System for secure access to information provided by a web application

• US 20020161903A1
• Filed: 04/30/2001
• Published: 10/31/2002
• Est. Priority Date: 04/30/2001
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Besaw, Lawrence M.
• Application Number:
  US09/843,888
• Publication Number:
  US 20020161903A1
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066

Abstract

A system for secure access to information, e.g., images, data, etc., is utilized to provide additional security to users of a management portal.. The management portal may be configured to embed a common gateway interface (“CGI”) link in a web page, e.g., HTML, extensible mark-up language (“XML”), at the end the conclusion of the management transaction. Subsequently, the web page with the embedded CGI link may be transmitted to the user. To access the stored information, the user may invoke the CGI link on the received web page. The CGI link may be configured to invoke an application, a security module, at a web server of the management portal e.g., CGI script, web application, etc., that may request a user name and/or authorization code from the user. The security module may be further configured to compare the requested information against a user configuration database of the management portal, where the user configuration may be constructed in XML code. The security module may be further configured to permit access to the secure storage area, and subsequently to the information stored therein, in response to a match of the requested information with the user configuration database. Otherwise, the security module may be further configured to inform the user of denied access to the secure storage area.

Claims

1. A method of securely accessing information over a network, comprising:

storing information in a secure storage area in a remote network node;

transmitting an application link in a web page; and

receiving an initiation of said application link to access to said secure storage area.

2. The method of securely accessing information over a network according to claim 1, further comprising:

invoking an application on said remote network node in response to said initiation of said application link, wherein said application is configured to determine access to said secure storage area.

3. The method of securely accessing information over a network according to claim 2, further comprising:

accessing a user configuration database to determine access to said secure storage area.

4. The method of securely accessing information over a network according to claim 3, further comprising:

transmitting said information over said network to a requestor in response to said user configuration database permitting access to said secure storage area.

5. The method of securely accessing information over a network according to claim 4, wherein said information is transmitted according to a hypertext transfer protocol.

6. The method of securely accessing information over a network according to claim 4, wherein said application link includes a common gateway interface program link.

7. The method of securely accessing information over a network according to claim 4, wherein said user configuration database is constructed using a extensible mark-up language.

8. A system for securely accessing information over a network, said system comprising:

at least one processor;

a memory coupled to said at least one processor;

a management information portal residing in said memory and executed by said at least one processor, wherein said management information portal is configured to store information in a secure storage area in a remote network node, transmit an application link in a web page, and receive an initiation of said application link to access to said secure storage area.

9. The system for securely accessing information over a network according to claim 8, wherein said management information portal is configured to determine access to said secure storage area in response to an invocation of an application on said remote network node.

10. The system for securely accessing information over a network according to claim 8, wherein said management information portal is further configured to access a user configuration database to determine access to said secure storage area.

11. The system for securely accessing information over a network according to claim 10, wherein said management information portal is further configured to transmit said information over said network to a requestor in response to said user configuration database permits access to said secure storage area.

12. The system for securely accessing information over a network according to claim 11, wherein said information is transmitted according to a hypertext transfer protocol.

13. The system for securely accessing information over a network according to claim 11, wherein said application link includes a common gateway interface program.

15. The computer readable storage medium according to claim 14, said one or more computer programs further comprising a set of instructions for:

invoking an application on said remote network node in response to said initiation of said application link, wherein said application is configured to determine access to said secure storage area.

16. The computer readable storage medium according to claim 15, said one or more computer programs further comprising a set of instructions for:

accessing a user configuration database to determine access to said secure storage area.

17. The computer readable storage medium according to claim 16, said one or more computer programs further comprising a set of instructions for:

transmitting said information over said network to a requester in response to said user configuration database permits access to said secure storage area.

18. The computer readable storage medium according to claim 17, said one or more computer programs further comprising a set of instructions, wherein said information is transmitted according to a hypertext transfer protocol.

19. The computer readable storage medium according to claim 17, said one or more computer programs further comprising a set of instructions, wherein said application link includes a common gateway interface program link

14. A computer readable storage medium on which is embedded one or more computer programs, said one or more computer programs implementing a method for securely accessing information over a network, said one or more computer programs comprising a set of instructions for:

storing information in a secure storage area in a remote network node;

transmitting an application link in a web page; and

receiving an initiation of said application link to access to said secure storage area.