Method and system for maintaining secure access to web server services using public keys

• US 20030172297A1
• Filed: 03/05/2002
• Published: 09/11/2003
• Est. Priority Date: 03/05/2002
• Status: Abandoned Application

• Current Assignee: Probaris Technologies, Inc.
• Original Assignee: Probaris Technologies, Inc.
• Inventors: Gunter, Carl A.
• Application Number:
  US10/090,680
• Publication Number:
  US 20030172297A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

A method and system for providing secure access to a service on a web server are disclosed. A label relating to the service is determined by a first user on the web server. The label is returned to the first user. Upon the first user transmitting the label to a second user via a messaging system, information based on the label and the public key of the second user is automatically stored on the web server. Assuming the second user is properly authenticated with respect to his public key, the second user is provided access to the service upon request.

Claims

1. A method of providing secure access to a service on a web server comprising:

(a) providing a first user access to a label service on the web server;

(b) allowing said first user to determine, using the label service, a label relating to the service on the web server;

(c) providing the label to said first user;

(d) upon said first user transmitting the label to a second user via a messaging system, automatically storing on the web server information based on a public key of the second user and the label;

(e) authenticating the second user with respect to the public key of the second user; and

(f) providing the second user access to the service if step (e) produces a positive result.

2. The method of claim 1 wherein the label comprises a URL for identifying the service.

3. The method of claim 1 wherein the messaging system comprises an electronic mail system.

4. The method of claim 1 wherein the messaging system comprises an instant messaging system.

5. A system for providing secure access to a service on a web server comprising:

the web server that maintains a label service;

that allows a first user to determine, using the label service, a label relating to the service; and

that provides the label to the first user; and

a messaging system that, upon the first user transmitting the label to a second user via the messaging system, automatically stores on the web server information based on a public key of the second user and the label;

wherein, the second user is authenticated with respect to the public key of the second user; and

the second user is provided access to the service if the authentication produces a positive result.