System for logging on to servers through a portal computer

• US 20020156905A1
• Filed: 02/21/2001
• Published: 10/24/2002
• Est. Priority Date: 02/21/2001
• Status: Abandoned Application

• Current Assignee: Opsware, Inc. (HP Inc.)
• Original Assignee: Opsware, Inc. (HP Inc.)
• Inventors: Weissman, Boris
• Application Number:
  US09/790,255
• Publication Number:
  US 20020156905A1
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/567 Integrating service provisioning from a plurality of service providers
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method and system for providing a single logon system for logging onto multiple server computers without modification of the server computers. The logon system is provided by a portal computer that implements a portal web site through which users of client computers can access multiple server computers that implement various “accessible” web sites. The portal web site provides to the client computers web pages with links that each identify accessible web sites. When a user of a client computer selects a link to an accessible web site, a message is sent to the portal web site that identifies the accessible web site. The portal web site uses the definition of logon messages to control the logging on of the user to the identified web site in such a way that the logon appears to the identified web site as being performed by the user and that the identified web site does not need to be modified to accommodate the logging on of the user via the portal web site.

Claims

1. A method in a portal computer for accessing a plurality of servers on behalf of users using client computers, each server for servicing requests directed to a domain, the method comprising:

receiving a request from a client computer, the request being sent to the portal computer and identifying a resource to be accessed at a domain;

determining whether the user of the client computer is currently logged on to the server for the domain of the identified resource;

when it is determined that the user is not currently logged on,

retrieving logon information for the user for the domain of the identified resource; and

logging on the user to the server of the domain of the identified resource in accordance with a series of message definitions of the retrieved logon information;

modifying the received request to address it to the domain of the identified resource; and

sending the modified request

whereby users can be logged on to servers using different logon procedures.

2. The method of claim 1 wherein the determining includes sending a message to the server of the domain and receiving a response indicating that the user is not logged on.

3. The method of claim 1 wherein the determining includes checking whether a secure connection is established for the user between the portal computer and the server of the domain.

4. The method of claim 1 wherein the retrieved logon information indicates whether an HTTP Secure Socket Layer connection should be established with the server of the domain.

5. The method of claim 4 wherein the retrieved logon information indicates that authentication is digest.

6. The method of claim 4 wherein the retrieved logon information indicates that authentication is basic.

7. The method of claim 1 wherein the retrieved logon information indicates that authentication is form based.

8. The method of claim 1 wherein the retrieved logon information is provided by a provider of the domain.

9. The method of claim 1 wherein the retrieved logon information includes user name and password.

10. The method of claim 1 wherein the retrieved logon information is stored persistently at the portal computer.

11. The method of claim 1 wherein the retrieved logon information includes both authentication information and a logon procedure.

12. The method of claim 1 wherein the message definitions specify HTTP-request and HTTP-response messages that are sent and received to log on the user to the server of the domain.

13. The method of claim 1 wherein the message definitions include a hierarchical naming scheme.

15. The method of claim 14 wherein the portal computer can log on user to servers that use different logon procedures.

16. The method of claim 15 wherein logon information defines the logon procedure for each server.

17. The method of claim 14 wherein the servers are not modified to support the logging on of users by the portal computer.

18. The method of claim 14 including determining whether the user is currently logged on to the server by sending a message to the server and receiving a response indicating that the user is not logged on.

19. The method of claim 14 including determining whether the user is currently logged on to the server by checking whether a secure connection is established for the user between the portal computer and the server.

20. The method of claim 14 wherein the retrieved logon information indicates whether an HTTP Secure Socket Layer connection should be established with the server.

21. The method of claim 20 wherein the retrieved logon information indicates that authentication is digest.

22. The method of claim 20 wherein the retrieved logon information indicates that authentication is basic.

23. The method of claim 14 wherein the retrieved logon information indicates that authentication is form based.

24. The method of claim 14 wherein the retrieved logon information is provided by a provider of the server.

25. The method of claim 14 wherein the retrieved logon information includes user name and password.

26. The method of claim 14 wherein the retrieved logon information is stored persistently at the portal computer.

27. The method of claim 14 wherein the retrieved logon information includes both authentication information and a logon procedure.

28. The method of claim 14 wherein the message definition specifies HTTP-request and HTTP-response messages that are sent and received to log on the user to the server.

29. The method of claim 28 wherein the message definitions include a hierarchical naming scheme.

14. A method in a portal computer for accessing a plurality of servers on behalf of users using client computers, each server for servicing requests, the method comprising:

receiving a request from a client computer, the request identifying a resource of one of the plurality of servers; and

when the user is not currently logged on to the server,

retrieving logon information for the user for that server;

logging the user on to that server in accordance with a message definition specified in the logon information using the retrieved logon information; and

sending the received request to that server.

30. A method in a client computer for accessing a server via a portal computer, the server for servicing requests for resources, the method comprising:

sending to a portal computer a request to access a resource of the server; and

receiving the requested resource wherein the portal computer logs on a user of the client computer to the server in accordance with message definitions that specify a logon procedure for the server

wherein the user can be logged on by the portal computer to servers that use different logon procedures.

31. The method of claim 30 including before sending the request, receiving from the portal computer a display page that displays information that when selected sends the request to the portal computer.

32. The method of claim 30 wherein the requested resource is a web page.

33. The method of claim 32 wherein the portal computer modifies links of the web page to point to the portal computer.

34. The method of claim 30 wherein the message definitions specify HTTP-request and HTTP-response messages that are sent and received to log on the user to the server.

35. The method of claim 34 wherein the message definitions include a hierarchical naming scheme.

36. The method of claim 30 wherein the portal computer has logon information for each server.

37. The method of claim 36 wherein the logon information defines a series of messages for the server.

38. The method of claim 30 wherein the servers are not modified to support the logging on of user by the portal computer.

40. The method of claim 39 including receiving the logon information defining the message from a provider of each server.

41. The method of claim 39 including receiving the identified authentication information from the user and persistently storing the authentication information so that it does not need to be received from the user during subsequent logging on to the indicated server.

42. The method of claim 41 wherein the identified authentication information includes a user name and password.

43. The method of claim 39 wherein the sending of the messages includes sending a message, receiving a response to that message, generating a message from information received in the response, and sending the generated information.

44. The method of claim 43 wherein the messages are HTTP messages and the received response is a web page with a logon form and wherein the generating of the message retrieves data from the logon form of the web page.

45. The method of claim 44 wherein the messages of the logon information use a hierarchical naming scheme to identify the data to be retrieved from the logon form.

46. The method of claim 45 wherein the hierarchical naming scheme includes a name of the web page, a name of the logon form, and an attribute of the name of the logon form.

47. The method of claim 45 wherein the hierarchical naming scheme includes a name of the web page, a name of the logon form, a name of an input tag of the logon form, and a value of the input tag.

50. The computer-readable medium of claim 49 wherein the portal computer can log on users to servers that use different logon procedures.

51. The computer-readable medium of claim 50 wherein the portal computer includes logon information defining the logon procedure for each server.

52. The computer-readable medium of claim 49 wherein the servers are not modified to support the logging on of users by the portal computer.

53. The computer-readable medium of claim 49 including determining whether the user is currently logged on to the indicated server by sending a message to the server and receiving a response indicating that the user is not logged on.

54. The computer-readable medium of claim 49 including determining whether the user is currently logged on to the indicated server by checking whether a secure connection is established for the user between the portal computer and the server.

55. The computer-readable medium of claim 49 wherein the retrieved logon information indicates whether an HTTP Secure Socket Layer connection should be established with the server.

56. The computer-readable medium of claim 55 wherein the retrieved logon information indicates that authentication is digest.

57. The computer-readable medium of claim 55 wherein the retrieved logon information indicates that authentication is basic.

58. The computer-readable medium of claim 49 wherein the retrieved logon information indicates that authentication is form based.

59. The computer-readable medium of claim 49 wherein the logon information is provided by a provider of the server.

60. The computer-readable medium of claim 49 wherein the retrieved logon information specifies HTTP-request and HTTP-response messages that are sent and received to logon the user to the server.

61. The computer-readable medium of claim 49 wherein the message definition uses include a hierarchical naming scheme.

39. A method in a computer system of logging on users of client computers to servers that use different logon procedures, the method comprising:

providing logon information for logging on the users to each of the servers, the logon information defining messages to be sent to the servers to effect logging on the user to that server;

receiving from the user an indication of a server computer;

in response to receiving the indication,

retrieving the logon information for the indicated server; and

sending messages defined by the retrieved logon information to the indicated server to effect logging on the user to the indicated server computer.

48. A method in a server computer for logging on user to the server computer via a portal computer, the method comprising:

receiving from the portal computer a series of messages specified by message definitions associated with the server computer, the message definitions defining a logon procedure for the server computer wherein the portal computer can log on the user to server computers that user different logon procedures; and

responding to the received messages to effect the logging on of the user to the server computer.

49. A computer-readable medium having instructions for controlling a portal computer to log on users using client computers to servers, by a method comprising:

receiving from a client computer of a user an indication to access a server; and

when the user is not currently logged on to the server,

retrieving logon information for the user for that server;

logging on the user to that server in accordance with a message definition specified in the retrieved logon information.

62. A system in a portal computer for logging on users using client computers to servers, comprising:

means for receiving from a client computer of a user an indication to access a server; and

means for retrieving logon information for the user for the indicated server and for logging on the user to the indicated server in accordance with message definitions specified in the retrieved logon information.

63. The system of claim 62 wherein the portal computer can log on users to servers that use different logon procedures.

64. The system of claim 63 including means for storing logon information that defines the logon procedure for each server.

65. The system of claim 62 wherein the servers are not modified to support logging on users by the portal computer.

66. The system of claim 62 including determining whether the user is currently logged on to the indicated server by sending a message to the indicated server and receiving a response indicating that the user is not logged on.

67. The system of claim 62 including determining whether the user is currently logged on to the indicated server by checking whether a secure connection is established for the user between the portal computer and the indicated server.

68. The system of claim 62 wherein the retrieved logon information is provided by a provider of the server.

69. The system of claim 62 wherein the retrieved logon information specifies HTTP-request and HTTP-response messages that are sent and received to log on the user to the server.

70. The system of claim 62 wherein the message definition uses a hierarchical naming scheme.