System and method for controlling the disposition of computer-based objects

Patent metadata

Field	Value
Publication number	US-9928349-B2
Application number	US-3113608-A
Country	US
Kind code	B2
Filing date	Feb 14, 2008
Priority date	Feb 14, 2008
Publication date	Mar 27, 2018
Grant date	Mar 27, 2018

Abstract

A secure object manager obtains, from an authorized person, a specification for disposition of at least one object, and creates first instructions, pertaining to the disposition, for a remote secure-object agent on a remote system. A copy of the object and the first instructions are sent to a remote secure-object agent on a remote system, which controls the copy based on the first instructions.

First claim

What is claimed is:

1. A method for controlling disposition of at least one computer-based object, said method comprising the steps of:
obtaining, by at least one processing device of a secure centralized object manager server, from a person authorized to specify said disposition of said at least one computer-based object, a specification of such disposition;
creating, with at least one processing device of said secure centralized object manager server, first instructions to be evaluated by a remote secure-object agent on a remote system, wherein said first instructions (i) pertain to said disposition of said at least one computer-based object, and (ii) specify whether redistribution of said at least one computer-based object by said remote secure-object agent is allowed; and
facilitating sending a copy of said computer-based object and said first instructions to said remote secure-object agent on said remote system, wherein said remote secure-object agent evaluates a request to redistribute said at least one computer-based object to one or more of an insecure open object manager that is distinct from said remote secure-object agent and an additional remote secure-object agent on a second remote system by comparing said request to redistribute to said first instructions specifying whether said redistribution of said at least one computer-based object by said remote secure-object agent is allowed.

2. The method of claim 1 , wherein said obtaining step comprises obtaining a selection of an action to be performed on said at least one computer-based object, said specification of said disposition being obtained in association with said action.

3. The method of claim 2 , wherein said obtaining said selection of said action comprises presenting, to said person, at least choices for redistributing and withdrawing said computer-based object.

4. The method of claim 3 , wherein said redistributing comprises at least one of unlimited redistributing, redistributing subject to originator notification, redistributing subject to a limited lifetime, redistributing subject to logging of actions performed on said copy of said computer-based object, and redistributing subject to time-changing access rules.

5. The method of claim 3 , further comprising the additional steps of:
obtaining, from said person, selection of said redistributing choice; and
responsive to said selection of said redistributing choice, offering said person choices for said specification of said disposition, said choices comprising at least preventing further distribution, specifying a lifetime for said copy, and specifying recipients for said copy.

6. The method of claim 5 , wherein said choices further comprise permission to save to disk, permission to print, permission to perform at least one of extending and defeating expiration time-out, permission to edit, permission to index, permission to read, and permission to delete.

7. The method of claim 3 , further comprising the additional steps of:
obtaining, from said person, selection of said withdrawing choice; and
responsive to said selection of said withdrawing choice, facilitating destruction of all transmitted copies of said computer-based object.

8. The method of claim 1 , further comprising the additional step of verifying receipt of said copy of said computer-based object and said first instructions by said remote secure-object agent on said remote system.

9. The method of claim 1 , further comprising the additional step of controlling said copy of said remote system, based on said first instructions.

10. The method of claim 9 , wherein said controlling comprises:
obtaining, by said secure object agent, from a recipient of said copy, a specification of putative further disposition of said copy;
comparing, by said secure object agent, said specification of said putative further disposition, to said first instructions; and
responsive to said comparing indicating that said putative further disposition of said copy is not permitted by said first instructions, awaiting alternative specification from said recipient.

11. The method of claim 10 , further comprising the additional steps of:
obtaining, by said secure object agent, from said recipient of said copy, said alternative specification;
comparing, by said secure object agent, said alternative specification to said first instructions; and
responsive to said comparing indicating that said alternative specification is permitted by said first instructions, carrying out said alternative specification.

12. The method of claim 10 , wherein said specification of putative further disposition comprises putative redistribution of said copy of said computer-based object to an open object manager.

13. The method of claim 10 , wherein said specification of putative further disposition comprises putative redistribution of said copy of said computer-based object to a further secure object agent on a further remote system, further comprising the additional step of prompting said recipient whether said first instructions are to be modified for said redistribution to said further secure object agent on said further remote system.

14. The method of claim 9 , wherein said obtaining, creating and facilitating occur substantially at an originating system, further comprising the additional steps of:
encrypting said copy of said computer-based object and said first instructions at said originating system; and
decrypting said copy of said computer-based object and said first instructions at said remote system.

15. A method for controlling disposition of at least one copy of a computer-based object, said method comprising the steps of:
obtaining, by at least one processing device of a secure object agent from a remote secure object manager, a copy of said computer-based object together with first instructions, said first instructions specifying allowable disposition of said copy;
obtaining, by at least one processing device of said secure object agent, from a recipient of said copy, a specification of putative further disposition of said copy;
comparing, by at least one processing device of said secure object agent, said specification of said putative further disposition, to said first instructions; and
responsive to said comparing indicating that said putative further disposition of said copy is not permitted by said first instructions, awaiting alternative specification from said recipient.

16. The method of claim 15 , further comprising the additional steps of:
obtaining, by said secure object agent, from said recipient of said copy, said alternative specification;
comparing, by said secure object agent, said alternative specification to said first instructions; and
responsive to said comparing indicating that said alternative specification is permitted by said first instructions, carrying out said alternative specification.

17. The method of claim 15 , wherein said specification of putative further disposition comprises putative redistribution of said copy of said computer-based object to an open object manager.

18. The method of claim 15 , wherein said specification of putative further disposition comprises putative redistribution of said copy of said computer-based object to a further secure object agent on a further remote system, further comprising the additional step of prompting said recipient whether said first instructions are to be modified for said redistribution to said further secure object agent on said further remote system.

19. The method of claim 15 , wherein sa

Assignees

• Bantz David F
• Caceres Ramon
• Chefalas Thomas E
• Jalan Srikant
• Mastrianni Steven J
• Pickover Clifford A
• IBM

Inventors

• Bantz David F
• Caceres Ramon
• Chefalas Thomas E
• Jalan Srikant
• Mastrianni Steven J
• Pickover Clifford A

Classifications

• G06F17/30067

  Physics · mapped topic

• G06F21/10 Primary

  Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} · CPC title

• G06F17/3061

  Physics · mapped topic

• G06F17/30575

  Physics · mapped topic

• G06F17/30607

  Physics · mapped topic