, invalidating by a computing system the unique URL, wherein subsequent access to the collaborative resource is disabled.

3. The method as set forth in claim 1 , further comprising authenticating the first user by a computing system prior to the granting of access.

4. The method as set forth in claim 1 wherein the collaborative resource comprises at least one resource selected from the group consisting of an online meeting, web conference, online chat room, an online video conference, an online audio conference, a collaboratively edited document, a collaborative browsing session, an online social networking group, and a web site.

5. The method as set forth in claim 1 further comprising providing by a computer system a collaborative resource management component that authenticates resource owners, resource invitations, and resource accesses utilizing secure communication and authentication protocols.

6. The method as set forth in claim 1 further comprising generating by a computer system the unique URL by:
generating a dynamic private key to be later used as a salt;
generating a hash value using a first user's system identifier, the salt, and a collaborative resource identifier, using an encryption process;
generating the unique URL including the hash value in the locator address portion or the domain name portion; and
caching the first user's system identifier, the salt and the collaborative resource identifier using a secure cache and using the hash value as a key into the cached elements.

7. The method as set forth in claim 6 wherein the first user's system identifier comprises at least one identifier selected from the group consisting of an electronic mail address, a telephone number, an online messaging identifier, a social networking alias name, and an employee number.

8. The method as set forth in claim 6 wherein the encryption process comprises a method compliant with a U.S. National Institute of Standards and Technology Secure Hash Algorithm specification.

9. The method as set forth in claim 6 wherein the caching the first user's system identifier comprises caching it for a limited period of time.

Assignees

• IBM

Inventors

• Hoard Douglas G
• Quinn William M

Classifications

• H04L63/10 Primary

  for controlling access to devices or network resources · CPC title

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• H04L63/168

  above the transport layer · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title