Authorization method and system for storing and retrieving data

• US 20030120956A1
• Filed: 12/20/2001
• Published: 06/26/2003
• Est. Priority Date: 12/20/2001
• Status: Abandoned Application

• Current Assignee: Inventec Corporation
• Original Assignee: Inventec Corporation
• Inventors: Yu, Wen-Chee, Chiu, Hung-Liang
• Application Number:
  US10/026,596
• Publication Number:
  US 20030120956A1
• Time in Patent Office: Days
• US Class Current: 713/202
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

An authorization method and system for storing and retrieving data are proposed, in which the authorization method is applied to the authorization system, which connects a terminal device to a resource system established by an application service provider (ASP) via a network, so as to allow the ASP to authorize a user at the terminal device to interact therewith for data storage and retrieval. In the use of the authorization method and system, a client terminal with no authorization is inhibited for storing and retrieving application software provided by an application service provider (ASP), and costs for an enterprise in purchasing authorization from the ASP can be significantly reduced.

Claims

1. An authorization method for storing and retrieving data, applied to an authorization system for connecting a terminal device to a resource system established by an application service provider (ASP) via a network, so as to allow the ASP to authorize a user at the terminal device to interact therewith for data storage and retrieval, wherein the authorization system is preconstructed with a database and an authorization account, while the database includes a plurality of user'"'"'s data for identifying the user submitting a request for loginning the resource system, and the authorization account is used for authorizing the user to store and retrieve the resource system;

the authorization method comprising the steps of;

(1) receiving user'"'"'s data inputted by the user to the terminal device via the authorization system;

(2) comparing the user'"'"'s data transmitted from the terminal device with the user'"'"'s data stored in the database via the authorization system, wherein if no user'"'"'s data in the database matches the user'"'"'s data transmitted from the terminal device, then step (3) is followed;

if one of the user'"'"'s data in the database matches the user'"'"'s data transmitted from the terminal device, then step (4) is followed;

(3) sending a message of failure in loginning the resource system via the authorization system to the terminal device, and allowing the user at the terminal device to re-input user'"'"'s data for loginning the resource system;

then returning to the step (1); and

(4) sending an authorization account via the authorization system to the resource system, and transmitting data generated by the resource system to the terminal device, so as to allow the user at the terminal device to interact with the resource system for data storage and retrieval.

2. The authorization method of claim 1, wherein the user'"'"'s data include a dedicated user'"'"'s name and a password corresponding to the user'"'"'s name.

3. The authorization method of claim 1, wherein the resource system is an enterprise resource planning (ERP) system.

4. The authorization method of claim 3, wherein the ERP system is a R/3 internet application components system for connecting operation of an enterprise to internet.

5. The authorization method of claim 1, wherein the authorization system is established in a server host.

6. The authorization method of claim 5, wherein the authorization system is middleware.

7. The authorization method of claim 1, wherein the authorization system and the resource system are contained in world wide web (WWW).

8. An authorization system for storing and retrieving data, for connecting a terminal device to a resource system established by an application service provider (ASP) via a network, so as to allow a user at the terminal device to store and retrieve application software provided by the ASP;

the authorization system comprising;

a database for establishing user'"'"'s data for storing and retrieving the resource system;

a receiving module for receiving user'"'"'s data for loginning the resource system inputted by the user at the terminal device;

an identifying module for comparing the user'"'"'s data transmitted from the receiving module with the user'"'"'s data stored in the database;

a replying module for responding according to compared results from the identifying module, wherein if no user'"'"'s data in the database matches the user'"'"'s data inputted by the user, the replying module sends a message of failure in loginning the resource system to the user at the terminal device, and allows the user to re-input user'"'"'s data for loginning the resource system;

if on of the user'"'"'s data in the database matches the user'"'"'s data inputted by the user, the replying module generates a message of permission for loginning the resource system;

a managing module having an authorization account for loginning the resource system, wherein the managing module sends an authorization account to the resource system according to the permission message transmitted from the replying module, so as to allow the terminal device to interact with the resource system for data storage and retrieval after the authorization account is identified by the resource system; and

a processing module for processing data generated by the interaction between the terminal device and the resource system, so as to display the data in the form of a web page on a browser of the terminal device.

9. The authorization system of claim 8, wherein the web page is in the form of extensible markup language XML).

10. The authorization system of claim 8, wherein the user'"'"'s data include a dedicated user'"'"'s name and a password corresponding to the user'"'"'s name.

11. The authorization system of claim 8, wherein the resource system is an enterprise resource planning (ERP) system.

12. The authorization system of claim 11, wherein the ERP system is a R/3 internet application components system for connecting operation of an enterprise to internet.

13. The authorization system of claim 8, wherein the authorization system is established in a server host.

14. The authorization system of claim 13, wherein the authorization system is middleware.

15. The authorization system of claim 8, wherein the authorization system and the resource system are contained in world wide web (WWW).