Managing policy and permissions profiles

Patent metadata

Field	Value
Publication number	US-9519756-B2
Application number	US-201313838078-A
Country	US
Kind code	B2
Filing date	Mar 15, 2013
Priority date	Mar 15, 2013
Publication date	Dec 13, 2016
Grant date	Dec 13, 2016

Abstract

Systems, methods, and computer-readable storage media are provided for managing policy and permissions profiles. Individuals or organizations are permitted to author profiles utilizing a profile template and publish such authored profiles for access and adoption by others. Users are able to import desired profiles and subsequently have those imported profiles applied each time he or she accesses an application or service to which the profile pertains. User interfaces from which users may view profiles associated with them, make alterations to settings of profiles associated with them, and/or select from a plurality of profiles for a particular application or service are also provided. Still further, recommendations may be provided to users for policy and permissions profiles based upon, for instance, crowd-sourcing, profiles adopted by social network connections of a user or other users that are “like” a user, prior profile selections made by the user, and/or prior user behavior.

First claim

What is claimed is:

1. One or more computer-readable storage media storing computer-useable instructions that, when used by one or more computing devices, cause the one or more computing devices to perform a method for managing policy and permissions profiles, the method comprising:
presenting a plurality of policy and permissions profiles associated with a first application or service, on a device, wherein each of the plurality of policy and permissions profiles:
excludes default permissions of a default policy and permissions profile provided in conjunction with the first application or service;
is predefined by a third-party policy and permissions author, the third-party policy and permissions author being a party other than a provider of the first application or service;
is presented with an identification of the third-party policy and permissions author; and
corresponds to an access to and use of personal data by the first application or service;

receiving a user selection of a policy and permissions profile of the plurality of policy and permissions profiles associated with the first application or service;
importing the user-selected policy and permissions profile for use in association with the first application or service; and
storing the user-selected policy and permissions profile in association with the user and an identifier of the first application or service.

2. The one or more computer-readable storage media of claim 1 , wherein the method further comprises:
receiving an indication that the user desires to launch the first application or service; and
utilizing the user-selected policy and permissions profile with respect to the first application or service.

3. The one or more computer-readable storage media of claim 1 , wherein the user-selected policy and permissions profile includes one or more settings associated therewith, and wherein the method further comprises:
receiving a notification of a change to at least one of the one or more settings associated with the user-selected policy and permissions profile; and
changing the at least one of the one or more settings in the user-selected policy and permissions profile stored in association with the user.

4. The one or more computer-readable storage media of claim 3 , wherein the method further comprises notifying the user of the change in the user-selected policy and permissions profile.

5. The one or more computer-readable storage media of claim 1 , wherein the method further comprises providing a user interface that enables the user to select one of a plurality of policy and permissions profiles associated with a second application or service.

6. The one or more computer-readable storage media of claim 5 , wherein providing the user interface that enables the user to select one of the plurality of policy and permissions profiles associated with the second application or service comprises recommending one or more of the plurality of policy and permissions profiles associated with the second application or service to the user.

7. The one or more computer-readable storage media of claim 6 , wherein recommending the one or more of the plurality of policy and permissions profiles associated with the second application or service to the user comprises recommending the one or more of the plurality of policy and permissions profiles associated with the second application or service based upon crowd-sourcing.

8. The one or more computer-readable storage media of claim 6 , wherein recommending the one or more of the plurality of policy and permissions profiles associated with the second application or service to the user comprises recommending the one or more of the plurality of policy and permissions profiles associated with the second application or service based upon selections made by at least one of social network connections of the user and other users that are similar to the user.

9. The one or more computer-readable storage media of claim 6 , wherein recommending the one or more of the plurality of policy and permissions profiles associated with the second application or service to the user comprises recommending the one or more of the plurality of policy and permissions profiles associated with the second application or service based upon prior policy and permissions profile choices of the user.

10. The one or more computer-readable storage media of claim 6 , wherein recommending the one or more of the plurality of policy and permissions profiles associated with the second application or service to the user comprises recommending the one or more of the plurality of policy and permissions profiles associated with the second application or service based upon prior behavior of the user.

11. The one or more computer-readable storage media of claim 1 , wherein the method further comprises enabling a user interface that permits the user to view any policy and permissions profiles associated with the user.

12. The one or more computer-readable storage media of claim 1 , wherein the method further comprises enabling a user interface that permits the user to alter any policy and permissions profiles associated with the user.

13. A method being performed by one or more computing devices including at least one processor, the method for managing policy and permissions profiles, the method comprising:
providing a policy and permissions profile template for an application or service, on a computing device, the policy and permissions profile template having an input area for inputting settings corresponding to an access to and use of personal data by the application or service;
receiving a policy and permissions profile for the application or service, wherein the policy and permissions profile:
is based on the policy and permissions profile template;
is authored utilizing the policy and permissions profile template;
excludes default permissions of a default policy and permissions profile provided in conjunction with the application or service;
is presented with an identification of a third-party policy and permissions author, wherein the third-party policy and permissions author is a party other than the provider of the application or service; and
is configured to be exported to a user device and used in association with the application or service on the user device; and

publishing the policy and permissions profile for the application or service with an indication of the source of the policy and permissions profile, wherein publishing the policy and permissions profile causes the policy and permissions profile to be available for use by a plurality of users of the application or service upon a selection of the policy and permissions profile by a user of the plurality of users.

14. The method of claim 13 , further comprising providing a user interface for authoring of the policy and permissions profile for the application or service in accordance with the profile template.

15. The method of claim 13 , further comprising providing a user interface for selection of the policy and permissions profile for use with the application or service.

16. The method of claim 13 , further comprising:
receiving a selection by a user of a desire to launch the application or service; and
recommending the policy and permissions profile to the user for use with the application or service.

17. The method of claim 16 , wherein recommending the policy and permissions profile to the user for use with the application or service is based on at least one of crowd-sourcing, selections made by social network connections of the use

Assignees

• Microsoft Corp
• Microsoft Technology Licensing Llc

Inventors

• Bitran Hadas
• Davis Marc E
• Somech Haim
• Lee Ho John
• Jones Allen G
• Nahir Oded
• Friedberg Jeffrey D

Classifications

• G06F21/62

  Protecting access to data via a platform, e.g. using keys or access control rules · CPC title

• G06F2221/2141

  Access rights, e.g. capability lists, access control lists, access tables, access matrices · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• G06F21/604 Primary

  Tools and structures for managing or administering access control systems · CPC title

• G06F21/00 Primary

  Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity · CPC title