Facilitating security enforcement for shared content

Patent metadata

Field	Value
Publication number	US-9756053-B1
Application number	US-201615240911-A
Country	US
Kind code	B1
Filing date	Aug 18, 2016
Priority date	Jan 17, 2014
Publication date	Sep 5, 2017
Grant date	Sep 5, 2017

Abstract

Systems and methods that relate to security enforcement for shared content are described. A system includes an interface component that facilitates a display of information indicative of an option to select a defined level of security for a first subset of content of a plurality of content, wherein the defined level of security is indicative of a first type of secure environment. The first type of secure environment can be a hypertext transfer secure (HTTPS) environment or any environment in which content is encrypted prior to transmission over the Internet. A security component determines an association between the first subset of content and the defined level of security; and generates decision information to facilitate output, to a device, of the first subset of content associated with the defined level of security based on a determination that the device provides the first type of secure environment.

First claim

What is claimed is:

1. A non-transitory computer-readable storage medium storing computer executable instructions which when executed by one or more processors cause the one or more processors to perform steps comprising:
receiving content from a first user device;
receiving a selection of a defined level of security for the content, the defined level of security associated with a first type of secure environment;
storing the content with a flag indicating that the defined level of security associated with first type of secure environment has been selected for the content;
receiving, from a second user device, a request for the content;
determining whether the second user device has the first type of secure environment in response to the flag stored with the content; and
responsive to determining that the second user device has the first type of secure environment, transmitting the content to the second user device.

2. The computer-readable storage medium of claim 1 , wherein the defined level of security is a security protocol for exchanging information.

3. The computer-readable storage medium of claim 2 , wherein the selection of the defined level of security indicates that the content only be provided to devices using the security protocol.

4. The computer-readable storage medium of claim 1 , wherein the instructions further cause the one or more processors to perform steps comprising:
receiving, from a third user device, a request for the content; and
responsive to determining that the third user device has a second type of secure environment different from the first type of secure environment, transmitting to the third user device a message indicating that the content cannot be provided based on the third user device having the second type of secure environment.

5. The computer-readable storage medium of claim 1 , wherein transmitting the content to the second user device comprises:
associating a defined access parameter with the content;
determining whether the defined access parameter is satisfied by an entity associated with the second user device; and
responsive to determining that the second user device has the first type of secure environment and the entity satisfies the defined access parameter, transmitting the content to the second user device.

6. The computer-readable storage medium of claim 5 , wherein the defined access parameter comprises an identity of the entity.

7. The computer-readable storage medium of claim 5 , wherein the defined access parameter comprises an employment status.

8. The computer-readable storage medium of claim 1 , wherein the first type of secure environment comprises a hypertext transfer protocol secure environment.

9. The computer-readable storage medium of claim 1 , wherein the instructions further cause the one or more processors to perform steps comprising:
receiving from a third user device a request for requested content associated with additional content and the stored content;
determining that the third user device has a second type of secure environment different from the first type of secure environment;
selecting, from the additional content and the stored content, the additional content based on the additional content being associated with the second type of secure environment; and
transmitting the additional content to the third user device.

10. A method comprising:
receiving, by a computer system, content from a first user device;
receiving, by the computer system, a selection of a defined level of security for the content, the defined level of security associated with a first type of secure environment;
storing, by the computer system, the content with a flag indicating that the defined level of security associated with first type of secure environment has been selected for the content;
receiving, by the computer system from a second user device, a request for the content;
determining, by the computer system, whether the second user device has the first type of secure environment; and
responsive to determining that the second user device has the first type of secure environment, transmitting, by the computer system, the content to the second user device.

11. The method of claim 10 , further comprising:
receiving, from a third user device, a request for the content; and
responsive to determining that the third user device has a second type of secure environment different from the first type of secure environment, transmitting to the third user device a message indicating that the content cannot be provided based on the third user device having the second type of secure environment.

12. The method of claim 10 , further comprising:
associating a defined access parameter with the content;
determining whether the defined access parameter is satisfied by an entity associated with the second user device; and
responsive to determining that the second user device has the first type of secure environment and the entity satisfies the defined access parameter, transmitting the content to the second user device.

13. The method of claim 12 , wherein the defined access parameter comprises an identity of the entity.

14. The method of claim 12 , wherein the defined access parameter comprises an employment status.

15. The method of claim 10 , wherein the first type of secure environment comprises a hypertext transfer protocol secure environment.

16. The method of claim 10 , further comprising:
receiving from a third user device a request for requested content associated with additional content and the stored content;
determining that the third user device has a second type of secure environment different from the first type of secure environment;
selecting, from the additional content and the stored content, the additional content based on the additional content being associated with the second type of secure environment; and
transmitting the additional content to the third user device.

17. The method of claim 10 , wherein the defined level of security is a security protocol for exchanging information.

18. The method of claim 17 , wherein the selection of the defined level of security indicates that the content be provided to devices using the security protocol.

Assignees

• Google Inc

Inventors

• Schneider Michael Patrick
• Lewis Justin

Classifications

• G06F21/10 Primary

  Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} · CPC title

• H04L63/105 Primary

  Multiple levels of security · CPC title

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title