Abstract:
Exchange information through the World Wide Web is a way of life in modern society. The innovated dynamic workspace technology of this invention that implemented through operations of posting and un-posting, for various resources of message, files, and folder, networks and storages distributed among devices, has greatly improved the efficiently and flexibly for users in personal or group model of different environment to exchange information across a global network.

Description:
CROSS-REFERENCE TO RELATED APPLICATIONS 
       [0001]    This application is a continuation of U.S. patent application Ser. No. 14/019,406 filed on Sep. 5, 2013 which itself is a continuation of U.S. patent application Ser. No. 12/511,039, filed on Jul. 28, 2009 and now a U.S. Pat. No. 8,577,839, which in turn is a continuation-in-part of (a) U.S. patent application Ser. No. 11/732,496 filed on Apr. 2, 2007, and claimed the benefit of U.S. Provisional Application No. 60/787,653 filed on Mar. 31, 2006, and a continuation-in-part of U.S. patent application Ser. No. 10/713,904 filed on Aug. 6, 2002 and now a U.S. Pat. No. 7,418,702, and a continuation-in-part of U.S. patent application Ser. No. 10/713,905 filed on Aug. 12, 2002 and now a U.S. Pat. No. 7,379,990, and (b) U.S. patent application Ser. No. 11/374,302 filed on Jul. 2, 2004 and, now a U.S. Pat. No. 7,945,652, which in turn is a continuation-in-part of U.S. patent application Ser. No. 10/713,904 filed on Aug. 6, 2002, and now a U.S. Pat. No. 7,418,702, and is a continuation-in-part of U.S. patent application Ser. No. 10/713,905 filed on Aug. 12, 2002, and now a U.S. Pat. No. 7,379,990. The entire disclosures of which are all hereby incorporated by reference in their entireties for all purposes. 
     
    
     FIELD OF THE INVENTION 
       [0002]    Present invention generally relates to communication network. More specifically, present invention relates to a web based communication system. 
       BACKGROUND OF THE INVENTION 
       [0003]    With the increasing popularity of using the Internet and World Wide Web (“the Web”) for the rapidly changing digital world, individuals as well as enterprises, exchange (or swap) large volumes of information through the Web. The demand for larger and faster information exchange has increasingly grown in recent years. For example, various business meetings and conferences are conducted over the Web with attendees scattered around the world. To enhance the communication between the meeting attendees, not only voice (and/or image) information is important, but also information exchange can be critical. 
         [0004]    Fast, volume, and secure information exchange is important in enhancing the efficiency of a communication network. At Internet era, the web portals become a means for personal, group, or organizational communication. Therefore, an efficiency and cost effective method of creating and updating the web portals becomes critical to each business and individual. 
         [0005]    Accordingly, there is a need in the art to provide faster, more secure, and volume information exchange over the Web. 
       SUMMARY OF THE INVENTION 
       [0006]    The present invention relates to a method and apparatus for information exchange over a web environment. 
         [0007]    With the development of a centrally controlled distributed scalable virtual machine (CCDSVM) and the web-based computer user working (operating) environment (WCUWE), the problems mentioned in the previous section can easily be solved by introducing a “dynamic workspace” technology of this invention within the frameworks of the CCDSVM and the WCUWE. 
         [0008]    With the dynamic workspace technology, one or more login users of a CCDSVM, each using a browser on any system from anywhere, can instantly perform tasks. For example, each of the users can post or un-post messages, files, folders, or other resources information on the systems of the CCDSVM, with group based-model or non-group 1-to-1 model to one or more audiences (other users) on the network. This technology will also achieve larger scales of secure information exchange without size limitations and installation of special software. Specially, this technology can dramatically improve the efficiency and cost effectiveness for updating the contents of any existing web portals. 
         [0009]    The implementation of this invention has provided users with a web browser based system that is capable of secure exchanging messages, files, folders, or other resources information including storage and network resources on systems crossing network domains without size limitation. 
         [0010]    Additional features and benefits of present invention will become apparent from the detailed description, figures, and claims set forth below. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0011]    Present invention will be understood more fully from the detailed description given below and from the accompanying drawings of various embodiments of the invention, which, however, should not be taken to limit the invention to the specific embodiments, but are for explanation and understanding only. 
           [0012]      FIG. 1  is a block diagram illustrating a layout of a CCDSVM with a central control management system and multiple provisioned systems, client systems and console systems in accordance with one embodiment of present invention. 
           [0013]      FIG. 2A  is a block diagram illustrating a layout of a CCDSVM with which each of users from a web browser on a provisioned system can communicate with each other in accordance with another embodiment of present invention. 
           [0014]      FIG. 2B  is a block diagram illustrating a layout of a CCSDVM with only a single control management system to be accessed by massive client systems in accordance with another embodiment of present invention. 
           [0015]      FIG. 3  is a block diagram illustrating an example of software structure for a CCDSVM in accordance with one embodiment of present invention. 
           [0016]      FIG. 4A  illustrates an example of a dynamic workspace in accordance with one embodiment of present invention. 
           [0017]      FIG. 4B  illustrates an example of possible resources which may be assigned to a user group&#39;s common workspace in accordance with one embodiment of present invention. 
           [0018]      FIG. 4C  illustrates an example of a user&#39;s private workspace and possible assigned system resources in accordance with one embodiment of present invention. The mentioned managing of resources can be realized via operation menu associated with displayed resource information. For example, a file folder can be associated with an operation menu containing an operating option of creating a file, which is encoded into a web page and to be displayed in a user&#39;s web browser on his/her native system. Upon the user to select and submit a task of creating a file, an editor can be invoked and displayed in the user&#39;s web browser or in a separate displayed area, so that user can input content for the new file and further save it via a save new file operating option to cause transmitting the created file back to the user&#39;s default home file folder/directory. 
           [0019]      FIG. 5  illustrates an example of resource objects on computing systems of a CCDSVM in accordance with one embodiment of present invention. The resource information can be network resources such as the identification information of one or more provisioned systems, which are controlled and grouped by a control system if said control system is not a standalone system, where said identification information of each of the provisioned systems includes system name, IP address, and ID such as system service&#39;s group ID. 
           [0020]    The resource information also can be the information of the hardware resources on the provisioned systems and the control system, such as one or more network devices, including Ethernet or wireless cards, such as storage devices including SCSI or RAID disk, memories, such as CPUs, and one or more user interface (input/output) devices including keyboard, mouse, monitor and displaying devices, and audio and video recording or playback devices and components including digital camera or video and audio encoding cards so forth, and there is no limits. 
           [0021]    The resources also could be data resources on said systems such as one or more file systems built on one or more storage devices, one or more folders and various type of data files or application files on each file systems; or one or more record files such as user account or user group profiles, or one or more message data. Said data file can be a document file such as Word, or PDF, or Spreadsheet, or PowerPoint, or plain text file, or media data of streaming video or audio file including AVI, MPEG, MP3 or JPEG image file, and said application file is a binary file, such as web application. 
           [0022]    The resources can be kept into one or more information lists and to be stored in a database on storage media of the control system. The database is organized as one or more lists of tables, where each of the lists contains certain type of resources or a mixed type of resources. The storage media could be a system&#39;s internal storage such as memory or a disk drive, for example. 
           [0023]    The resource information of this invention can be encoded, displayed and operated as web folder tree in a web browser by using multi-layered item list (MLIL) in the memory of the control system, where each node of said MLIL binds with corresponding operation menu, attributes of said resource and graphic image, where said attributes of said resource are the resource&#39;s name, ID, size, location or address, time stamp, ownership of the resource, and so forth without limits. Each node of the MLIL can have its next layer of one or more sub-nodes representing another layer of one or more actual resources. 
           [0024]    The resource MLIL can be encoded into a web page and be displayed in user&#39;s a web browser such that said user can interactively select each permitted resource node of the MLIL to perform desired tasks through said operation menu. The list of resources displayed as web folder tree has been demonstrated in embodiments of present invention such as depicted in  FIGS. 7A, 7B, 8A, 8B, and 8C . The folder tree can be organized and displayed with one or more resource nodes, which are organized into one or more layers, and each layer is vertically aligned, right indented and displayed below the layer above it, where each node at each layer represents a corresponding resource and can have its next layer of one or more nodes for representing a corresponding resource&#39;s next layer of one or more resources if there are any. 
           [0025]      FIG. 6A  illustrates an example of displaying a web page with 4 sections in a web-browser of a user X in a user group-1 during an interactive online meeting in accordance with one embodiment of the present invention. Each section of the web page can be updated and refreshed automatically and be updated/refreshed independent of other sections by a runtime control script such as a Java script or others, which can be preloaded into the web browser via an encoded web page. Of course, the entire web page also can be updated and refreshed manually by user or by a different control script. 
           [0026]      FIG. 6B  illustrates an example of displaying a web page with 4 sections in a web-browser of a user Y in the user group-1 during the interactive online meeting in accordance with another embodiment of the present invention. As a matter of fact, it has illustrates that each web page can be divided into multiple screen sections and each section can be encoded with resources information actually from one or more users&#39; private workspaces. 
           [0027]    In one embodiment as illustrated in this figure, a section-3 is encoded with multiple files from a group&#39;s common workspace, and actually posted from three private workspaces by three corresponding users in the group. Also, only the actual owner of each file can from own displayed private workspace to withdraw his/her previously posted file. For example, the “picture 1” was posted by the user Y from his displayed private workspace, therefore, only user Y from his displayed private workspace can be permitted to un-post this previously posted picture 1. Similarly, the user group-1 section-3 being encoded and displayed with multiple messages from the group&#39;s common workspace, which are actually posted by multiple users from each of own displayed private workspaces. Besides, each message can be un-posted by the actual owner of the message from the owner&#39;s displayed private workspace. 
           [0028]      FIG. 6C  illustrates an example of displaying a web page with 4 sections in the web-browser of the user X in the user group-1 before the interactive online meeting in accordance with another embodiment of the present invention. 
           [0029]      FIG. 6D  illustrates an example of displaying a web page with 4 sections in the web-browser of the user Y in the user group-1 before the interactive online meeting in accordance with another embodiment of the present invention. 
           [0030]      FIG. 6E  illustrates an example of a displayed public web page that each massive online user can access and view from each of their browser without login to the CCDSVM during said user X and user Y in the user group-1 online meeting in accordance with another embodiment of present invention. 
           [0031]      FIG. 7A  illustrates one-to-one (peer-to-peer) post or un-post messages, files and folders by a user X in accordance with one embodiment of the present invention. As a matter of fact, this also has illustrated that a section of a web page can be encoded with information from multiple private workspaces because the displayed user X&#39;s private workspace also includes information posted by the user Y from the user Y&#39;s displayed private workspace such as “Sales folder”, which only user Y can withdraw it via his displayed private workspace. 
           [0032]      FIG. 7B  illustrates one-to-one (peer-to-peer) posting or un-posting messages and/or information of files and folders by a user Y in accordance with another embodiment of the present invention. 
           [0033]      FIG. 8A  is an example of a web-based graphic presentation of assigned resources in a user X&#39;s private workspace in accordance with one embodiment of present invention. 
           [0034]      FIG. 8B  is an example of a web based graphic presentation of assigned resources in a private workspace of a user Y in accordance with another embodiment of present invention. 
           [0035]      FIG. 8C  is an example of a web based graphic presentation of the user Y&#39;s private workspace after the user X dynamically posted and shared a “folder 2” through the displayed user X&#39;s private space in accordance with another embodiment of present invention. 
           [0036]    The  FIGS. 7A, 7B, 8A, 8B, and 8C  also have illustrated how the web folder tree can be used to organize resources in workspaces for efficiently operating and managing resources during communication and sharing activities. The web folder tree can be operated in a similar way as the native window based folder tree; A user can select a node to expand and display its sub-nodes if there are any, and the user can also select a previously expanded node to collapse and hide all of its sub-nodes from the displaying. Therefore, said user can continuously browser and expand said sub-node of a folder tree as long as there are next levels of resource nodes until finding a targeted resource node. Since each node is bound with an operation menu associated with one or more options for different tasks, the entire resources displayed through the folder tree can be conveniently accessed and operated. 
           [0037]      FIG. 9A  is an example of a pop-up menu for folder in accordance with one embodiment of present invention. 
           [0038]      FIG. 9B  is an example of a pop-up menu for file in accordance with another embodiment of present invention. 
           [0039]      FIG. 10A  is an example of a non pop-up operation menu for folder in accordance with one embodiment of present invention. 
           [0040]      FIG. 10B  is an example of a non pop-up operation menu for file in accordance with another embodiment of present invention. 
           [0041]      FIG. 11  is an example of a displayed list of posted files or folders from a file &amp; folder area of a private workspace of a user X, through which the user X can smoothly manage the massive shared information for participating in one or more 1-to-1 communications with different communication partners, or for participating group communication in accordance with one embodiment of present invention. 
           [0042]      FIG. 12  has illustrated a computer system and its components. 
       
    
    
     DETAILED DESCRIPTION 
       [0043]    Embodiments of present invention are described herein in the context of a method, system and apparatus for providing a web based communications network with fast, volume, and secure information exchange. Those of ordinary skill in the art will realize that the following detailed description of present invention is illustrative only and is not intended to be in any way of limiting. Other embodiments of present invention will readily suggest themselves to such skilled persons having the benefit of this disclosure. Reference will now be made in detail to implementations of present invention as illustrated in the accompanying drawings. The same reference indicators will be used throughout the drawings and the detailed description below to refer to the same or like parts. 
         [0044]    In the interest of clarity, not all of the routine features of the implementations described herein are shown and described. It will, of course, be appreciated that in the development of any such actual implementation, numerous implementation-specific decisions must be made in order to achieve the developer&#39;s specific goals, such as compliance with application and business-related constraints, and that these specific goals will vary from one implementation to another and from one developer to another. Moreover, it will be appreciated that such a development effort might be complex and time-consuming, but would nevertheless be a routine undertaking of engineering for those of ordinary skill in the art having the benefit of this disclosure. 
         [0045]    In accordance with present invention, the components, process steps, and/or data structures described herein may be implemented using various combined types of operating systems, computing platforms, computer programs including various software modules, and/or general purpose machines. In addition, those of ordinary skill in the art will recognize that devices of a less general purpose nature, such as hardwired devices, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), or the like, may also be used without departing from the scope and spirit of the inventive concepts disclosed herein. Where a method comprising a series of process steps is implemented by a computer or a machine and those process steps can be stored as a series of instructions readable by the machine, they may be stored on a tangible medium such as a computer memory device (e.g., ROM (Read Only Memory), PROM (Programmable Read Only Memory), EEPROM (Electrically Eraseable Programmable Read Only Memory), FLASH Memory, Jump Drive, and the like), magnetic storage medium (e.g., tape, magnetic disk drive, and the like), optical storage medium (e.g., CD-ROM, DVD-ROM, paper card and paper tape, and the like) and other known types of program memory. 
         [0046]    Those of ordinary skill in the art will realize that the following detailed description of present invention is illustrative only and is not intended to be in any way of limiting. Other embodiments of present invention will readily suggest themselves to such skilled persons having the benefit of this disclosure. It will be apparent to one skilled in the art that these specific details may not be required to practice to present invention. In other instances, well-known circuits and devices are shown in block diagram form to avoid obscuring present invention. In the following description of the embodiments, substantially the same parts are denoted by the same reference numerals. 
         [0047]    While particular embodiments of present invention have been shown and described, it will now be apparent to those skilled in the art having the benefit of this disclosure that many more modifications than mentioned above are possible without departing from the inventive concepts disclosed herein. Therefore, the appended claims are intended to encompass within their scope, all such modifications are within the spirit and scope of this invention. 
         [0048]    The present invention can be implemented by a web based system operated in a network infrastructure, such as a central controlled distributed scalable virtual machine (“CCDSVM”).  FIG. 1  illustrates a CCDSVM in accordance with an embodiment of present invention. The CCDSVM includes one or more groups of provisioned system  3  that are automatically formed one or more service groups (pools), and includes a control management system  2 , console systems  1 , and client systems  10 . The control management system (“control system”)  2  is configured to control one or more groups of systems (“provisioned systems”)  3 . Console systems (“console system”)  1  provide management while client systems  10  (“client systems”) initiate accessing the provisioned systems  3  and control system  2  via a web-browser over a network infrastructure, such as Intranet, the Internet, and/or LAN. 
         [0049]    The network infrastructure (“network”) includes all necessary hardware and software resources that facilitate various users from different geographic locations to communicate through the Internet, Intranet, and/or LAN. The hardware of the network includes network connection media, wireless media, circuitry components, and communication equipments. The network connection media includes various cables such as Ethernet and/or optical fiber. The wireless media is capable of establishing wireless communication links through air. The circuitry components include processor, data bus, memory devices, and/or circuit board. The communication equipments, such as switches, routers, gateways, and/or adapters, are used to provide a communications network. It should be noted that there are other possible elements of communication equipment that may be needed to form a communication link, but they are not necessary to understand the present invention. 
         [0050]    The network of the CCDSVM provides scalable bandwidth and computational powers for the CCDSVM. In one embodiment, one or more switches and routers can be added and removed for the network of the CCDSVM for dynamically connecting and adding or removing one or more provisioned system units for the service pools/groups of the CCDSVM in response to the service and bandwidth and capacity requirements for providing services to meet the demand from more users on the client systems. 
         [0051]    The software infrastructure includes Internet Protocol (“IP”) addresses and system name identification software such as Domain Name Server (“DNS”), firewall software, IP gateway set-up software, IP broadcast, and so forth without limit. The communication protocols over the network could be IP-based standard or non-standard proprietary protocols such as Hypertext Transfer Protocol (“HTTP/HTTPS”) over Transmission Control Protocol/Internet Protocol (“TCP/IP”) or Simple Object Access Protocol (“SOAP”) over TCP/IP. It should be further noted that some IP based protocols are proprietary protocols and some are non-IP based protocols. 
         [0052]    A web-browser is an application program that allows a user access to information over the Web, such as Windows Internet Explorer (“IE”), Firefox, or Netscape, and/or Mozillar. A web browser could also be any proprietary software, which uses web-protocols such as HTTP, WAP, or SOAP for communication with a web server over the network. The web browser can be implemented with any or a combination of suitable programming languages such as C, C++, Java, or XML. In another embodiment, the web browser can be replaced with another networked user interface tool/application, which can be implemented using non web based specialized protocols. 
         [0053]    A web page, on the other hand, is displayable for resource information that is accessible through a web-browser  9 . In present invention, the web pages are used for displaying the user interface part of the WCUWE for users from each of own web browser  9  performing interactive tasks. The web pages may be hosted by a web server via a web server system and can be transmitted (or retrieved) by said web-browser. The web-page can be implemented with any or a combination of suitable programming languages such as C, C++, Java, or HTML, XML, WML—and so forth without limitation. 
         [0054]    The provisioned systems  3 , client systems  10 , console systems  1 , and control management system  2  are computing systems, which could be a server system, such as database server, web server, email server, video server, file server, storage server including NAS or SAN, or a security monitoring device, video and audio recording and playback devices, or a desktop or laptop system, handheld wireless devices such as PDA, wireless phone, and so forth without limit. The computing systems include hardware resources of electronic components or devices such as CPUs, storage devices, input/output and display components and memory controllers. The storage devices include internal memory such as read-only memory (“ROM”) and/or random access memory (“RAM”). The storage devices may further include external storage devices such as magnetic disks or tapes, which include a redundant array of inexpensive disk drives (“RAID”), just bunch of disk drive (“JBOD”) and memory sticks. The associated storage controller can be Integrated Drive Electronics (“IDE”), Small Computer System Interface (“SCSI”), a Fiber optical controller, or a combination of above-mentioned devices without limitation. 
         [0055]    The computational systems also include non-embedded or real-time embedded OS running, which could be Linux, or Windows, Unix, or a proprietary OS. It should be noted that present invention may include multiple control systems at different layers in a system configuration topology, where each of the control systems is capable of communicating with each other through a network. The control systems at the middle layers play dual roles as both a control system and as a provisioned system in the system configuration topology. 
         [0056]      FIG. 1  illustrates a CCDSVM platform with multiple clients in accordance with one embodiment of present invention. The CCDSVM includes console systems  1 , a control management system  2 , provisioned systems  3 , and networks  11 - 12 , wherein networks  11 - 12  are used for interconnecting all systems of the CCDSVM and the client systems  10 . 
         [0057]    A console system  1  is a computational system having a web browser or web-console  9  where, the web-browser  9  is used by privileged users for accessing the CCDSVM platform. The web browser  9 , which could be on any computing system, permits a user to access information from the CCDSVM by following a web URL link in one embodiment. For example, a privileged user enters a URL of “https://69.107.28.123/stt/sttwebos” on a command line of the web browser  9  and once the link is established, the user can obtain information hosted by the web based computer user work/operation environment (“WCUWE”). The console system  1 , in one embodiment, further includes software modules  13 , wherein modules  13  may be used to facilitate communication between the console system  1  and the control management system  2 . 
         [0058]    To support a non-web based networked user interface, the console system  1  can have a specialized software module  13  using protocols other than mentioned web protocols. In another embodiment, if the control system  2  supports a non-web based network computer user work environment (“NCUWE”), a user from an application program on the user&#39;s native system, which can be provided by the other software module  13  of the console system  1 , can send a similar request to the control system  2  to indicate accessing a desired networked program of the NCUWE on the control system  2 . 
         [0059]    The control system  2 , in one embodiment, is a server system, a desktop or a laptop system or even a wireless devices with respective memory and storage capabilities. The control system  2  includes a web server software  7  and console supporting software  6 . The console supporting software  6  includes web server interface software modules  5  and control management software modules  4 . The control management system  2  may also have a web-browser  9  used as a web-console  9  of the control system  2 . The web server software  7  sends/receives data to/from the web-console  9  of the console system  1  or the client system  10  or the control system  2 . The web server software  7  is configured to provide secure sockets layer (“SSL”) encryption to encrypt the data before its transmission to enhance the security. The web server software  7  could be commercially available software such as Apache™ from open source, or IIS from Microsoft or a proprietary software. The web server software modules  7  and the console support software modules  6  can be implemented by any suitable or a combination of any suitable programming languages such as C, C++, Java, JavaScript, HTML, or XML. 
         [0060]    The console supporting software  6  communicates with service software modules  8  of each of the provisioned systems  3 . The web server interface  5  of the console support software  6  is capable of providing special functions that are otherwise performed by web server  7 . If no provisioned system  3  is coupled to the CCDSVM platform, the control management system  2 , in one embodiment, is reconfigured to continue monitoring systems over the network while the CCDSVM platform is also reconfigured as a single stand-alone system as shown in  FIG. 2B . Users can access and/or obtain objects or system resources information via a web-browser  9 , which can reside at any one of a client system  10  or a console system  1  or a control management system  2 . 
         [0061]    The provisioned system  3 , in one embodiment, is a computational system, where the system may contain suitable operating system (“OS”). The provisioned systems  3  can be automatically provisioned by the control system  2  through a variation of the automatic system service pool construction protocol, which is a proprietary combined sequence steps of TCP/UDP/IP protocols as described in prior parent application entitled “Method and Apparatus for Web-based Storage On Demand” to form one or more service pools (system groups) based on group ID. Provision process, also known as the pooling process, is a method allowing the control system  2  to control one or more networked systems  3  by reconfiguring the network systems  3 . For example, when a provisioned system  3  boots up via a communication protocol, the control system  2  detects and obtains provisioned system&#39;s name, IP address, and other system information where the system information includes network information, service group ID, storage information, file system information and so forth without limits, and further stores these information into a provisioned system unit information lists in a database on the control system  2 . 
         [0062]    Each provisioned system  3  can be monitored, accessed, and/or operated by a user(s) through said web browser  9  after the provisioning process. The control system  2  also updates the status of a provisioned system  3  in a service pool in response to detect the shutdown or link down of any provisioned system and in response to admin staff&#39;s maintenance requests for removing any provisioned system from the service pools. 
         [0063]    In an alternative embodiment, a provisional system  3  is operated by users through client systems  10  or console system  1  via a control system  2  with proper authentication. Each provisioned system  3  contains service software modules  8 , which is used to communicate with the control system  2 , the console system  1  and the client system  10 . For example, the service software modules  8  of a provisioned system  3  can communicate with the control management software  4  to carry out tasks for monitoring, accessing or managing resources of the provisioned system  3 . The service software  8  can communicate with the web browser  9  of the client system  10  or the console system  1  or the control t system  2  to transfer data between them or to deliver service to them, or to communicate with another provisioned system  3  for send or receive data. 
         [0064]    In one embodiment, the CCDSVM provides the service software modules  8  to include the functionalities of the console support software  6  and web server software  7  of the control system  2  to form the WCUWE of the provisioned system  3 . Therefore, when a user login to the control system for access to the CCDSVM, the user also can access the permitted WCUWE of the provisioned system  3  via a displayed entry point of the user&#39;s private workspace in the user&#39;s web browser. Further, each provisioned system  3  is able to provide data and application services for one or more client systems  10  independent of other provisioned system  3  and without going through the control system  2  again. 
         [0065]    In one embodiment, one or more spare provisioned systems  3  can be provided, where each spare system  3  is configured with identical service applications and data as one or more corresponding provisioned systems  3  configured, in each service pool, for providing fault handling. Once the control system  2  detecting a faulted provisioned system  3 , it can immediately instruct a corresponding spare provisioned system  3  to provide the service replacement for the faulted provisioned system  3  to provide continued service for one or more clients  10 . In addition, the using of spare system  3  has certain advantage, for example, one spare system  3  can serve one or more provisioned systems  3 . 
         [0066]    The service software modules  8  may include special software modules having compatible functionalities of the web server software  7  of the control system  2  and dedicate handing of HTTP/HTTPS protocol or other web protocols if there is need for web based communication with clients  10  or with other provisioned systems  3  or with the control system  2 . In another embodiment, the service software modules  8  can be implemented to communicate with non web browser based networked user interface by deploying specialized network protocols such as non-web based TCP/UDP/IP protocols. The service software modules  8  could include commercially available web server software  7  or any proprietary software. The service software modules  8  could be implemented with any or a combination of suitable programming languages such as C, C++, Java, or JavaScript. 
         [0067]    Net  11  and Net  12  are network infrastructures of the CCDSVM that are capable of providing communication links between the control management system  2 , console systems  1 , client systems  10 , and/or the provisioned systems  3 . The Net  11  and Net  12  comprises one or more switches, and/or routers for providing scalable network, where the switches and routers can be added or removed along with adding or removing one or more provisioned systems  3  in response to the services requirements. 
         [0068]    The client systems  10  may not be a part of the CCDSVM, but with permission and authorization, one or more users each from a web-browser  9  on a client system  10  can login to the CCDSVM for access to permitted resources of the CCDSVM, by following a web URL link of the CCDSVM. To support non-web based network user interface, the client system  10  can have a specialized software such as the software modules  13  of the console system  1  has. While privileged users can obtain, manage, access to, and/or operate system resources of the CCDSVM through the WCUWE, regular (non-privileged) users at client systems  10  may be permitted to access only limited system resources of the CCDSVM. The prior applications entitled “Concurrent Web Based Multi-Task Support for Control Management System,” and entitled “Display multi-layers list item in web browser with supporting of concurrent multi-users” have described how to setup the user security profile for one or more users interactively selecting and accessing permitted resources and performing various permitted tasks via one or more displayed permitted folder trees/MLIL. 
         [0069]    The CCDSVM configuration, in one embodiment, includes four data (flow) paths. The first data path is a communication link between the web browser  9  of a client host  10  (or a console host  1  or a control management system  2 ) and web handling software on the control system  2  such as web server  7  and console support software  6 . With this path of data flow, whenever a user sends a request from the web-browser  9  to the web server  7  and further to the console support software  6 , the console support software  6  collects required information from target systems and converts (encodes) them into standard structured information (web-format/web-page) for web communication by using any or a combination of suitable programming languages such as C, C++, Java, Javascript, HTML, XML, WML and so forth without limits. The targeted system could be one of the provisioned systems  3  or the control system  2 . 
         [0070]    The information collected by the console support software  6  of the control system  2  could be, in one embodiment, the system status, storage information, network information, user authentication profile, the file system information, files &amp; folders information on the control system  2 , or on any targeted provisioned system  3 . The console support software  6  then passes this converted structured information (web page) to the web server software  7  and further transmits to web-browser  9  through the communication link Net  11  and/or the Net  12  so that it can be displayed and viewed by a conventional web browser  9 , as shown in  FIG. 1 . 
         [0071]    The communication protocol used between the web-browser  9  of the client system  10  (or the console system  1  or the control system  2 ) and the web server  7  of the control system  2  could be HTTP, HTTPS (SSL encrypted HTTP protocol) or any suitable web protocols for web communication for successfully transmitting data on the web or could be other standard or proprietary IP-based or non-IP-based protocols. This data path may be simply referred as the console support software  6  transferring data to/from said web-browser  9 . 
         [0072]    In one embodiment, if the control system  2  is configured with multiple network interface equipments, the console support software  6  detects from which network interface a requested data stream, submitted from a web browser  9 , is coming from. Therefore, the console support software  6  will provide a response web page back to the web browser  9  via the same communication link that includes the identified network interface equipment. 
         [0073]    The second data path is the data flow through the communication link between the control system  2  and the provisioned systems  3 . Requests targeted to a provisioned system  3  are passed from the console support software  6  of the control system  2  to the service modules  8  of the provisioned systems  3  through the communication link network  12 . When a request are received by the provisioned system  3 , the service modules  8  of the provisioned system  3  will carry out the requested task, and if there is need, the service software  8  of the provisioned system  3  then sends a response back to the console support software  6  of the control system  2 , and further the control system  2  provides a response back to a user&#39;s requested browser. In another embodiment, the service software modules  8  of the provisioned system  3  provide a response back to the user directly without going through the control system  2  again. 
         [0074]    The implementation of the actual products of present invention for the second data path may use proprietary TCP/UDP/IP based protocols for the communication between the provisioned systems  3  and the control system  2 . However, other standards or proprietary IP-based or any suitable non-IP-based protocol are also possible. The communication protocols used between the console support software  6  of the control system  2  and the service modules  8  of the provisioned system  3  can be any suitable IP based or non-IP based protocols, whichever is suitable to transmit data between them. The typical data flow through this path could be the boot message, system status, network information, or storage information of provisioned system  3 , and so forth without limits as shown in  FIG. 1 . 
         [0075]    The third data path is the data flow between provisioned systems  3  and client systems  10  or console systems  1  via the communication link  11 - 12 . Referring back to  FIG. 1 , in one embodiment, the console support software  6  of the control system  2  may present a web link, which points to an object on a provisioned system  3 , to be displayed in a web-browser  9  of a client system  10  or console system  1  or control system  2 . The object pointed by the web link on the provisioned system  3  could be a text file, MPEG video, digital picture, PDF document, MS Power Point, or Word documentation and so forth without limit. It also could be a link to another web service program. From the web browser  9 , a user can directly access to the information on a provisioned system  3  pointed by the web link without going through the control system  2  again. In this case, the service modules  8  of the provisioned system  3  also include web server software modules, or equivalent software for directly support the web browser  9  as mentioned before. The communication protocols used with the third path could be web protocols such as HTTP or WAP. Alternatively, the communication protocols can be other standards or proprietary IP-based or non-IP-based protocols. To simplify the discussion, the data transmitted on this path will be mentioned as the service software module  8  that send data to or receive data from said web browser  9  or vice versa. 
         [0076]    The fourth data path is data flow through a communication link between a provisioned system  3  and another provisioned system  3 . With this path, the service modules  8  of one provisioned system  3  can directly transmit data or information to the service modules  8  of another provisioned system  3  via a communication link Net  12  without going through the control system  2 . The implementation of the actual products of present invention, for example, uses a proprietary IP-based protocol for communications between the two provisioned systems  3 . 
         [0077]    The principle of present invention, however, does not rely on or limited to proprietary protocol. It should be noted that other standard or proprietary IP-based or any suitable non-IP-based protocol may also be possible. The data and information transmitted through the fourth data path can be various types of data. For example, a user on a web-browser  9  may open a file folder on a provisioned system  3 . Further, the user can also instruct to select and transfer any file or file-folder from a provisioned system  3  to another provisioned system  3  by an interactive click mechanism. The data file or file-folder will then be transferred directly between the two provisioned systems  3  without going through the control system  2 . 
         [0078]      FIG. 2A  illustrates a variation of the CCDSVM platform for web browser based communication in accordance with one embodiment of present invention. The CCDSVM platform illustrated in  FIG. 2A  is similar to the platform illustrated in  FIG. 1  except every provisioned systems  3  includes a web-browser  9 . Also, the client system  10  can have same-software modules  13  as the console system  1  has. Thus, with proper authentication process, each user of provisioned systems  3  may access and manage own provisioned system  3  from a web-browser  9  either on own local provisioned system  3  or on any client system  10  anywhere on a network. It should be noted that when a user is registered with a provisioned system  3 , the user is authorized access the provisioned system  3  locally but not with the CCDSVM. On the other hand, when a user is registered with the CCDSVM, the user is not only can access its own local provisioned system  3  but also can be authorized access to multiple provisioned systems  3  and the control system  2  of the CCDSVM. 
         [0079]      FIG. 2B  illustrates another example of a variation of the CCDSVM, in which there is no provisioned systems  3  in the CCDSVM. The control system  2  can run on its own and the CCDSVM has degenerated into a single stand-alone system ( FIG. 2B ). Thus users, each through a web-browser  9  on any client system  3  (or on a console system  1 , or on stand-alone control system  2 ) is allowed to access and manage the standalone control system  2  via the WCUWE of the standalone control system  2 . 
         [0080]    Unless specifically specified, the console support software modules  6  of the control system  2 , the provisioned systems  3 , the service software modules  8  of the provisioned system  3 , and the web-browser  9  on the control system  2 , client system  10 , and console system  1  are referred as the CCDSVM platform illustrated in  FIG. 1 . 
         [0081]    A web-based computer user work/operation environment (“WCUWE”) of the CCDSVM is provided by a software infrastructure, shown in  FIG. 3 . The WCUWE provides each permitted user to log into the CCDSVM and further provides each logged in user a private web based operating environment, which is a private workspace including one or more assigned and permitted resources on the control system  2  and/or provisioned systems  3  on the network. 
         [0082]    In one embodiment, the user private workspace  16  can be initially assigned with and displayed in a web browser with limited resources such as displaying of an entry point of a user&#39;s top level home directory for managing one or more next levels of file-folders and their files, an entry point for update of user&#39;s password or managing one or more user&#39;s authentication, an entry point for access network, an entry point for monitoring and managing hardware devices including storage devices, an entry point for joining 1-to-1 personal communication, and an entry point for joining group collaboration including access on-the-fly streaming video provided from another user&#39;s digital camera or from an archived streaming video for the meeting, and so forth without limits. The user private workspace  16  can be encoded into a web page and displayed in a user&#39;s web browser, upon the user&#39;s log in to the control system  2  for access to the CCDSVM, via any suitable or a combination of suitable programming languages. 
         [0083]    In another embodiment, the owner (assigned user) can dynamically managing resources in the private workspace such as to create a new file under a folder by using editing or other proper application tools, delete one or more files or file-folders, copy or move files or file-folders from a source file-folder either on the control system  2  or on any provisioned system  3  in the CCDSVM into the user&#39;s permitted file-folders/directories of the CCDSVM, or upload files from the user&#39;s a native system&#39;s local disk drives into any permitted file-folder/directory, or transmit files or file-folders from the user&#39;s native system&#39;s local drives into the user&#39;s default home file-folder/directory structure via a specialized file and file-folder transfer mechanism. 
         [0084]    In one more embodiment, the user&#39;s private workspace in the CCDSVM displayed in a web browser  9  also can be connected to the user&#39;s local file-folder on storage drives on the user&#39;s native system via communication between the console support software modules  6  and the service software modules  8  on the user&#39;s native system as depicted in  FIG. 2 b   . Therefore, the file-folders in storage drives of the user&#39;s native system can be displayed and accessed via the user&#39;s displayed private workspace of the CCDSVM. 
         [0085]    The WCUWE further provides each user from a single web-browser  9  to interactively perform various permitted tasks and operations over various system resources ( FIG. 5 ) where the tasks can be performed concurrently from a single web-browser  9 . The tasks include user authentication management, such as allowing privileged users to create users, groups, assign users to each group, to assign initial resources to each user or group, and to save the information of created users and groups into a database stored on a storage media of the control system. 
         [0086]    The information of users or groups includes user names, user IDs, assigned security permissions, passwords, access points, group name, group ID, maximum members in a group, and so forth. The assigned security permissions include the user&#39;s role and credential information, which further includes from where the user can access the CCDSVM, and what service group/pool the user can access, what system and what specific resources on the system the user can access, and what task the user can perform. The user&#39;s security permission is encoded into a security data structure, where one or more fields of the security data structure containing one or more bits with a bit-status of on or off to represent the status of one or more specific credential or permission for the user. 
         [0087]    The privileged user can dynamically grant or revoke other user&#39;s security permissions and credentials via interrogating each user&#39;s security profile by inspecting, checking, and changing the status of each security permission field, or assign or deny each specific user to access the resources of the CCDSVM via set access control options from operation menu associated with the resources. 
         [0088]    In addition, the console support software  6  of the control system  2  keeps tracking records for each user&#39;s every login session including the time of login and the time of log out, at what time performed what task or access what data or applications. In one embodiment, the console support software modules  6  receives and parses each user&#39;s access request, and writes information of each user&#39;s request into an access record in a per user secure access file, which can be linked to each user&#39;s security profile for real-time fast interrogation. In one embodiment, the per user secure access record file can be backup by copying it to another file with a special name tag, and it can further be emptied on a periodic basis for keeping the up to date for the user&#39;s access records. 
         [0089]    The tasks also include personal or group communication, system and network management, access to and managing of data, service, and hardware resources, including access to networks and storage devices, file systems, folders, files, messages, user security, and so forth without limits. Many tasks have been described in said prior applications of “Concurrent Web Based Multi-Task Support for Control Management System,” and “Display multi-layers item list in web browser with supporting of concurrent multi-users”. 
         [0090]    After receiving each task information from the web browser  9 , the console support software  6  of the control system  2  parses and stores each task information into an available entry in an user space task list. After completing the execution of said task targeted system, the corresponding entry stored with said task on the user space task list is cleared up. In addition, the console support software  6  of the control system  2  is operable to immediately provide a response web page to each web browser  9  in response to each submitted task independent of the completion of the task execution. 
         [0091]    In one embodiment, said response updates the original web page in said web browser  9  by encoding with the status of the task including the task result if the task is successfully completed or include the task execution status if the task is failed or in progress or include a location that said task result will be deposited. Additionally, the WCUWE deploys a lock protecting mechanism for said user space task list and all resources related to each task&#39;s execution in the event that multiple tasks may concurrently access to and change the state of each mentioned resource. 
         [0092]    The WCUWE of the CCDSVM includes software modules of present invention. For example, the software includes the console support modules  6  of the control system  2 , which further includes the web interface/client interface modules  5  for receiving requests from end users&#39; web browser either on the control system  2  or a remote system and includes the distribution control management software modules  4  for control, monitor, and manage the provisioned system units  3 . The distributing control management modules  4  also controls user authentication, fault detecting and recovering, contents distributing, and tasks distributing and executing. 
         [0093]    The software also includes the service software modules  8  of the provisioned system  3 , and other service software  13  of the console system  1 , which can be used for send or receive data to/from the control system  2  and provisioned systems  3  using non web-based protocols without web browser&#39;s involvement. The current implementation of the WCUWE is based on a proprietary design of this invention. However, the nature and spirit of present invention do not limit to proprietary designed software. The WCUWE of the CCDSVM also includes other proprietary software modules or conventional software such as a web-server  7  of the control system  2 , web-browser  9  on the control system  2 , the client systems  10 , and the console systems  1 . 
         [0094]    The WCUWE of the CCDSVM can be implemented with any suitable or a combination of various suitable programming languages such C, C++, Java, JavaScripts, HTML, XML, and so on. To simplify the discussion, the WCUWE will be used to represent software modules in the CCDSVM described above. 
         [0095]    Users of the CCDSVM may be created by the CCDSVM through a given process or may be users on the Internet, Intranet, or LAN without registering with the CCDSVM. The WCUWE of the CCDSVM provides user to access various resources and performs various tasks through a preferred model of clicking on graphic or text represented resource objects displayed on a browser. 
         [0096]    The WCUWE is designed to be operated on a CCDSVM platform, and specially designed to provide dynamic workspace illustrated in  FIG. 4A  to each user associated with various CCDSVM as depictured in  FIG. 1 ,  FIG. 2A  and  FIG. 2B . The WCUWE further facilitates each user to performs tasks for instantly posting resource information to or un-posting/withdrawing the user&#39;s previously posted resource information from web page in a group model or in a 1-to-1 model for users of the CCDSVM in a same group or without group membership, or for said massive public online users over the network, where said public users from each of own web browser do not have accounts with the CCDSVM and can access the public resources provided by the CCDSVM via public web pages. 
         [0097]    The dynamic workspace of the WCUWE is a centrally controlled collection of each group&#39;s workspace and/or each user&#39;s private workspace. The console support software  6  of the control system  2  of the CCDSVM will assign each user a private workspace and each group a common workspace when each user or group account is created by a privileged user after the WCUWE of the CCDSVM enters into an operational mode. A first privileged user is created during installing said software of the CCDSVM. When a user or a group account is created, each user is assigned with specific user security credential, and permission and permitted resources based on each user&#39;s role. For example, some users are privileged users who can perform system administration tasks and others are general users who can be permitted to access certain types of applications and resources of the CCDSVM. 
         [0098]    A workspace is an organized information structure, which can be saved on storage media including memory or disk drives or both memory and disk drives by the console support software  6 . A workspace is created during a privileged user performing the tasks of creating user or group. The workspace will be initiated and assigned with limited resources of the CCDSVM such as shown in  FIG. 5 . Various resources on either provisioned systems  3  and/or the control system  2  of the CCDSVM include respective memory, system-groups, systems in a system-group, file systems, folders, files, storage media, network media and so on without limits. The common workspace  15 , shown in  FIG. 4A  and  FIG. 4B , of each group may be initially assigned with resources information illustrated in  FIG. 5  including users in this group, message area, file systems, file-folders, and files on a specific provisioned system  3  or on the control system  2 , and so on. The resources information in the common workspace may also be dynamically assigned or allocated by a permitted user after creating the group account. For example, during an online interactive meeting, a user posts file information to the common workspace  15 , so that a new entry of a file node is added to a file and folder tree area of the common workspace. 
         [0099]    In addition, each group may be assigned with one or multiple users, where each user can also be assigned with a private workspace  16  illustrated in  FIG. 4A  and  FIG. 4C  during the user account creation time. Also, one or more users can be dynamically removed from a specific group depending on needs. The private workspace  16  may also be initially assigned with resources information of the CCDSVM during user account creation time. Thereafter, the private workspace is also dynamically assigned with the resources of the CCDSVM after a user login to the CCDSVM. 
         [0100]    After creating user and group accounts, a privileged user can dynamically grant or revoke a permission for a general user to access one or more mentioned resources from his/her displayed private workspace  16 . In one embodiment, the privileged user can select a node containing a list of storage devices on a hardware resource folder tree of the CCDSVM, and further select a posting option from an operation menu and input a targeted user&#39;s information for binding the list of storage devices on a system of the CCDSVM to the user&#39;s account or select a withdrawing option to remove the list of storage devices from the user account profile. Therefore, during the operation, in one second, the targeted user may see said list in the user&#39;s web-browser, and in another second, the user will no longer see the list, which was in the user&#39;s displayed private workspace in the web browser. Also, if an authorized user can access a list of storage devices on a provisioned system, and further can take one of devices offline, so that the device list of the provisioned system will have one less devices to be displayed in the user&#39;s web browser. 
         [0101]    In another example, in one second, a privileged user grants a general user access a file J in a folder N on a system M of a CCDSVM by selecting the file J and selecting a set access control option from web operation menu to submit a task of set access control for said user, and in another second, the privileged user performs similar steps to reset the previous permission, thereby, the general user can view and access the file J in the folder N on the system M of the CCDSVM at one time, and a second later, the general user will not be able to view and access to it. The actual implementation of console support software  6  of control system  2  has achieved this capability. 
         [0102]    The total number of users and user groups that can be created is dependent on the capacity of the control system  2  such as how larger the memory and the storage capacity on the control system are. For example, if a user private workspace requires 1 Giga bytes in storage space and 2 Mega bytes in memory space, a system with 1 GB memory and 500 GB storage roughly can support 500 users. Similarly, the number of the concurrent users access to the CCDSVM over the network with a certain data rate is also bound by the network bandwidth that the CCDSVM infrastructure can provide. 
         [0103]    When a user account is deleted, the private workspace and the user′ membership with a group are automatically removed and updated. On the other hand, when a user group is deleted, the group common workspace is deleted, along with removing the group membership from each associated user&#39;s security profile without effecting the user&#39;s private workspace. In another embodiment, when a different type of user group is deleted, all accounts of the associated users and their private workspaces are deleted together with the deleting of the group account. 
         [0104]    In addition, one or more types of resources in the workspace can be organized as one or more list of tables and can be stored in storage media of the control system  2  as database. The integrity of the security of each group is protected by limiting different resources to different group. As such, each group is authorized to have a limited view over assigned system resources on provisioned systems  3  as well as on the control system  2 . The same security integrity at user level can be achieved by assigning different system resources on the provisioned systems  3  and/or on the control system  2  to different individual users based on exclusively assigned security permissions and credentials. Therefore, each user is authorized to access and view the assigned resources. 
         [0105]      FIG. 4B  has shown an example of assigned resources information of a group common workspace  15 . There are user area  17 , message area  18 , and folders and files area  19 , and others area  20  in the common workspace  15  of the group. All resource information in the group common workspace  15  can be shared by all users in the same group. All resources in each group&#39;s common workspace can be selectively displayed in a web-browser  9  for each login user, who belongs to the same user group after said resources information in said group are converted to a presentable web format (web page) by the console support software  6  of the control system  2  of the CCDSVM. 
         [0106]      FIG. 4C  has shown an example of resources in a private workspace  16  of a user, which has a private message area  21 , private file and folder area  22 , and private network or storage or other information area  23 . The assigned resources in these areas only can be exclusively viewed and accessed by a designated user unless he/she agrees to share with a peer user crossing group boundary or with peer users in a same group. The folder/directory is a data structure which can hold one or more files and folders at logical file system level, and stored on physical storage media. 
         [0107]      FIG. 8A  has shown an example of displaying an actually implemented portion of a web-page encoded with assigned resources information tree in a private workspace of a user X, which includes three layers. The top layer includes a system-group-A  33  on said network, which includes a next layer of multiple provisioned systems  3 . One of the provisioned systems  3  (system- 2 ) includes a next layer of two private file-folders  32  and  34  of user X, and each file-folder contains a next layer of files in the displayed private workspace of the user X. 
         [0108]      FIG. 8B  has shown another example of displaying an actually implemented portion of a web-page encoded with assigned resources information in a private workspace of a user Y, which includes a control system  2 , a private folder  35  and its file in a private workspace of the user Y. 
         [0109]    The private workspace of each of the user X and user Y may also include private message area  21  and other resources area, which are not displayed in  FIG. 8A  &amp;  FIG. 8B  because the WCUWE is designed to dynamically display part of a user&#39;s private workspace in response to each user&#39;s needs. 
         [0110]    It is notable that said user X and user Y, may be in a same user group such as said group-1, however, each of them has displayed a significantly different private workspace on the control system  2  due to they have been assigned with very different resources of the CCDSVM depending on each user&#39;s role and security permission, which setup by privileged user of the CCDSVM through web-based user interface provided by said console support software  6 . This is the beauty of the invention of WCUWE for CCDSVM. 
         [0111]    The  FIG. 6C  and  FIG. 6D  are examples of web pages displayed in each web-browser  9  of the user X and user Y in a user group-1 before an interactive online group meeting. As shown in  FIG. 6C  and  FIG. 6D , the user X or the user Y or other users (who&#39;s web-pages/browsers are not depicted) in the same user group-1 have entered a group online meeting after each login to the CCDSVM from each browser on each of own native system overs said network. Both users X and Y obtain an identical web-page provided by said console support software  6  of the control system  2  except with different contents in the displayed private workspace section of the web page due to each user has being assigned with different resources. The web page screen layout provided by said console support software modules  6  contains four sections:
       1) a private user message input area (section-1),   2) a message displaying section for displaying in the common message area  18  illustrated in  FIG. 4B  from all users in the user group-1 (section-2),   3) a file or folder display section for displaying files and folders in a group common file and folder area  19  illustrated in  FIG. 4B  from all users in the same user group-1 (section-3), and   4) a file and folder tree displaying and management section (section-4) for displaying folder and file tree in a private file and folder area  22 , illustrated in  FIG. 4C , of a user&#39;s private workspace  16 .       
 
         [0116]    Initially, said section-1, section-2, and section-3 are all empty due to no one has posted any file information or messages yet. The console support software  6  obtains each login user&#39;s portion of assigned folders and files, for the online meeting, from the private file and file-folder area  22  of the private workspace  16  of each user stored on said storage media, and further converts/encodes said file or folder information into said section-4 of presentable web-format (web page) to be displayable in the web-browser  9  for each user. The choice of total four sections of the web-page layout and the order of each section on the browser screen is irrelevant to this invention since other choices of design are also possible, and further, this invention does not have any limitations on what the web-screen layout shall be. The information of the file or folder (attributes) includes a system name where the file or folder resided, the name and path of the file or folder, the owner of the file or folder, the time stamps, the size of the file or the folder and so on without limitations. 
         [0117]    During the interactive online meeting, said console support software  6  provides each user to post or un-post files or folders information to/from said section-3 of the displayed group common documents and contents management section with several steps. First, for example, providing said user X to click on a targeted file “Doc 1”  24  or “sub folder-1” (one a time) in the section-4 of said web page, which displays said file and folder management area  22  of said X&#39;s private workspace  16 . Second, to select the operation of either post or un-post from an operation menu (see  FIG. 9A ,  FIG. 9B ,  FIG. 10A  and  FIG. 10B ). Finally to click on the selected operation to submit the task of either post or un-post the selected file or folder. 
         [0118]    Each user with permission may perform an un-post operation if such user has at least a one previously posted file or folder information, which has already been displayed in the section-3 of the common document and content management section of said web-browser  9  for all login users in said same user group-1, see  FIG. 6A  or  FIG. 6B  for an example. 
         [0119]    If a file is selected, a file operation menu is used, and if a folder is selected, a folder operation menu is used respectively. It is also possible to provide only one menu for both file and folder operations by said console support software  6 . The operation menu can be pop-up menu for the folder as shown in  FIG. 9A , or a pop-up menu for a file as shown in  FIG. 9B , or a non-pop-up menu for a folder as shown in  FIG. 10A , or a non-pop-up menu for a file as shown in  FIG. 10B , or a drop-down menu or one or more submit buttons. Each operation menu contains one or more operating options for a user to select and submit a corresponding task. The choice of operation menu is irrelevant to present invention although the actual implementation of this part of the invention has used a pop-up menu, and as a matter of fact that there is no limitation on how the operation menu is designed in present invention. 
         [0120]    In the example of  FIG. 6A , the user X can post a file named “Doc 1”  24  to said section-3 of the common document and contents display section of said web-browser  9 . In the example of  FIG. 6B , the user Y also can post a file named “picture 1”  25  to the common document and contents display section-3 of said web-browser  9 . In addition, another not depicted user Z posted a file of “project code”. The files or file-folders could be the one on said control system  2  or on any provisioned system  3  of the CCDSVM. 
         [0121]    In addition, during the interactive online meeting, the console support software  6  of the control system  2  also provides each user to post message to one or more users in the same group via said section-1 of the private user message input section by typing a message and clicking on a “send” button. In the example of  FIG. 6A , the user X posted a message of “Msg1 of user X”  26 . In the example of  FIG. 6B , the user Y also posted a message of “Msg2 of user Y”  27 . In addition, another non depicted user Z posted a message of “Msg3 of user Z”. As a result, all of three messages were displayed in the same section-2 in each user&#39;s browser  9 . 
         [0122]    In a specific situation, the console support software  6  also provides a permitted user to un-post the previously posted message. Just for an example, as illustrated in  FIG. 6A , said console support software  6  provides the permitted user X to select a previously posted “Msg2 of user Y”  27  from said section-2 of the common message display section in said web-browser  9  of the user X, and select the un-post operation from said operation menu and submit the selected un-post task. 
         [0123]    The detailed information of how the post or un-post task are implemented will be discussed in a few paragraphs later. In addition, with this invention, the action of “post” information such as posting information of files or folders, or post messages or other resources is equivalent to the action of “share” information. The action of “un-post” information is equivalent to the action of “un-share” previously posted or shared information, in other words, to “remove” previously posted or shared information. 
         [0124]    After a user submitting the task information of post or un-post from the web-browser  9  of a console system  1  or on a client system  10  or on the control system  2 , the task&#39;s data is sent to the control system  2 . The console support software  6  of the control system  2  obtains and parses the information to determine: who is the original user initiating the task; what type of task; what type of associated resources for task to work on; who is targeted user; and what is the time stamp, and may also include other information without limitations. The console support software  6  further determines that if the task is to post a file or folder from an original user, the console support software  6  picks up the corresponding file or folder information that from the file and folder area  22  in the private workspace  16  of the original user and deposits such information into the file and folder area  19  of the common workspace  15  of said group in this case. 
         [0125]    If the task is to un-post/withdraw a previously posted file or folder, which is posted from a displayed private workspace of a specific user, and now in said common workspace  15  of said group, the console support software  6  searches for the corresponding information of the file or folder in the file folder area  19  of said common workspace  15  of said group and further removes the entry of matched information from said common workspace  15  of said group after it is found. 
         [0126]    If the task is to post a message to users in said group, the parsed message will be stored in the private message area  21  of the original user&#39;s private workspace  16  and the parsed message also is copied to the message area  18  of the common workspace  15  of said user group-1 by said console support software  6 . 
         [0127]    If a task is to un-post (delete/remove) a previously posted message, the console support software  6  searches for a matching message in said common message area  18  of said common workspace  16  of said group and removes such message entry if it is found based on message and original user&#39;s identification and other associated information such as the time stamp, security permission and so on without limitation. 
         [0128]    It shall be noticed that the task of un-posting a file or folder of this invention does not actually delete the original file and folder from an original user&#39;s private workspace  16 . In addition, a lock protection mechanism is deployed whenever a message or information of a file or folder is written, stored, or deposited to either said private space  16  or said common workspace  15 , or to said disk drives or other storage media. Throughout the rest of the discussion, the lock protection is assumed to be a default action without further mentioning whenever a write/store/deposit action takes place. As a matter of fact, each task of posting a file, folder, and message as well as each task of un-posting a previously posted file, folder, or message performed by multiple users in multiple groups with present invention can be executed by the console support software  6  instantly with memory speed. 
         [0129]      FIG. 6A  and  FIG. 6B  illustrate that after the console support software  6  of the control system  2  successfully executing the tasks for each user in the group, any user in said user group can get a fresh view of said section-2 of the common messages display area of user group-1, and a fresh view of said section-3 of the common documents &amp; display area in each user&#39;s web-browser  9  on a client system  10  or a on control system  2  or on a console system  1 . 
         [0130]    Users can manually click on a refresh-button, which is not shown in the  FIG. 6A  and  FIG. 6B , to refresh the entire web page screen including the corresponding part of either said section-2 or section-3. Also the corresponding part of the browser screen of said section-2 or section-3 can be automatically refreshed. As a matter of fact, optionally, the console support software  6  can provide a run-time script to said web browser  9  via a web-page, which is loaded into the web browser  9  after each user login to the CCDSVM and starting a group online meeting. 
         [0131]    The run-time script will automatically and periodically perform tasks of refreshing said section-2 and section-3 of the web page screen. As a matter of fact, the script can control which section to refresh or refresh all sections in a web page. The frequency of the refreshing can be adjusted by said console support software  6  of the CCDSVM depending on the needs of the meeting, which typically can range from 1 to 3 seconds and there is no limitation on this aspect. Also, with the preferred example, said run-time script provided by the WCUWE is a JavaScript, however, other type of programming scripts or methods are also possible and there is no limitation on what kind of run-time program shall be used in this invention. In addition, the console support software  6  provides each user the choices of either automatically or manually refreshing their said web browser  9 . 
         [0132]    Upon refreshing said section-2 or section-3 of said web-browser  9  screen of each user, a request of updating such screen will be generated and sent from said web browser  9  to the control system  2 . The console support software  6  obtains and parses each request to determine what user group, and which part of said common workspace  15  of said group need to be updated. 
         [0133]    Based on information of each parsed request, the console support software  6  of the control system  2  retrieves the updated resources information from said common workspace  15  of said group, which includes recently posted files, folders, or messages from each user in said group, and also includes updated list of files and file-folders or messages after un-posting one or more files, folders, or messages by users in the group. Finally, the console support software  6  of the control system  2  converts/encodes the retrieved information of resources and objects into presentable web-format (web-page). 
         [0134]    If the request is to update the group messages, the converted information is sent to the section-2 of the group common message display area of said web-page in said web page/web browser  9 . If the request is to update the group common files and folders display area, the converted information is sent to the section-3 of said web-browser  9 . Therefore, after refreshing said sections in said web-browser  9 , each user can have an identical view of all posted files and folders from the section-3 of the group common document display area in said browser  9 , and can have an identical view of all messages from the section-2 of the group common message display area in said web-browser  9 , which are posted by all other users in a same group. Meanwhile said console support software  6  still allows each user to keep most of the resources information in own private workspace  16  being un-exposed to other users in the same group during the online interactive meeting. 
         [0135]    For example, the user X at his/her web-browser  9  can see “picture 1”  25 , illustrated in  FIG. 6A  posted by the user Y, in the section-3 of group common file and folder display area, but cannot see other information in the user Y&#39;s private workspace area  16 , yet can see the “Doc 1”  24  posted by the user X himself. Also, the user Y at his/her web-browser  9  can see the “Doc 1”  24 , illustrated in  FIG. 6B  posted by the user X in the section-3 of group common file and folder display area but cannot see other information in the user X&#39;s private file and folder display area, yet can see the “picture 1”  25  posted by the user Y himself. 
         [0136]    A difference between a conventional Internet group communication model and the group based communication model described in present invention is that the console support software  6  of the control system  2  provides each user to control post or un-post said resources information from the user&#39;s own private workspace  16  while the conventional Internet communication model is not capable of performing posting/un-posting task. Also, for example, un-posting a previous posted file or folder information in the WCUWE of the CCDSVM does not delete the file or file-folder information nor does it delete the corresponding physical file or file-folder in the user&#39;s private workspace while the delete operation with existing Internet group communication model will completely delete an uploaded file in a group. The dynamic workspace of present invention represents a true beauty of the combined security protection of information, and flexibility and efficiency for the online meeting provided by the WCUWE of the CCDSVM to each users and groups in online meeting. 
         [0137]    In addition, with a preferred example, since posted information of each file is encoded by said console support software  6  with a web link and displayed in said section-3 of the web-browser  9 , therefore, each user in a user-group can click on said link to download the file, which provided through the private file and folder area of the private workspace of their peer users in group, from a system where the file is located. For example, the user X can download said “picture 1”, which may reside either in the control system  2  or any provisioned system  3 , from the user Y. Similarly, the user Y can down load said “Doc 1”, which also may reside on either the control system  2  or one of the provisioned systems  3 , from the user X at same time. This achieves peer-to-peer exchanging of files on permitted system from permitted users in said user-group. In addition, there is no size limitation for the file to be downloaded, which is a gifted benefit from Internet technology. Again, the web link discussed in present invention just represents a type of reference for pointing to a resource object for user to access in a cross network environment. Therefore, the mentioned use of the web link itself shall not be limited to the web only environment and it also can be referred to a way to reference an object in a non web-based networked environment. 
         [0138]    Besides the exampled and understandable method of download, other methods of retrieving peer users&#39; digital documents or contents are also possible by deploying a more efficient proprietary file transfer mechanism to reach the results of said exchanging a file. It shall be noted that said method of download is only applicable to said files and does not apply to folder and other said resource. To retrieve a targeted peer user&#39;s entire folder and its underneath files and sub folders, a special file and folder transfer method is provided. Transferring files and file-folders across systems has been discussed in the prior application of “Display multi-layers list item in web browser with support of concurrent multi-users”, via a copy/paste mechanism. 
         [0139]    As shown in  FIGS. 9A &amp; 9B , and  FIGS. 10A &amp; 10B , the console support software  6  of the control system  2  also provides each user to perform many other tasks during online meetings through said operation menu such as upload, rename, delete, copy/paste and so on without limitations. The upload operation allows each user to dynamically upload files one at a time, through a web-browser  9 , from a local storage of a client system  10  or console system  1  to any permitted folder in said user&#39;s private workspace on the control system  2  or on a provisioned system  3  during a meeting, and further to be posted to said common workspace of a user group to which each user belongs. 
         [0140]    The user interactive click driven copy/past operation allows files and folders from permitted folders of permitted provisioned systems  3  to be dynamically, physically copied to each user&#39;s private workspace on the control system  2 , and the information of said files and folders could further to be displayed in said web-page/browser of each user, and further to be posted to the common workspace  15  of the user group to which each user belong that is additional to directly posting these files or folders without physical copying over. As a matter of fact, operations provided by the console support software  6  of the control system  2  have added efficiency for posting or un-posting files and folders for each user depending on the real needs. 
         [0141]    Additionally, said console support software  6  provides each user of each group with the capability of saving the posted messages in the common message area  18  of said common workspace  15  of each group into a file in the common file &amp; folder area of said common workspace  15  of each group. Further, the saved file can be viewed, downloaded by each user in each group by the method of posting. Besides whenever there is needs, said console support software modules  6  provide user to reset the message area  18  by removing all message entries in the message area  18  of said user-group&#39;s common workspace  16 . 
         [0142]    An important fact is that the designed WCUWE of the CCDSVM has provided concurrent users, each from a single web browser anywhere on the network to securely perform permitted various tasks, which could be run concurrently within a single web-browser. Because of the console support software  6  of the control system  2  lets each user have an exclusive view for resource objects in the private workspace  16  and in said common workspace  15  of a group which each user belongs to, and lets each user manage resource objects in own private space  16 . Therefore, the multiple users in multiple groups&#39; communication or in 1-to-1 communication can concurrently post or un-post files, folders, messages, or other resource objects without interfering each others. Thus, the workspaces of each user and each group are well protected. 
         [0143]    Hence, the console support software  6  of the control system  2  provides privileged users to perform tasks of creating multiple users and/or user groups on the control system  2 , and each group can be assigned with variable size-of users for online interactive meetings. The total number of users and the total number of groups, and the maximum number of users per group that the WCUWE of the CCDSVM can support is an implementation issue and depends on the capacity of the control system  2 . The WCUWE of the CCDSVM and the CCDSVM has been designed with unlimited scalability for both users and provisioned systems  3 . On the other hand, the spirit of present invention does not limited to the boundary issues of the WCUWE and the CCDSVM. 
         [0144]      FIG. 8A  and  FIG. 8B  illustrate that each user-X and user-Y has a different private workspace than others and each has been assigned with different system resources. Regardless each user is a member of a group or without any group membership, the console support software  6  of the control system  2  can provide the user X and user Y to peer-to-peer instantly posting files or folders one at a time to each other, or instantly un-post the previous posted files and folders through similar steps disclosed for the group online meeting model at below:
       1) Facilitate a user capable of clicking on a source file or folder for post or un-post;   2) provide the user to select post operation if the user wants to post a file or folder through operation menu; or provide user to select un-post operation from operation menu if said user is to un-post a previously posted file or folder;   3) upon submitting a task of post or un-post, facilitate the user to provide input to a prompt of “who is a targeted user?” provided by said console support software  9 , and further submit the selected task;   4) the console support software  6  obtains and parses received task information which includes original user, source of the file or folder, type of operation, and other information;   5) If said type of operation is post a file or folder, said console support software  6  deposits the information of said source file or folder to said private file and folder area  22  of said private workspace  16  of the targeted user. If said operation type is un-post a posted file or folder, said console support software  6  searches a corresponding file or folder information from said private file and folder area  22  of said private workspace  16  of said targeted user to match the source file or folder, if found a match, the corresponding entry of the file or folder is removed from said private file and folder area  22  of said private workspace  16  of the targeted user; and   6) Upon the target user refreshing the web-page in said web-browser  9 , the console support software  6  retrieves and converts the updated information in said private file and folder area  22  of private workspace  16  of the each user into a presentable web-format (web-page) and transmits said web-page to the web-browser  9  of the target user for displaying and viewing.       
 
         [0151]    For example, as shown in  FIG. 8A , the user X can follow said steps 1) to 3) described above to post his “folder 2”  32 , in the displayed files and folders area  22  of the private working space  16  in the user X&#39;s web-browser  9 , to the user Y. As shown in  FIG. 8C , upon the user Y refreshing his/her web-browser  9  on a local system by walking on any system node or folder node in a displayed resource tree, the user Y will see said “folder 2”  32  in his/her displayed private file and folder tree of the displayed private workspace of the user Y. As a matter of fact, when walking over a system node, file &amp; folder tree nodes in said web-browser  9 , a refreshing web-page screen request is generated and to be handled as described previously or in steps described above. As a results of participating in 1-to-1 mode communication with multiple users, a user, such the user X, can view and access multiple folders or files posted by one or more users from each of own private workspace. On the other hand, the user X has no permission to delete any resources posted by other users. 
         [0152]    In addition to post messages in group based communication involving parties with two or more users, the WCUWE of the CCDSVM also provides each user to post messages to other user with non-group based 1-to-1 model.  FIG. 7A  and  FIG. 7B  have shown an example of a user X and a user Y, who may not be in a same user group, however, the console support software  6  of the control system  2  provides each user to share and exchange messages with each other from a three section web page in a browser  9 . 
         [0153]    The section-3 of the web-page in said browser  9  allows a user to work with same steps of non-group based 1-to-1 model of posting files and folders or un-posting the previously posted files or folders as described previously. The section-3 included in  FIGS. 7A and 7B  is for a demonstration of how flexible of this invention is for displaying information under the private workspace of each user. Further, the number of sections in the screen layout and the order of each section in a web page display really is not a limitation to this invention. 
         [0154]    The section-1 is user message input area together with an additional input field of “To who”, due to unlike in group online meeting, the console support software modules  6  have no knowledge of who the targeted user is in this case. Further, user can post a message with similar said steps as discussed previously in this invention. Nevertheless, unlike with the group meeting messaging model, after obtaining and parsing information of the messages from each user, the console support software  6  of the control system  2  will deposit the message to both the targeted user&#39;s and the original user&#39;s message areas of each private workspaces. Further, with the same said steps of displaying messages in each user&#39;s browser, each user can view both their own sent messages and messages received from peer user in the section-2 of a browser  9 . 
         [0155]    For example, as shown in  FIG. 7A , the user X inputs a message of “msg4 of user X”  30 , types “user Y” in the input field of “To who”, and then submits the message by clicking on “Send” button. Similarly, as shown in  FIG. 7B , the user Y input a message of “Msg3 of user Y”  31 , types “user X” in the input field of “To who”, and then submits the message. Upon refreshing the web-page in the web-browser  9  of each user, the user X will see the message  30  he/she sent and the message  31  received from the user Y. Also the user Y will see both messages  30  and  31  at same time. 
         [0156]    Again, the design choice of three sections of a web-page display layout and the order of each section is just a preferred example of implementation for non-group based peer user communication. This invention does not limited by the web-screen display layout, for example, a screen display only with said section-1 and section-2 is also possible and so on without limitation, and each section can display one or more same or different resources in one or more user private workspaces or group common workspaces. 
         [0157]    The WCUWE of the CCDSVM has provided a security hierarchy for members of any team to work together across multiple locations. With said security hierarchy and said steps of posting or un-posting files and folders, the console support software  6  of the control system  2  can specially provide only a team leader with the capability of posting folders or files that to be viewed and shared by all team members or by an individual member in non-group meeting based environment. In addition, the console support software  6  also provides each team member to post or un-post his/her files or folders to a specific peer user one at a time in a non-group meeting environment. Again the files or folders could be on said control system  2  or on any provisioned system  3 . 
         [0158]    It is relatively straightforward for the WCUWE of the CCDSVM, more specifically the console support software  6 , to support massive online users, who do not have account with the CCDSVM and can not login the CCDSVM, but can view the dynamically posted files, folders, or messages by users with user account of the CCDSVM. 
         [0159]    In a preferred example, such as shown in  FIG. 6E , the console support software  6  of the control system  2  provides a public web page to the massive online users, who do not have to login the CCDSVM. The public web page, in one embodiment, could be layout with two major sections with a section-1 to display messages in the sharable message area  18  in a designated user group&#39;s common workspace while a section-2 to display files or folders in the sharable file or folder area  19  in said designated user group&#39;s common workspace  15 . 
         [0160]    For users belonging to the same designated user group, each user from a web-browser  9  on any computing system across said network can login to the CCDSVM and obtain said group online meeting web-page as shown in  FIG. 6A  for the user X and  FIG. 6B  for the user Y. Further as described previously, each user in said group can instantly post a message to said message area  18  of the designated user group&#39;s common workspace  15 , or post one file or folder to the sharable file and folder area  19  in the designated user group&#39;s common workspace  15 , which is associated with said public web page. Also, each user in the user group can instantly perform tasks of un-post previously posted files or folders, which results in removing the corresponding file or folder entry in the file and folder area  19  in the designated user group&#39;s common workspace  15  by said console support software  6  of the control system  2 , or un-post the previously posted messages from the common message area  18  of the common workspace  15  of said user group. 
         [0161]    Meanwhile as previously described and as shown in  FIG. 6E , the public web page can be displayed in a browser  9 , which is located on one or more public display systems or on each public online user&#39;s native system, can be dynamically updated, and further can be viewed by the massive online public users with the same pace and synchronized with identical contents as they being dynamically displayed in said section-2 and section-3 of said web-page in said browser  9  during the group online meeting shown in  FIG. 6A  and  FIG. 6B . Again, said two sections of a web-page display layout is a preferred example and it does not limit this invention because with this invention other layout is also possible. For example, it may be desired to have web-page layout that only contains one section, which is either for messages, files, or folders or for both messages and files depending on the application&#39;s need. 
         [0162]    As shown in  FIG. 8A ,  FIG. 8B , and  FIG. 8C , if a user who had participated in multiple sessions of group based or non-group based peer-to-peer communication and has posted or un-posted many messages, files and file-folders, the user may often do not remember how many materials have been posted for sharing. For example, as shown in  FIG. 8A , the user X can select the “folder 2”  32 , and select the post on an operation menu, and provide a target “user Y” to share “folder 2”  32 . As shown in  FIG. 8C , the user Y can see the “Folder 2”  32  of the user X in a web-browser of the user Y after the user X posts the “Folder 2”  32 . If the user X selects various files or folders for sharing with other dozen people, the user X will have a difficult time to remember what has been shared and who are the target users. As shown in  FIG. 11 , the console support software  6  of the control system  2  can provide each user, such as the user X for example, a sharing control list of how many messages, files or file-folders being posted by him or her and to who shared. 
         [0163]    As shown in  FIG. 11 , a personal share management list in view of the user X&#39;s web-browser  9 , an entry of the posted “Folder 2”  32  is listed at the bottom of said control list and it is posted/shared to/with the user Y. Further, said console support software  6  can provide each user to selectively un-post previously posted files and folders by clicking on a “delete shared?” of operation menu for corresponding entries in the share control list. For example, the user X clicks on “delete share?” to un-post the “Folder 2”  32 . Thereafter, as described before, said console support software  6  of the control system  2  will receive and execute the un-post task. Further upon refreshing the targeted user Y&#39;s web-page/web-browser  9 , instead of seeing “Folder 2”  32  as shown in  FIG. 8C , the user Y will see an updated view of said web-page as shown in  FIG. 8B , where the “Folder 2”  32  has been removed. The operation menu for “delete share?” is depicted herein just for example only and it could be displayed in any other form. 
         [0164]    In addition to provide original user in a group to control un-posting files or folders in group based communication, the console support software  6  of the control system  2  may also provide a privileged user to un-post previously posted files or folders posted by other users in said displayed file and folder section of a web-page. To support this capability, for example, said console support software  6  will provide an operation menu to associate with said displayed files and folders in said display section, further to allow the privileged user to perform the similar un-post operation. After receiving the un-post operation, the console support software  6  will perform similar said searching for the posted file or folder in the group file and folder area  19  of group common workspace  15  of said group, if there is a match found, the corresponding entry will be deleted. Also, the file and folder section of web-page/web-browser  9  can be refreshed accordingly as described before. 
         [0165]    The present invention can apply to update web contents for web portals in enterprises and in personal communication. In one example, the  FIGS. 6  A and B may represent an internal portal web page, encoded with information in the common workspace  15  of the group 1, and the  FIG. 6E &#39;s web page display may represent an external portal of that group. The present invention has provided synchronization between these two internal and external web pages in real-time. 
         [0166]    In one embodiment, a web page screen of a news portal may be divided into multi-sections including a sports section, medical section, education section, entertainment section, financial section, traveling and vacation section, and technology section so forth without limit. With the CCDSVM, each of the different sections can be assigned to each different corresponding group, which is dedicated for updating the news in the section. For example, 5 sports journalists in a sports group scattering around the world can be assigned to update the sports news section instantly at anytime and anyplace, where the sports section is only associated with the sports group&#39;s common workspace  15  and can be updated and refreshed independent of other sections in the web page via a run-time script. In another example, a financial group has 4 journalists being assigned to update the financial section in the web page, where the financial section is only associated with the financial group&#39;s common workspace  15 , and so forth without limits. Of course, the rest of the sections can also be assigned to each dedicated group of journalists. 
         [0167]    In another embodiment, a retailer&#39;s portal may have multiple sections in a web page layout for displaying hundreds or even thousands of products, where each section may be dedicated to a type of product. By assigning each section to a dedicated group of one or more users, the contents of each section can be much securely and efficiently updated because more users can concurrently working on each section of each web page for entire web pages of any portal without interrupting each others. 
         [0168]    Further, each section can be dedicated to encode and display one type of resources posted from each user in a corresponding area of a group common workspace  15  or encode and display with mixed type of resources from multiple areas of a group common workspace  15  such as mixed with photo-picture, text messages, and others, or mixed with streaming video and text messages. 
         [0169]    Instead of encoding resources in one or more users&#39; private workspaces  16  into each of the corresponding sections of a web page indirectly via each corresponding group&#39;s common workspace, in which each user are the members as described in prior embodiment, each section of a web page can be encoded directly with resources information in one or more users&#39; private workspaces. To accomplish this, the console support software modules  6  of the control system  2  can keep a mapping list between each section and the associated one or more users&#39; private workspaces for a web page. In addition, the console support software modules  6  can facilitate each user an alternative post operation and an alternative un-post operation to support updating the contents of the assigned section of the web page. Therefore, instead of facilitating each user posting resources information into the user&#39;s group&#39;s workspace  15  or withdrawing the resource information from the user&#39;s group&#39;s workspace, the console support software modules  6  facilitate user to tag the resource in his/her private workspace as an indication for posting the resource directly to the assigned section, or to tag the previously tagged and posted resource for withdrawing. In one embodiment, the tagged information can be kept in said list and be stored in a dedicated place in the user&#39;s private workspace, or in a central controlled file-folder that the console support software  6  can easy to pick up. Therefore, during the generating of the targeted web page, the console support software modules  6  will encode each section of the web page according to the mapped information list combined with each user&#39;s tagged information for updating web contents. Although, this is not as robust as post and un-post operations, it still reduces the usage for group common workspace  15 . 
         [0170]    Thus, the management of larger volumes of web contents for a complex web portal will become much efficient because it divides the larger amount of works into one or more smaller jobs for each corresponding small section of each web page of a web portal. Therefore, each section can be parallel updated by one or more users yet the updating is independent and without interfering other sections. Second, it is more secure since each section is restricted to be updated by limited users. Also, with this invention, the updating does not require any hardcode for each section due to the nature of posting and withdrawing technology introduced in present invention. 
         [0171]    Having briefly described embodiments of the web based network environment in which present invention operates,  FIG. 12  illustrates an example of a computer system  200 , which is exemplary for the client system  10 , the provisioned system  3 , the control system  2 , or the console system  1  in which the features of present invention may be implemented. Process of the web based information exchange can be implemented in any processor-based computer system, such as a PC, a workstation, or a mainframe computer. It will be apparent to those of ordinary skill in the art that other alternative computer system architectures may also be employed. 
         [0172]    Referring back to  FIG. 12 , the computer system  200  includes a processing unit  201 , an interface bus  211 , and an input/output (“IO”) unit  220 . Processing unit  201  includes a processor  202 , a main memory  204 , a system bus  211 , a static memory device  206 , a bus control unit  205 , a mass storage memory  207 , and a web information exchange module  230 . Bus  211  is used to transmit information between various components and processor  202  for data processing. Processor  202  may be any of a wide variety of general-purpose processors or microprocessors such as a Pentium™ microprocessor, Motorola™ 68040, or Power PC™ microprocessor. 
         [0173]    Main memory  204 , which may include multiple levels of cache memories, stores frequently used data and instructions. Main memory  204  may be RAM (random access memory), MRAM (magnetic RAM), or flash memory. Static memory  206  may be a ROM (read-only memory), which is coupled to bus  211 , for storing static information and/or instructions. Bus control unit  205  is coupled to buses  211 - 212  and controls which component, such as main memory  204  or processor  202 , can use the bus. Bus control unit  205  manages the communications between bus  211  and bus  212 . Mass storage memory  207 , which may be a magnetic disk, an optical disk, hard disk drive, floppy disk, CD-ROM, and/or flash memories for storing large amounts of data. Web based information exchange  230 , in one embodiment, is a network control component for facilitating information exchange over the Web. It should be noted that web based information exchange  230  could be software or hardware or a combination of software and hardware components and modules. In one embodiment, it comprises video and audio recording and playback components including digital camera or video or audio encoding and playing back PCI cards such that the on-the-fly recorded streaming video on the computer system  200  can be displayed into each user&#39;s web browser or to other viewing mechanism on another remote computer system  200  via communication link over various networks during online information exchanging. 
         [0174]    I/O unit  220 , in one embodiment, includes a display  221 , keyboard  222 , cursor control device  223 , and communication device  225 . Display device  221  may be a liquid crystal device, cathode ray tube (“CRT”), touch-screen display, or other suitable display device. Display  221  projects or displays images of a graphical planning board. Keyboard  222  may be a conventional alphanumeric input device for communicating information between computer system  200  and computer operator(s). Another type of user input device is cursor control device  223 , such as a conventional mouse, touch mouse, trackball, or other type of cursor for communicating information between system  200  and user(s). 
         [0175]    Communication device  225  is coupled to bus  211  for access to information from remote computers or servers, such as a server or other computers, through a wide-area network. Communication device  225  may include a modem or a network interface device, or other similar devices that facilitate communication between computer  200  and the network. Computer system  200  may be coupled to a number of servers via a network infrastructure such as the infrastructure illustrated in  FIG. 1 . 
         [0176]    Present invention has been described in considerable details with reference to certain examples. However, other versions and examples are also possible, therefore, the spirit of present invention shall not be limited to these examples and/or embodiments. Also, the claims of present invention will be labeled with numbering and in most cases, the numbering does not represent any sequence or order unless specifically described as the steps of a method.