Method for integrating multiple web servers based on individual client authorization

• US 20030120738A1
• Filed: 12/21/2001
• Published: 06/26/2003
• Est. Priority Date: 12/13/2001
• Status: Active Grant

• Current Assignee: Inventec Corporation
• Original Assignee: Inventec Corporation
• Inventors: Liao, Yi-Ming, Lu, Po-Wen, Hsieh, Ming-Hsiao, Chin, Hung-Liang, Lee, Mhing-Fen
• Granted Patent: US 7,146,423 B2
• Time in Patent Office: Days
• US Class Current: 709/208
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A method for integrating multiple web servers based on individual client authorization consists of setting up a client, a master web server, and at least one slave web server through a network such that after the said master web server receives commands inputted by the said client, an authentication routine relative to the said client is executed based on the said commands to determine the individual authorization level of the said client and web pages are collected from the said master server and slave web that the client is permitted to browse based on the said individual authorization level and, furthermore, web pages are respectively displayed via a specific screen model on the computer system of the said client.

Claims

1. A method for integrating multiple web servers based on individual client authorization, the said method consists of setting up a master web server of a manufacturer, at least one slave web server, and at least one client through a network;

the said slave web server belongs to a cooperating company that supports the said manufacturer and, furthermore, goods transaction information derived from financial management, production management, and materials management data are automatically updated between the said master web server and the said slave web server through the network, the said client refers to a plurality of computer systems of various departments of the said manufacturer and the said cooperating company which can log onto the network;

wherein the said master web server sequentially executes the steps below;

while any client logs onto the said master web server, executing an authentication routine relative to the said client based on commands inputted by the said client and utilizing the post-authentication results to determine the individual authorization level possessed by the said client;

based on the said individual authorization level, collecting a web page from the said master web server and slave web servers that the said client is permitted to browse and edit, then displaying the said web page of a specific screen model on the computer system of the said client, in which the said web page containing information relating to the goods transactions derived from the financial management, production management, and materials management data of the manufacturer and the said cooperating company.

2. As mentioned in claim 1 of the method for integrating multiple web servers based on individual client authorization, wherein the computer system of the client can directly access the corresponding web server and display the relevant web pages after they are read through the said specific screen model.

3. As mentioned in claim 1 of the method for integrating multiple web servers based on individual client authorization, wherein the commands inputted by the client includes an identification number and a verification number;

the said master web server has a authorization database, and when the said master web server reads a said identification number and a said verification number, the said master web server searches for an individual authorization level in the said authorization database that matches the said identification number and verification number and then collects web pages in the said master web server and slave web server the client is permitted to browse based on the said individual authorization level.

4. As mentioned in claim 3 of the method for integrating multiple web servers based on individual client authorization, wherein the said authorization database is comprised of:

an identification comparison table;

the said identification comparison table consists of a plurality of identification numbers as well as verification numbers and user names that match the said identification numbers;

a group comparison table;

the said group comparison table consists of the said identification numbers as well as group names and user names that match the said identification numbers;

a group authorization comparison table;

the said group authorization comparison table consists of the said group names as well as individual authorization names and user names that match the said group names;

an individual authorization comparison table;

the said individual authorization comparison table consists of individual authorization names as well as a plurality of web page names and web page name connection sites that match the said individual authorization names.

5. As mentioned in claim 4 of the method for integrating multiple web servers based on individual client authorization, wherein based on the identification number and verification number inputted by the client, the said master web server further executes the steps below:

based on the said identification number in the said group comparison table, searching for the same identification number that matches the said identification number and obtaining the identification number under the group names and user names;

based on the group names and the user names found after the search, searching the said group names and the said user names that conform to the same group names and user names in the said group authorization comparison table, and obtaining the individual authorization name under the said group names and user names;

utilizing the said individual authorization name to search the same individual authorization name that matches the said individual authorization name in the said individual authorization comparison table, and accessing the commensurate web page names and web page connection sites granted according to the said matching individual authorization name;

finally, displaying the said web page names and web page connection sites respectively on the specific screen model on the computer system of the client.

6. As mentioned in claim 5 of the method for integrating multiple web servers based on individual client authorization, wherein the said master web server further executes the steps of while determining that the said identification number and verification number are incorrect, requesting the computer system of the client to once again output an identification number and a verification number.

7. As mentioned in claim 1 of the method for integrating multiple web servers based on individual client authorization, wherein the said specific screen model consists of a graphic display of respective web page data and the data displayed indicates the matching web page names of the web pages, with the said displayed data containing the web page connection sites;

as such, after a web page name is selected, the computer system of the client enters the corresponding said connection site of the web page based on the said connection site.