WO2001069470A1

WO2001069470A1 - Dynamic content spreadsheet creation utilizing restricting access

Info

Publication number: WO2001069470A1
Application number: PCT/IL2001/000233
Authority: WO
Inventors: Boaz Misholi; Gustavo Gambach; Ariel Lenger; Niv Maman; Amir Harpaz
Original assignee: Movious Ltd.
Priority date: 2000-03-14
Filing date: 2001-03-12
Publication date: 2001-09-20
Also published as: AU2001239522A1; EP1282873A1; EP1282873A4

Abstract

A system and method for generating and managing dynamic content spreadsheets and of restricting access to content thereof is disclosed. The system and method comprises a computing platform for executing a software capable of creating a customized user interface; as well as defining content for display in said interface; defining retrievable network sites; and defining a format for display of said content. A method for creating a customizable self updating network content retrieval resource is also disclosed. The invention provides for periodic updates of content. Further disclosed are a system and method of restricting access based upon verifying a location from which an access request originates. A request for access is initiated from a user (62), at which time user identity is verified (64) via username/password (70). The user's location is subsequently verified (66) via IP address (74), phone mumber (76), or GPS coordinates (84). Access is allowed or denied (88) based upon analyzation of said request with respect to temporal data (68).

Description

DYNAMIC CONTENT SPREADSHEET CREATION UTILIZING RESTRICTED ACCESS

FIELD AND BACKGROUND OF THE INVENTION

The present invention relates to a system and method for generating and managing dynamic content spreadsheets and of restricting access to content thereof and of other resources. More particularly the present invention relates to a system and method for creating, using and managing temporally self-updating information resources for use by individuals, common communities, or groups, based on a pre-defined data profile wherein the dynamic content spreadsheets are connectable to a network. For purposes of this specification and the accompanying claims, "connectable to a network" specifically includes, but is not limited to, remote logins facilitated by telephone/modem connections (e.g. cellular telephone or conventional telephone) as well as logins conducted within a network (e.g. LAN, WAN, Internet, etc. ) and connections requiring a combination of these methods. Therefore, the present invention further includes a location based authentication system, specifically a means for allowing access to a specific resource only if a request for access is determined to originate from a predefined location. The Internet is rapidly becoming a primary information resource of the modem world. Internet use worldwide is constantly increasing, and people increasingly perceive the Internet as the largest and most available information resource. However, many Internet users have difficulty retrieving the content they seek in a timely fashion. This difficulty arises from a variety of factors, including, but not limited to, the vast size and complexity of the Internet, the dynamic nature of the Internet, and lack of experience in using available search and retrieval methods.

Available search and retrieval methods typically include portals, search engines, and bookmarks (alternately referred to as favorites or hot links). Portals can be defined as Internet sites with links to other Internet sites. As an example, an Internet site of the National Football League (NFL) might contain links to Internet sites of NFL teams, NFL players, and purveyors of products carrying an NFL trademark. In this way, the NFL Internet site would serve as a portal for football content. However, a football fan interested in, for example, a single NFL team, two college football teams, and all the activities of high school football teams in his hometown does not have all of his content needs supplied by the NFL Internet portal. This user might use a search engine to retrieve a list of Internet sites dealing with football. Depending upon their level of expertise, users of search engines may or may not succeed in finding the information they desire. Typically inexperienced users of a search engine either retrieve large amounts of irrelevant content, or exclude a significant portion of the desired content, depending upon the way in which they carry out their search.

Assuming that the hypothetical Internet user finds the Internet sites which provide content pertaining to a the chosen single NFL team, the desired two college football teams, and all the activities of high school football teams in his home town, the user would typically place these Internet addresses in a bookmark list. The bookmark list allows the user to quickly return to the selected sites, but it does not allow simultaneous retrieval of desired content from all of the sites, and some of the sites may present a significant quantity of unwanted content, for example advertising. Visiting multiple Internet sites and retrieving unwanted content from them requires more time than using a single information resource which would contain only content suited to a particular user information profile. In addition, the bookmark list itself is typically a relatively inflexible information resource, typically in the form of a pull down menu and/or window. The individual user typically has little control over the look and feel of the bookmark list as it is presented on their computer by a Web browser. In addition, a bookmark points to a specific web page. A bookmark can not point to a specific source or part of information on a web site or page.

Historically, access to digital data typically required a user to go to a specific location and use the data at a predefined terminal or workstation. As the ability of computers to communicate with one another has increased, this location specificity for access has been lost. Today, with the advent of the Internet and wide area netork (WAN) systems, insuring security of, or limiting access to, a specific protocol, application or resource is difficult, especially since usage and availability of mobile access devices (e.g. mobile phones, PDAs, etc.) is constantly growing. Due to the introduction of technologies such as WAP (Wireless Application Protocol) and 3G cellular technologies, the number of possible links between the Internet, the corporate network environment and the mobile user has become nearly infinite. For example, WAP allows connectivity between the Internet and the cellular world. This is typically done using a WAP gateway, which converts WAP to IP and allows users of mobile phones to connect to the Internet and browse using a micro-browser or to connect a PC to their cellular device. As the number of users of these systems worldwide grows, so will the need for enhanced security. This is because every mobile device becomes a potential entry point to the user's network, making IP based attacks such as spoofing and hi-jacking more feasible and virtually impossible to trace.

Currently, authentication systems authenticate users based on usemames and passwords in a variety of ways, such as: one-time passwords, and encrypted passwords. However, these systems do not require that a system check that a request originates in a location which ought to be permitted. In addition, there are a number of standard authentication mechanisms used by organizations. These usually come in the form of TACACS, Radius servers. Recently, LDAP has begun to emerge as an authentication mechanism as well. There is thus a widely recognized need for, and it would be highly advantageous to have, a system of information resources, and a method for designing same, devoid of the above limitations. Further, there is an unmet need for a means of restricting access to computer based resources, and other resources, based upon user location.

SUMMARY OF THE INVENTION

According to one aspect of the present invention there is provided a customizable self updating network content retrieval system which comprises (a) a computing platform for executing a customizable updateable content retrieval software the software being for (i) creating a customized user interface being displayable on a display device; (ii) defining at least one, preferably a plurality of, item(s) of periodically updating content for display by the display device in a context of at least a portion of the user interface; (iii) defining at least one, preferably a plurality of, network site(s) from which the at least one, preferably the plurality of, periodically updating content being retrievable; and (iv) defining at least one format for displaying the at least one, preferably the plurality of, periodically updating content by the display device in the context of at least the portion of the user interface; and (b) a communication channel for providing data communication between the computing platform and a network storing the at least one, preferably the plurality of, periodically updating content. According to another aspect of the present invention there is provided a method for creating a customizable self updating network content retrieval resource, the method comprising the steps of (a) creating a customized user interface being displayable on a display device; (b) defining at least one, preferably a plurality of, item(s) of periodically updating content for display by the display device in context of at least a portion of the user interface; (c) defining at least one, preferably a plurality of, network site(s) from which the at least one, preferably the plurality of, periodically updating content being retrievable; and (d) defining at least one format for displaying the at least one, preferably the plurality of, periodically updating content by the display device in context of at least the portion of the user interface. According to an additional aspect of the present invention there is provided a security system for restricting access. The system includes a receiving device which is designed and configured for: (a) receiving a request for access from a user; (b) verifying identity of the user; and (b) further verifying a location from which the request originates. According to a further additional aspect of the present invention there is provided a method for restricting access to an item. The method includes the steps of: (a) receiving a request for access from a user; (b) verifying identity of the user; and (b) further verifying a location from which the request originates

According to further features in preferred embodiments of the invention described below, the customizable updateable content retrieval software is further for (v) defining a frequency with which the at least one, preferably the plurality of, periodically updating content is to be retrieved.

According to still further features in the described preferred embodiments, the frequency is a fixed periodicity According to still further features in the described preferred embodiments, the frequency is an immediate command.

According to still further features in the described preferred embodiments, the frequency is a rule base command.

According to still further features in the described preferred embodiments, at least one format is selected from the group consisting of a picture, text, audio information, an animated picture, a video image and video animation.

According to still further features in the described preferred embodiments, the user interface is selected from the group consisting of a local file, a file retrievable from a local server by user clients of a local area network, and a Web page. According to still further features in the described preferred embodiments, the user interface appears to an operator of the computing platform in a form selected from the group consisting of a window opened by an operating system of the computing platform, a window opened by a software installed for display of the customizable updateable content, and a Web page displayed by a Web browser. According to still further features in the described preferred embodiments, the data display device is selected from the group consisting of a personal computer, an external monitor of a personal computer, a workstation, a terminal functioning as part of a local area network, a Web TV, a personal digital assistant, and a cellular telephone having at least some PC capabilities. According to still further features in the described preferred embodiments, at least one, preferably a plurality of, item(s) of periodically updating content is selected from the group consisting of a picture, text, audio information, an animated picture, a video image, and video animation.

According to still further features in the described preferred embodiments, wherein the at least one, preferably the plurality of, network site(s) describes an item selected from the group consisting of a local file, a file available to at least one user client of a local area network, an item selected from an information portal or any other content resource on a local area network, and/or a URL address defining a Web site.

According to still further features in the described preferred embodiments, the at least one format includes details of at least one feature selected from the group consisting of a font, a font size, a font color, a text style, a window size, a dimension of a window, an arrangement of frames, a position for placement of an item within the user interface, a size of an item, a background color, a border and a characteristic of a border.

According to still further features in the described preferred embodiments, the communication channel is selected from the group consisting of a telephone connection, a cellular telephone connection, an Internet connection, an infrared frequency transmission connection, a local area network connection, satellite connection, TV cable connection, cable modem connection, a radio frequency connection or any wired or unwired connection. According to still further features in the described preferred embodiments, the network is any collection of at least two, preferably more, computing machines linked by at least one, preferably more, communication channel(s), wherein each of the computing machines has at least one role selected from the group consisting of acting as a user client and acting as a server. According to still further features in the described preferred embodiments, the network is selected from the group consisting of a local area network, the Internet, Extranet and a local area network in communication with the Internet.

According to still further features in the described preferred embodiments, defining the at least one, preferably the plurality of, network site(s) is accomplished by a method selected from the group consisting of execution of macro commands by an operator of the computing platform, automatic recording of a sequence of network sites accessed by an operator of the computing platform, manual entry of identification data of at least one, preferably the plurality of, network site(s) by an operator of the computing platform and submission of a request to a search engine by an operator of the computing platform. According to still further features in the described preferred embodiments, defining at least one, preferably the plurality of, network site(s) further includes defining specific items of content from within each of the at least one, preferably the plurality of, network site(s). According to still further features in the described preferred embodiments, creation of the customizable updateable content retrieval resource further includes the step of defining a frequency with which the at least one, preferably a plurality of, periodically updating content is to be retrieved.

According to still further features in the described preferred embodiments, the step of defining at least one, preferably the plurality of, network site(s) defines a location on a network selected from the group consisting of a local area network and the Internet.

According to still further features in the described preferred embodiments, the computing platform is further for defining whether said at least one item of periodically updated content selected for display will be available to at least one other user.

According to still further features in the described preferred embodiments, the computing platform allows real time communications between a user and at least one additional, so as to present the user with item(s) of periodically updated content selected for display by the at least one additional user (or a group of users).

According to still further features in the described preferred embodiments, a user can determine whether his/her updated, retrievable content will be displayed to other users as well.

According to still further features in the described preferred embodiments, a user can determine whether at least one additional user will be provided with a notification saying that the user is connected or is on-line.

According to still further features in the described preferred embodiments, the computing platform is further for displaying a list of users for at least one of said items of periodically updating content. According to still further features in the described preferred embodiments, the computing platform further functions as a server for a network, said server making available to said network at least said customized user interface.

According to still further features in the described preferred embodiments the computing platform is protected by a security system which restricts access.

According to still further features in the described preferred embodiments the security system restricts access based upon at least one parameter selected from the group consisting of a user name, a password, a telephone number, a location, an IP address from which a request originates and temporal data. According to still further features in the described preferred embodiments the telephone number is selected from the group consisting of a cellular telephone number and a conventional telephone number.

According to still further features in the described preferred embodiments the location is determined in a manner selected from the group consisting of automatically and via designation by a user of the system.

According to still further features in the described preferred embodiments the temporal data includes at least one item selected from the group consisting of a relative time, an absolute time, a relative date and an absolute date.

According to still further features in the described preferred embodiments the at least one parameter is analyzed according to a rule-based method.

According to still further features in the described preferred embodiments the step of creating includes the sub-step of restricting access to the customized user interface by means of a security system.

According to still further features in the described preferred embodiments the receiving device is further designed and configured for analyzing the request with respect to temporal data.

According to still further features in the described preferred embodiments the identity of the user is verified by at least one parameter selected from the group consisting of a user name and a password. According to still further features in the described preferred embodiments the location from which the request originates is verified by at least one parameter selected from the group consisting of a telephone number, a location determination mechanism, and an IP address from which the request originates.

According to still further features in the described preferred embodiments the location determination mechanism operates in a manner selected from the group consisting of automatically and via prompting the user to enter a location.

According to still further features in the described preferred embodiments the location determination mechanism includes an established location determination mechanism.

According to still further features in the described preferred embodiments the established location determination mechanism is selected from the group consisting of GPS, GSM and triangulation based upon signals received within a cellular communication network.

According to still further features in the described preferred embodiments restricting access refers to access to an item selected from the group consisting of a physical premises, a computer resource, an account and a previously purchased item.

According to still further features in the described preferred embodiments the computer resource is a network, a specific server within a network, a file, an Internet site, a web page or a customized user interface.

According to still further features in the described preferred embodiments the method includes the additional step of analyzing the request with respect to temporal data.

The present invention successfully addresses the shortcomings of the presently known configurations by providing a system and method for generating and managing dynamic content spreadsheets and of restricting access to content thereof and to other resources. The dynamic content spreadsheets are capable of presenting customizable self updating network content according to user profiles of individuals or groups.

BRIEF DESCRIPTION OF THE DRAWINGS

The invention is herein described, by way of example only, with reference to the accompanying drawings. With specific reference now to the drawings in detail, it is stressed that the particulars shown are by way of example and for purposes of illustrative discussion of the preferred embodiments of the present invention only, and are presented in the cause of providing what is believed to be the most useful and readily understood description of the principles and conceptual aspects of the invention. In this regard, no attempt is made to show structural details of the invention in more detail than is necessary for a fundamental understanding of the invention, the description taken with the drawings making apparent to those skilled in the art how the several forms of the invention may be embodied in practice. In the drawings:

FIG. 1 is a schematic representation of a computing platform of the present invention in communication with a network;

FIG. 2 is a schematic representation of retrieval and display of content items on a data display device according to the present invention; and

Fig. 3 is a diagram of steps in a method according to the present invention

DESCRIPTION OF THE PREFERRED EMBODIMENTS

The present invention is of a system and method for generating and managing dynamic content spreadsheets which can present customizable self updating network content according to user profiles of individuals or groups. Specifically, the present invention can be used to selectively retrieve one or more items of content from one or more network servers and display each of the items in a user selectable format in a user interface appearing on a display device.

The principles and operation of a system and method for generating and managing dynamic content spreadsheets according to the present invention may be better understood with reference to the drawings and accompanying descriptions.

Before explaining at least one embodiment of the invention in detail, it is to be understood that the invention is not limited in its application to the details of construction and the arrangement of the components set forth in the following description or illustrated in the drawings. The invention is capable of other embodiments or of being practiced or carried out in various ways. Also, it is to be understood that the phraseology and terminology employed herein is for the purpose of description and should not be regarded as limiting.

For purposes of this specification, the phrase "dynamic content spreadsheet" refers to the user interface of the present invention as detailed herein and as claimed in the accompanying claims.

For purposes of this specification and the accompanying claims, the phrase "user client" generally refers to a computer and includes, but is not limited to, personal computers (PC) having an operating system such as DOS, Windows , OS/2 or

Linux; Macintosh , Palm OS , EPOC computers; computers having

TM JAVA -OS as the operating system; and graphical workstations such as the computers of Sun Microsystems and Silicon Graphics , and other computers having some version of the UNIX operating system such as AIX or SOLARIS of Sun Microsystems ; or any other known and available operating system; personal digital assistants (PDA), cellular telephones having computer capabilities, a telephone having computer capabilities and Web TVs, each of which is known to include an inherent or connectable display device.

For purposes of this specification and the accompanying claims, the term

"Windows " includes but is not limited to Windows 95 , Windows 2000

Windows 3.x in which "x" is an integer such as "1", Windows NT , Windows

TM . TM 98 , Windows CE and any upgraded versions of these operating systems by

Microsoft Corp (USA) and /or window managers for the graphical X Windows system for UNIX based operating systems and / or its variants such as Linux. .

For purposes of this specification and the accompanying claims, the phrase

"computing platform" refers to any particular operating system and/or hardware device, as previously described, according to which the format for data communication and/or presentation (display) thereof is determined.

For purposes of this specification and the accompanying claims, the phrase "Web browser" or "browser", unless otherwise indicated, refers to any software program which can display text, graphics, or both, as well as display video, and/or play sounds, from Web pages on World Wide Web sites and or local files. For purposes of this specification and the accompanying claims, the phrase

"Web page" refers to any document written in a "mark-up language" , or "script language", or any programming language or tool. For purposes of this specification and the accompanying claims, the phrase "mark up language" includes, but is not limited to, HTML (hypertext mark-up language) or VRML (virtual reality modeling language), dynamic HTML, XML (extended mark-up language) or related computer languages thereof, as well as to any collection of such documents reachable through one specific Internet address or at one specific World Wide Web site, or any document obtainable through a particular URL (Uniform Resource Locator). Script languages include, but are not limited to, CGI, PERL, VBScript, JavaScript, ASP.

For purposes of this specification and the accompanying claims, the term "Web site" refers to at least one Web page, and preferably a plurality of Web pages, virtually connected to form a coherent group.

For purposes of this specification and the accompanying claims, the term "Web server" or "server", unless otherwise indicated, refers to a server for providing one or more Web pages to a Web browser upon request.

For purposes of this specification and the accompanying claims, the phrase "display a Web page" includes all actions necessary to render at least a portion of the information on the Web page available to the computer user. As such, the phrase includes, but is not limited to, the static visual display of static textual or graphical information, the audible production of audio information, the animated visual display of animation and the visual display of video stream data.

For purposes of this specification and the accompanying claims, the phrase "search engine" refers to any file, database or any content storage resource operating on a network server and being capable of receiving a query and responding thereto. Examples of search engines include, but are not limited to, www.yahoo.com, www.snap.com. www.lycos.com, www.hotbot.com, www.altavista.com, the PubMed server of the NCBI (www.ncbi.nlm.nih.gov/PubMed/medline.html), the database of the USPTO (www.uspto.gov/patft/index.html), the Internet movie database (www.imdb.com) and Online Mendelian Inheritance in Man (www.ncbi.nlm.nih.gov/Omim/). For purposes of this specification and the accompanying claims, the terms

"content" and "information" are considered synonymous and are used interchangeably.

For purposes of this specification and the accompanying claims, the phrase

"caller ID" refers to any mechanism by which a recipient of a phone call may identify the phone number from which a call originates. As an example, caller ID may involve transmitting the telephone number of the calling party to the called party during the power ringing phase of the call. A caller ID processing device connected in parallel with the handset at the called party's premises displays the calling party's phone number while the called party's phone is still "on hook" (i.e., without answering the phone). In conventional telephony, transmission of the caller ID signal typically occurs as a Frequency Shift Key (FSK) binary signal between the first and second rings of the called party's telephone.

Figure 1 depicts a customizable self updating network content retrieval system in accordance with the teachings of the present invention, which is referred to hereinbelow as system 21. System 21 includes a computing platform 20 for executing a customizable updateable content retrieval software 22. Software 22 serves for creating a customized user interface 24 (Figure 2) which is displayable on a display of a display device 34. Alternately or additionally, software 22 may be for making available to a network (e.g., 42) at least customized user interface 24 for display on at least one additional display device. Software 22 is capable of defining at least one, preferably a plurality of, item(s) of periodically updating content (26a, 26c and 26f-g) for display by display device 34 in a context of at least a portion of user interface 24. These items (26a, 26c and 26f-g) may be, for example, complete web pages, links to web pages or any portion of a web page. Software 22 is further capable of defining at least one, preferably a plurality of, network site(s) 40 and 40a-c from which periodically updating content 26 is retrievable. Software 22 is further capable of defining specific items of content from within each of network site(s) 40a-c.

In some cases, information may be selected for retrieval by software 22 according to relevant content, key words, proximity to relevant text or according to a rule. For purposes of this specification and the accompanying claims the term "rule" refers to any definition having at least one term.

For example, a user may select as a content item to be retrieved the name of a stock (for example General Motors) and the most recent market value of that stock. However, the position of this content on the selected site or page may change, resulting in a failure to retrieve. In order to prevent this type of failure, the at least one item of periodically updating content for retrieval is defined by a rule. In this example, the rule would be "the most recent General Motors market value".

In the above example, the rule has two terms, the name of the stock (General motors) and the desired data pertaining to the stock (most recent market value). A mle may also be used, alternately or additionally, to define periodicity or frequency. For example "retrieve the most recent market value of general motors stock once each hour when the New York Stock Exchange is open". In this example three additional terms are added to define periodicity. The first additional term is a day of the week (Monday through Friday). The second additional term is an hour of the day (9:00 to 17:00). The third additional term is a frequency term, once per hour. It will be appreciated that the correspondence between updates of content items in the user interface and actual updates of content at the content source is not perfect. In the above example, the price of General Motors stock may change many times during the one hour between updates in the user interface. As the frequency of content retrieval increases, the correspondence between updates of content items in the user interface and actual updates of content at the content source is improved.

Software 22 is further capable of defining at least one format for displaying content 26 in the context at least the portion of user interface 24. The format(s) include details of at least one feature of appearance, for example, but not limited to, a font, a font size, a font color, a text style, a window size, a dimension of a window, an arrangement of frames, a position for placement of an item within user interface 24 or a portion thereof, a size of an item, a background color, a border and a characteristic of a border. Software 22 permits definition of network site(s) 40 by any one of a number of methods, including, but not limited to, execution of macro commands by an operator of computing platform 20, automatic recording of a sequence of network sites 40 accessed by an operator of computing platform 20, manual entry of identification data of at least one, preferably a plurality of, network site(s) 40 by an operator of computing platform 20 via an input device 36 and submission of a request to a search engine by an operator of computing platform 20. System 21 of the present invention also includes a communication channel 30 for providing data communication between computing platform 20 and a network storing content 26. The communication channel may be, for example, a telephone connection, a cellular telephone connection, an Internet connection, an infrared frequency transmission connection, a local area network connection, a satellite connection, a TV cable connection, a cable modem connection, a radio frequency connection an Extranet connection, or any other wired or unwired connection.

The present invention is further embodied by a method for creating a customizable self updating network content retrieval resource. The method is effected by implementing the following four method steps. The first step is creating a customized user interface 24 which is displayable on a display of a display device 34.

The second step is defining at least one, preferably a plurality of, item(s) 26a,

26c and 26f-g of periodically updating content for display by display device 34 in context of at least a portion of user interface 24. The third step is defining at least one, preferably a plurality of, network site(s)

40a-c from which content 26 is retrievable.

The fourth step is defining at least one format for displaying the at least one, preferably the plurality of, periodically updating content 26 by display device 34 in context of at least the portion of user interface 24. It is to be noted that the order of steps described is not to be taken as limiting either here in the specification and/or in the claims that follows, as the order can be modified. For example, the step of defining at least one, preferably a plurality of, network site(s) 40a-c from which content 26 is retrievable can be executed first, followed by additional steps of the method. In some configurations of the present invention, software 22 defines a frequency with which content 26 is to be retrieved, each retrieval constituting an update. This frequency may be a fixed periodicity, for example once per day, once per hour, or rule-based such as hourly between 8:00 and 16:00 or Monday through Friday at 9:00 which can be set differently for every user and/or a group of users for the same given content, or when at least one of the content values to be displayed changes or is modified, etc. Alternatively or additionally, the frequency may include an immediate command, deliverable from, for example, from an input device 36 of computing platform 20. Input device 36 may take the form of, for example, a keyboard, a mouse, a track ball, a keypad, a touch-screen, a microphone, or any other device capable of transferring voice or data commands to the platform 20. Content 26 retrievable by software 22 may take the form of, for example, a picture, text, audio information, an animated picture, a video image or video animation.

User interface 24 may take the form of, for example a local file, a file retrievable from a local server by user clients of a local area network, wide area network, mobile area network, and a Web page.

User interface 24 may appear to an operator of the computing platform, for example, as a window opened by an operating system of the computing platform, a window opened by a software installed for display of the customizable updateable content 26, and a Web page displayed by a Web browser. Data display device 34 of system 21 of the present invention may be, for example, a personal computer, an external monitor of a personal computer, a workstation, a terminal functioning as part of a local area network, a Web TV, a personal digital assistant, ,a mobile communications device, satellite telephone, a cellular telephone having at least some PC capabilities, and any other display device capable of displaying information retrieved from the network. Display device 34 may include, for example a CRT tube, a liquid crystal display or a projector.

The at least one, preferably the plurality of, item(s) of periodically updating content 26 may include, but are not necessarily limited to a picture, text, audio information, an animated picture, a video image, and video animation. The at least one, preferably the plurality of, network site(s) may include, for example, a local file, a file available to at least one user client of a local area network, an item selected from an information portal on a local area network, and a URL address defining a Web site.

The term "network" as used herein and in the accompanying claims, refers to any collection of at least two computing machines (e.g., 20 and 40) linked by at least one communication channel 30 wherein each machine functions as a user client, as a server, or as both a user client and a server. The network, for purposes of the present invention, may be a local area network, the Internet, Extranet or a local area network in communication with the Internet or Intranet.

As an illustrative example of the use of the present invention, an operator of computing platform 20 activates software 22 and begins to define content 26 for presentation in context of user interface 24. This definition may be, for example, by execution of macro commands, as described hereinabove.

The operator begins by accessing server 40a which is part of local area network 42 and contains content items 26a-c. The operator defines 26a and 26b for inclusion and then visits network site 40b containing content items 26-f and network site 40c containing content items 26g-i. Network sites 40b and 40c are Internet sites and content items 26f and 26g are defined for inclusion during these visits. For each selected content item 26, the operator may, at his/her discretion, define at least one feature including, but not limited to, details of at least one feature of appearance, for example, a font, a font size, a font color and a text style. The operator may, alternately or additionally, designate various aspects of user interface 24, such as, for example, a window size, a dimension of a window, an arrangement of frames, a position for placement of an item within the user interface, a size of an item, a background color, a border and a characteristic of a border. Similarly, the operator may define, either for each selected content item (26a, 26c and 26f-g in this example), or for all of the content of interface 24, a frequency for updating, according to this frequency, platform 20 establishes communication with at least one, preferably the plurality of, network sites (40a-c in this example), and updates content items 26a, 26c and 26f-g. For simplicity, each network site 40 is depicted as a single group of content items 26. In practice, each network site 40 is far more complex, typically including many Web pages. In the example given, content 26a is displayed in context of interface 24 with an increased font size, content 26c is displayed in context of interface 24 in underlined format, content 26f is displayed in italics and content 26g is displayed within a dashed border. Similarly, the pictured placement of content items 26a, 26c and 26f-g within user interface 24 is defined by the operator using software 22.

Envisioned applications of the present invention include, but are not limited to, tracking changing prices (for example stock prices, or airfares), changing availability of an item, and changing schedules such as entertainment schedules.

Users or content providers may use interface 24 to allow other users to view their content 26a, 26c and 26f-g via interface 24. In this case, computing platfoπn 20 further functions as a server for a network (e.g., network 42 or the Internet), by making available to at least customized user interface 24.

By allowing other users to view their content, a user is, in effect defining whether the at least one item of periodically updated content selected for display (in this example 26a, 26c and 26f-g) will be available to at least one other user. In some cases, a user can also determine through interface 24 whether other users have subscribed to the same content 26a, 26c and 26f-g.

This may be accomplished, for example, by displaying a list of users for at least one of the items of periodically updating content in user interface 24. Alternately or additionally, users that have chosen similar content see one another when they are connected and may communicate with each other.

According to a preferred embodiment of the invention an automatic recognition of the type of computing platform 20 connected to the network is provided so that updated data for interface 24 can be sent to computing platform 20 via communication channel 30 in timely fashion. Thus, a user connected to a network through any medium is able to retrieve the information in a way which suits that medium, using the most suited communication channel for that medium. The system of the present invention is constructed with capabilities (e.g., WAP capabilities) of recognizing which device or medium (e.g., PDA, PC, cellular phone, etc.) the user is using to connect and will display the information in the format suitable for that device. A user may also embed a custom user interface created by the present invention within their own custom user interface.

According to preferred embodiments of the present invention computing platfoπn 20 is protected by a security system which restricts access. The security system may be, for example, an algorithm operating on platform 20. The security system may restrict access based upon a variety of criteria including, but not limited to, a user name, a password, a telephone number, a location, an IP address from which a request originates and temporal data. The telephone number may be, for example, a cellular telephone number or a conventional telephone number. A telephone number may be ascertained by a security system, for example, using caller ID information as described hereinabove.

For purposes of the present invention, the security system of platform 20 may determine a location of a user either automatically or via designation by the user of the system. User designation may be, for example, in response to a query from the security system of platform 20.

Temporal data analyzed by the security system of platform 20 may include, but is not limited to, a relative time, an absolute time, a relative date, an absolute date or combinations thereof. For example, a subscriber to a particular user interface 24 may be authorized for 90 days or 20 hours of actual connection, whichever limit is reached first. In such a case the security system would analyze two absolute dates (date of subscription and current date) in order to determine a relative date (number of days since access was ordered) as well as a relative time (total elapsed access time). In this example, the at least one parameter is analyzed according to a rule-based method. Therefore, the step of creating may include the sub-step of restricting access to the customized user interface by means of a security system.

Thus, the present invention provides a system and method for generating and managing dynamic content spreadsheets capable of presenting customizable self updating network content according to user profiles of individuals or groups in an as so far unprecedented manner. According to another aspect of the present invention there is provided a security system for restricting access. Restricting access may refer to restricting access to a computer resource, for example a network, a specific server within a network, a file, an Internet site, a web page or a customized user interface as described hereinabove. Alternately or additionally, restricting access may refer to restricting access to an item such as, for example, a physical premises, an account or a previously purchased item.

The system includes a receiving device that is designed and configured for receiving a request for access from a user. In response to the request, the receiving device verifies the identity of the user and, alternately or additionally, verifies a location from which the request originates. The receiving device may be further designed and configured for analyzing the request with respect to temporal data.

Thus, the present invention is further embodied by a method 60 for restricting access to an item. Method 60 (Figure 3) includes the step of receiving 62 a request for access from a user. Access may refer, for example, to physical access to a premises or to electronic access to a computer resource as described hereinabove. In many cases, access is controlled by a security system of computing platform 20 .

Method 60 further includes the step of verifying 64 identity of the user as described hereinabove, for example by usemame/password 70. Method 60 further includes the step of verifying 66 a location from which the request originates. Location 72 may be determined either automatically or via designation by the user. Location may be verified automatically 78, for example by means of a telephone number 76 received by caller ID circuitry, an established location determination mechanism (e.g. 82, 84 or 86), or an IP address 74 from which the request originates. Examples of established location determination mechanisms include, but are not limited to GPS 82, GSM 84 and triangulation 86 based upon signals received within a cellular communication network. Alternately or additionally, the user may be prompted to enter a location 80, for example in the form of a street address. Method 60 may further include the additional step of analyzing the request with respect to temporal data 68.

In some cases at least one parameter may be analyzed according to a rule-based method. After all location and time parameters have been analyzed, access is allowed or denied 88. As an illustrative, non-limiting, example of implementation of the present invention, let us consider the case Mr. K. Wynn. Mr. Wynn is an executive of a multinational pharmaceutical company based in New Jersey. The company has preliminary data suggesting that they have identified a new drug which can be used as a male birth control pill. The formulation of the compound and data from 64 independent clinical trials is stored on a secure server in company headquarter, together with a software program for conducting meta-analyses on subsets of the data. Mr. Wynn is dispatched to Hong Kong to meet with representatives of a potential strategic partner from the far east. He carries with him a PDA with cellular telephone capabilities. No data pertaining to the studies or the formulation of the tested compound is stored on the device. Mr. Wynn, as an executive of the company, has a user name and password which allow him access to the secure server from any computer located within company headquarters. For purposes of his trip, he is provided additional access privileges which are based upon the following conditions: (1) the request via modem of the company server must originate from a cellular telephone number assigned to Wynn's PDA; (2) the request must originate from "Hotel of the 7 Moons" in Hong Kong, as verified by GSM; (3) the request must be received between 9:00 and 13:00 on March 14, 2001 ; and (5) Mr. Wynn must enter his user name and password. In this way, an unprecedented level of security is achieved. On March 14, Mr. Wynn meets with the potential investors at 9:45. They are very impressed with the data and the simplicity of the formulation. They promise him an answer the following day. Immediately following his meeting, Mr. Wynn deletes all downloaded files from his PDA using a secure erase protocol. The next morning, Mr. Wynn is notified by telephone that the strategic partners wish to review contractual terms in order to invest 245 million dollars over the next 5 years. Negotiations are concluded that day. In the evening, Wynn's pocket is picked in the Hong Kong airport. He discovers 3 hours after he is airborne that his PDA is missing. Net loss for his company is approximately 300$. The new owner of the PDA is unable to gain access to the company's secure server even though the dial-up access code together with Wynn's user name and password are stored in the device. The present invention includes many existing hardware devices and systems. One ordinarily skilled in the art will be capable of assembling and configuring these for use in conjunction with the present invention. Similarly, the present invention may be embodied in a variety of software algorithms and one ordinarily skilled in the art of computer programming will be capable of writing suitable algorithms.

Although the invention has been described in conjunction with specific embodiments thereof, it is evident that many alternatives, modifications and variations will be apparent to those skilled in the art. Accordingly, it is intended to embrace all such alternatives, modifications and variations that fall within the spirit and broad scope of the appended claims.

Claims

WHAT IS CLAIMED IS:

1. A customizable self updating network content retrieval system comprising:

(a) a computing platform for executing a customizable updateable content retrieval software said software being for:

(i) creating a customized user interface being displayable on a display device; (ii) defining at least one item of periodically updating content for display by said display device in a context of at least a portion of said user interface; (iii) defining at least one network site or content resource from which said at least one periodically updating content being retrievable; and (iv) defining at least one format for displaying said at least one periodically updating content by said display device in said context of at least said portion of said user interface; and

(b) a communication channel for providing data communication between said computing platform and a network storing said at least one periodically updating content.

2. The system of claim 1 , wherein said customizable updateable content retrieval software is further for:

(v) defining a frequency with which said at least one periodically updating content is to be retrieved.

3. The system of claim 2, wherein said frequency is a fixed periodicity.

4. The system of claim 2, wherein said frequency is selected from the group consisting of an immediate command and a rule base command.

5. The system of claim 1, wherein said at least one format is selected from the group consisting of a picture, text, audio information, an animated picture, a video image and video animation.

6. The system of claim 1, wherein said user interface is selected from the group consisting of a local file, a file retrievable from a local server by user clients of a local area network, and a Web page.

7. The system of claim 1, wherein said user interface appears to an operator of said computing platform in a form selected from the group consisting of a window opened by an operating system of said computing platform, a window opened by a software installed for display of said customizable updateable content, and a Web page displayed by a Web browser.

8. The system of claim 1 , wherein said data display device is selected from the group consisting of a personal computer, an external monitor of a personal computer, a workstation, a terminal functioning as part of a local area network, a Web TV, a personal digital assistant, a cellular telephone having programmable capabilities, and any other display device.

9. The system of claim 1, wherein said at least one item of periodically updating content is selected from the group consisting of a picture, text, audio information, an animated picture, a video image, and video animation.

10. The system of claim 1, wherein said at least one network site describes an item selected from the group consisting of a local file, a file available to at least one user client of a local area network, an item selected from an information portal on a local area network, and a URL address defining a Web site.

1 1. The system of claim 1 , wherein said at least one format includes details of at least one feature selected from the group consisting of a font, a font size, a font color, a text style, a window size, a dimension of a window, an arrangement of frames, a position for placement of an item within said user interface, a size of an item, a background color, a border and a characteristic of a border.

12. The system of claim 1, wherein said communication channel is selected from the group consisting of a telephone connection, a cellular telephone connection, an Internet connection, an infrared frequency transmission connection, a local area network connection, a satellite connection, a TV cable connection, a cable modem connection, and a radio frequency connection an Extranet connection.

13. The system of claim 1, wherein said network is any collection of at least two computing machines linked by at least one communication channel wherein each of said at least two computing machines has at least one role selected from the group consisting of acting as a user client and acting as a server.

14. The system of claim 1, wherein said network is selected from the group consisting of a local area network, the Internet, Extranet and a local area network in communication with the Internet and/or Intranet.

15. The system of claim 1, wherein defining said at least one network site is accomplished by a method selected from the group consisting of execution of macro commands by an operator of said computing platform, automatic recording of a sequence of network sites accessed by an operator of said computing platform, manual entry of identification data of at least one network site by an operator of said computing platform and submission of a request to a search engine by an operator of said computing platform.

16. The system of claim 15, wherein defining said at least one network site further includes defining specific items of content from within each of said at least one network site.

17. The system of claim 1 , wherein said computing platform is further for:

(vi) defining whether said at least one item of periodically updated content selected for display will be available to at least one other user.

18. The system of claim 1 , wherein said computing platform is further for:

(vii) displaying a list of users for at least one of said at least one item of periodically updating content.

19. The system of claim 1 , wherein said computing platform further functions as a server for a network, said server making available to said network at least said customized user interface.

20. The system of claim 1 , wherein said computing platform is protected by a security system which restricts access.

21. The system of claim 20, wherein said security system restricts access based upon at least one parameter selected from the group consisting of a user name, a password, a telephone number, a location, an IP address from which a request originates and temporal data.

22. The system of claim 21 , wherein said telephone number is selected from the group consisting of a cellular telephone number and a conventional telephone number.

23. The system of claim 21, wherein said location is determined in a manner selected from the group consisting of automatically and via designation by a user of the system.

24. The system of claim 21, wherein said temporal data includes at least one item selected from the group consisting of a relative time, an absolute time, a relative date and an absolute date.

25. The system of claim 21 , wherein said at least one parameter is analyzed according to a rule-based method.

26. A method for creating a customizable self updating network content retrieval resource, the method comprising the steps of:

(a) creating a customized user interface being displayable on a display device;

(b) defining at least one item of periodically updating content for display by said display device in context of at least a portion of said user interface;

(c) defining at least one network site from which said at least one periodically updating content being retrievable; and

(d) defining at least one format for displaying said at least one periodically updating content by said display device in context of at least said portion of said user interface.

27. The method of claim 26, wherein said customizable updateable content retrieval resource further includes the step of: (e) defining a frequency with which said at least one periodically updating content is to be retrieved.

28. The method of claim 27, wherein said frequency is a fixed periodicity.

29. The method of claim 27, wherein said frequency is selected from the group consisting of an immediate command and a rule base command.

30. The method of claim 26, wherein said step of defining said at least one format includes selecting a format selected from the group consisting of a picture, text, audio information, an animated picture, a video image and video animation.

31. The method of claim 26, wherein said step of creating said user interface creates an interface selected from the group consisting of a local file, a file retrievable from a local server by user clients of a local area network, and a Web page.

32. The method of claim 26, wherein said user interface appears to an operator of said computing platform in a form selected from the group consisting of a window opened by an operating system of said computing platform, a window opened by a software installed for display of said customizable updateable content, and a Web page displayed by a Web browser.

33. The method of claim 26, wherein said data display device is selected from the group consisting of a personal computer, an external monitor of a personal computer, a workstation, a terminal functioning as part of a local area network, a Web TV, a personal digital assistant, and a cellular telephone having PC capabilities.

34. The method of claim 26, wherein said step of defining said at least one item of periodically updating content defines a content item selected from the group consisting of a picture, text, audio information, an animated picture, a video image, and video animation.

35. The method of claim 26, wherein said step of defining said at least one network site defines an item selected from the group consisting of a local file, a file available to at least one user client of a local area network, an item selected from an information portal on a local area network, and a URL address defining a Web site.

36. The method of claim 26, wherein said step of defining said at least one format includes defining details of at least one feature selected from the group consisting of a font, a font size, a font color, a text style, a window size, a dimension of a window, an arrangement of frames, a position for placement of an item within said user interface, a size of an item, a background color, a border and a characteristic of a border.

37. The method of claim 26, wherein said step of defining said at least one network site defines a location on a network selected from the group consisting of a local area network and the Internet.

38. The method of claim 26, wherein said step of defining said at least one network site is accomplished by a method selected from the group consisting of execution of macro commands by an operator of said computing platform, automatic recording of a sequence of network sites accessed by an operator of said computing platform, manual entry of identification data of at least one network site by an operator of said computing platform and submission of a request to a search engine by an operator of said computing platform.

39. The method of claim 38, wherein said step of defining said at least one network site further includes defining specific items of content from within each of said at least one network site.

40. The method of claim 26, further comprising the step of:

(e) defining whether said at least one item of periodically updated content selected for display will be available to at least one other user.

41. The method of claim 26, further comprising the step of:

(f) displaying a list of users for at least one of said at least one item of periodically updating content.

42. The method of claim 26, wherein said computing platform further makes available to at least one computing machine belonging to a network at least said customized user interface, thereby functioning as a server of said network.

43. The method of claim 26, wherein said step of creating includes the sub-step of restricting access to said customized user interface by means of a security system.

44. The method of claim 43, wherein said security system restricts access based upon at least one parameter selected from the group consisting of a user name, a password, a telephone number, a location, an IP address from which a request originates and temporal data.

45. The method of claim 44, wherein said telephone number is selected from the group consisting of a cellular telephone number and a conventional telephone number.

46. The method of claim 44, wherein said location is determined in a manner selected from the group consisting of automatically and via designation by a user of the system.

47. The method of claim 44, wherein said temporal data includes at least one item selected from the group consisting of a relative time, an absolute time, a relative date and an absolute date.

48. The method of claim 44, wherein said at least one parameter is analyzed according to a rule-based system.

49. A security system for restricting access, the system comprising a receiving device, said receiving device designed and configured for :

(a) receiving a request for access from a user;

(b) verifying identity of said user; and

(c) further verifying a location from which said request originates.

50. The security system of claim 49, wherein said receiving device is further designed and configured for analyzing said request with respect to temporal data.

51. The system of claim 49, wherein said identity of said user is verified by at least one parameter selected from the group consisting of a user name and a password.

52. The system of claim 49, wherein said location from which said request originates is verified by at least one parameter selected from the group consisting of a telephone number, a location determination mechanism, and an IP address from which said request originates.

53. The system of claim 52, wherein said telephone number is selected from the group consisting of a cellular telephone number and a conventional telephone number.

54. The system of claim 52, wherein said location determination mechanism operates in a manner selected from the group consisting of automatically and via prompting said user to enter a location.

55. The system of claim 54, wherein said location is determination mechanism includes an established location determination mechanism.

56. The system of claim 55, wherein said established location determination mechanism is selected from the group consisting of GPS, GSM and triangulation based upon signals received within a cellular communication network.

57. The system of claim 50, wherein said temporal data includes at least one item selected from the group consisting of a relative time, an absolute time, a relative date and an absolute date.

58. The system of claim 52, wherein said at least one parameter is analyzed according to a rule-based system.

59. The system of claim 49, wherein restricting access refers to access to an item selected from the group consisting of a physical premises, a computer resource, an account and a previously purchased item.

60. The system of claim 59, wherein said computer resource is a network, a specific server within a network, a file, an Internet site, a web page and a customized user interface.

61. A method for restricting access to an item, the method comprising the steps of:

(a) receiving a request for access from a user;

(b) verifying identity of said user; and

(b) further verifying a location from which said request originates.

62. The method of claim 61, comprising the additional step of analyzing said request with respect to temporal data.

63. The method of claim 61, wherein said step of verifying identity of said user is conducted by analysis of at least one parameter selected from the group consisting of a user name and a password.

64. The method of claim 61 , wherein said step of further verifying said location from which said request originates is conducted by analysis of at least one parameter selected from the group consisting of a telephone number, a location, and an IP address from which said request originates.

65. The method of claim 64, wherein said telephone number is selected from the group consisting of a cellular telephone number and a conventional telephone number.

66. The method of claim 61 , wherein said step of further verifying said location is conducted in a manner selected from the group consisting of automatically and via designation by said user.

67. The method of claim 66, wherein said location is determined automatically via an established location determination mechanism.

68. The method of claim 67, wherein said established location determining mechanism is selected from the group consisting of GPS, GSM and triangulation based upon signals received within a cellular communication network.

69. The method of claim 62, wherein said temporal data includes at least one item selected from the group consisting of a relative time, an absolute time, a relative date and an absolute date.

70. The method of claim 64, wherein said at least one parameter is analyzed according to a rule-based method.

71. The method of claim 61, wherein restricting access refers to access to an item selected from the group consisting of a physical premises, a computer resource, an account and a previously purchased item.

72. The method of claim 71 , wherein said computer resource is selected from the group consisting of a network, a specific server within a network, a file, an Internet site, a web page and a customized user interface.