Authentication-technology independent, non-programmatic method and apparatus for bootstrapping a user database from the WEB tier

• US 20010049796A1
• Filed: 05/31/2001
• Published: 12/06/2001
• Est. Priority Date: 06/01/2000
• Status: Abandoned Application

• Current Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Roth, Mark L., Osborn, Kevin Grant, Monzillo, Ronald M., Shannon, William A.
• Application Number:
  US09/873,095
• Publication Number:
  US 20010049796A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 16/958 Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking

Abstract

A non-programmatic method for bootstrapping a user database from the web tier using pass-through server-provided form targets is disclosed. A “form target,” used in this context, is the submission destination of an HTML form, submitted via HTTP (typically this is called an “action” in HTTP). The “form target” is usually the name of a CGI script, or an alias to an ASP, Servlet or JSP on the server, which will handle a form request. When the user submits a form via HTTP, the application server will extract security data and then pass control back to an application success target or a failure target.

Claims

1. In a browser/server environment, a method for bootstrapping a user database associated with an application from an application server, comprising:

forming a user information request page by the application;

sending the user information request page to a user;

returning a filled out user information request page to a pass through server target on the application server;

extracting security data from the filled out user information page by the application server; and

bootstrapping a user account in the user database by the application server based upon the extracted security data.

2. A method as recited in

claim 1

, further comprising:

forwarding the filled out user information request page to the application by the application server.

3. A method as recited in

claim 1

, wherein the application server makes available a set of user security requirements to the application that define security data required to bootstrap the user account in the user database.

4. A method as recited in

claim 1

, wherein the application includes a success target and a failure target, wherein the success target provides a success destination when the bootstrapping is successful, and wherein the failure target provides a failure destination when the bootstrapping is unsuccessful.

5. A method as recited in

claim 4

, wherein the success destination is a success URL and wherein the failure destination is a failure URL.

6. A method as recited in

claim 1

wherein the forming a user information request page comprises:

merging the set of security registration requirements and user profile data requirements by the application; and

collecting corresponding user profile data from the user.

7. A method as recited in

claim 6

, wherein the forwarding the filled out user information page to the application comprises:

forwarding a subset of the security data and the collected user profile data.

8. A method as recited in

claim 7

, further comprising:

extracting the collected user profile data from the forwarded filled out user information page.

9. A method as recited in

claim 8

, wherein the collected user profile data is stored in a user profile database.

10. In a browser/server environment, an apparatus for bootstrapping a user database associated with an application from an application server, comprising:

a means for forming a user information request page by the application;

a means for sending the user information request page to a user;

a means for returning a filled out user information request page to the application server;

a means for extracting security data from the filled out user information page by the application server; and

a means for bootstrapping a user account in the user database by the application server based upon the extracted security data.

11. An apparatus as recited in

claim 10

, further comprising:

a means for forwarding the filled out user information request page to the application.

12. An apparatus as recited in

claim 10

, wherein the application server makes available a set of user security requirements to the application that define security data required to bootstrap the user account in the user database.

13. An apparatus as recited in

claim 10

, wherein the application includes a success target and a failure target, wherein the success target provides a success destination when the bootstrapping is successful, and wherein the failure target provides a failure destination when the bootstrapping is unsuccessful.

14. An apparatus as recited in

claim 13

, wherein the success destination is a success URL and wherein the failure destination is a failure URL.

15. An apparatus as recited in

claim 10

wherein the forming a user information request page comprises:

merging the set of security registration requirements and user profile data requirements by the application; and

collecting corresponding user profile data from the user.

16. An apparatus as recited in

claim 15

, wherein the forwarding the filled out user information page to the application comprises:

forwarding a subset of the security data and the collected user profile data.

17. An apparatus as recited in

claim 16

, further comprising:

extracting the collected user profile data from the forwarded filled out user information page.

18. An apparatus as recited in

claim 17

, wherein the collected user profile data is stored in a user profile database.

19. A computer program product for enabling a computing system to bootstrap a user database associated with an application from an application server, the computer program product in a browser/server environment, comprising:

computer code for forming a user information request page by the application;

computer code for sending the user information request page to a user;

computer code for returning a filled out user information request page to the application server;

computer code for extracting security data from the filled out user information page by the application server;

computer code for bootstrapping a user account in the user database by the application server based upon the extracted security data; and

a computer readable medium for storing the computer program product.