Method and system for maintaining secure access to web server services using permissions delegated via electronic messaging systems

• US 20030172296A1
• Filed: 03/05/2002
• Published: 09/11/2003
• Est. Priority Date: 03/05/2002
• Status: Abandoned Application

• Current Assignee: Probaris Technologies, Inc.
• Original Assignee: Probaris Technologies, Inc.
• Inventors: Gunter, Carl A.
• Application Number:
  US10/090,679
• Publication Number:
  US 20030172296A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

A method and system for manipulating permissions used to obtain access to services on a web server are disclosed. A permission may be included in a single electronic message that is to be sent to multiple recipients via a messaging system. An electronic message including the permission is sent to each recipient via the messaging system. The electronic message can be automatically processed by the web server upon receipt of the electronic message from a recipient seeking access to the service.

Claims

1. A method of providing secure access to a service on a web server to each of a plurality of recipients of an electronic message comprising:

(a) facilitating automatic creation of a first electronic message directed to the plurality of recipients by a first user, wherein said first electronic message comprises a permission to access the service based on a public key of each recipient and is signed with a digital signature of the first user;

(b) automatically creating from said first electronic message a plurality of electronic messages each comprising a copy of the first electronic message;

(c) distributing one of the plurality of electronic messages to each of the plurality of recipients;

(d) receiving from at least one of the plurality of recipients one of the plurality of electronic messages;

(e) automatically verifying the digital signature of the first user in the received electronic message by the web server;

(f) providing access to the service if step (e) produces a positive result.

2. A system for providing secure access to a service on a web server to each of a plurality of recipients of an electronic message comprising:

a message transfer system that facilitates automatic creation of a first electronic message directed to the plurality of recipients by a first user, wherein said first electronic message comprises a permission to access the service based on a public key of each recipient and is signed with a digital signature of the first user;

that automatically creates from said first electronic message a plurality of electronic messages each comprising a copy of the first electronic message; and

that distributes one of the plurality of electronic messages to each of the plurality of recipients; and

the web server that receives from at least one of the plurality of recipients one of the plurality of electronic messages;

that automatically verifies the digital signature of the first user in the received electronic message; and

that provides access to the service if the verification produces a positive result.