Securely persisting network resource identifiers

• US 20040010607A1
• Filed: 01/16/2003
• Published: 01/15/2004
• Est. Priority Date: 07/11/2002
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Ahmed, Sajeed, Lee, Michele C.
• Granted Patent: US 7,428,592 B2
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: G06F 16/289 Object oriented databases
• CPC Class Codes: G06Q 40/08 Insurance

Abstract

Technology is disclosed for securely persisting a network resource identifier, such as a URL, that addresses a network resource, such as a portal. The network resource identifier is persisted from one network resource to another. A system accessed through the portal receives requests for accessing network resources associated with the system'"'"'s applications and resources. In one example, the system provides the applications and resources via web pages. The system generates a link selector, based on information persisted in the requests. Selection of the link selector immediately brings a system user to the portal. Each request includes a parameter that corresponds to the network resource identifier for the portal. The system employs this parameter to obtain the information necessary to generate the link selector, such as an image and mouse-over text. The system includes a parameter in outgoing requests that calls for persisting the network resource identifier for the portal. The system also determines whether the network resource identifier is valid for persisting—preventing system users from being sent to a fraudulent copy of the portal.

Claims

1. A method of persisting a network resource identifier, comprising the steps of:

(a) receiving a request; and

(b) determining whether said request corresponds to a network resource identifier that is valid to persist.

2. A method according to claim 1, wherein said request includes a parameter corresponding to said network resource identifier.

3. A method according to claim 2, wherein said step (b) includes the step of:

(1) identifying an entry in a registration list that corresponds to said parameter.

4. A method according to claim 3, wherein said entry includes an Entry Identifier Field that matches said parameter.

5. A method according to claim 3, wherein said entry includes a Network Identifier Field that matches said network resource identifier.

6. A method according to claim 3, wherein said entry identifies an image and mouse-over text.

7. A method according to claim 1, wherein said step (b) includes the step of:

(2) determining whether said network resource identifier satisfies a filter.

8. A method according to claim 7, wherein said filter specifies a character pattern.

9. A method according to claim 1, wherein said method further includes the step of:

(c) creating a link selector for issuing said network resource identifier.

10. A method according to claim 9, wherein said link selector includes an image.

11. A method according to claim 10, wherein said step (c) includes the step of:

(1) obtaining said image using an entry in a registration list, wherein said entry corresponds to said network resource identifier.

12. A method according to claim 11, wherein said link selector includes mouse-over text.

13. A method according to claim 12, wherein said step (c) includes the step of:

(2) obtaining said mouse-over text using said entry in said registration list.

14. A method according to claim 1, wherein said network resource identifier is a Uniform Resource Locator.

15. A method according to claim 1, wherein said method further includes the step of:

(d) generating a second request after performing said step (a), wherein said second request includes a parameter corresponding to said network resource identifier.

16. A method according to claim 15, wherein said parameter in said second request calls for said network resource identifier to be persisted by a network resource addressed by said second request.

17. A method according to claim 16, wherein said network resource addressed by said second request creates a link selector for issuing said network resource identifier.

18. A method according to claim 1, wherein said network resource identifier addresses a network resource associated with an Identity System.

19. A method according to claim 18, wherein said network resource is a portal.

20. A method according to claim 1, wherein said network resource identifier addresses a network resource associated with an Access System.

21. A method according to claim 1, wherein said method is performed as part of an Identity System.

22. A method according to claim 1, wherein said method is performed as part of an Access System.

23. A method according to claim 1, wherein said method is performed as part of an integrated Identity/Access System.

24. One or more processor readable storage devices having processor readable code embodied on said one or more processor readable storage devices, said processor readable code for programming one or more processors to perform a method comprising the steps of:

(a) receiving a request; and

(b) determining whether said request corresponds to a network resource identifier that is valid to persist.

25. One or more processor readable storage devices according to claim 24, wherein said request includes a parameter corresponding to said network resource identifier.

26. One or more processor readable storage devices according to claim 25, wherein said step (b) includes the step of:

(1) identifying an entry in a registration list that corresponds to said parameter.

27. One or more processor readable storage devices according to claim 24, wherein said step (b) includes the step of:

(2) determining whether said network resource identifier satisfies a filter.

28. One or more processor readable storage devices according to claim 24, wherein said method further includes the step of:

(c) creating a link selector for issuing said network resource identifier.

29. One or more processor readable storage devices according to claim 28, wherein said link selector includes an image and said step (c) includes the step of:

(1) obtaining said image using an entry in a registration list, wherein said entry corresponds to said network resource identifier.

30. One or more processor readable storage devices according to claim 24, wherein said network resource identifier is a Uniform Resource Locator.

31. One or more processor readable storage devices according to claim 24, wherein said method further includes the step of:

(d) generating a second request after performing said step (a), wherein said second request includes a parameter corresponding to said network resource identifier.

32. One or more processor readable storage devices according to claim 31, wherein said parameter in said second request calls for said network resource identifier to be persisted by a network resource addressed by said second request.

33. One or more processor readable storage devices according to claim 24, wherein said network resource identifier addresses a network resource associated with an Identity System.

34. One or more processor readable storage devices according to claim 33, wherein said network resource is a portal.

35. One or more processor readable storage devices according to claim 24, wherein said method is performed as part of an Identity System.

36. One or more processor readable storage devices according to claim 24, wherein said method is performed as part of an Access System.

37. An apparatus, comprising:

one or more storage devices; and

one or more processors in communication with said one or more storage devices, said one or more processors perform a method comprising the steps of;

(a) receiving a request; and

(b) determining whether said request corresponds to a network resource identifier that is valid to persist.

38. An apparatus according to claim 37, wherein said request includes a parameter corresponding to said network resource identifier and said step (b) includes the step of:

(1) identifying an entry in a registration list that corresponds to said parameter.

39. An apparatus according to claim 37, wherein said step (b) includes the step of:

(2) determining whether said network resource identifier satisfies a filter.

40. An apparatus according to claim 37, wherein said method further includes the step of:

(c) creating a link selector for issuing said network resource identifier.

41. An apparatus according to claim 37, wherein said method further includes the step of:

(d) generating a second request after performing said step (a), wherein said second request includes a parameter corresponding to said network resource identifier and said parameter in said second request calls for said network resource identifier to be persisted by a network resource addressed by said second request.

42. An apparatus according to claim 41, wherein said network resource addressed by said second request creates a link selector for issuing said network resource identifier.

43. An apparatus according to claim 37, wherein said method is performed as part of an Identity System.

44. An apparatus according to claim 37, wherein said method is performed as part of an Access System.

45. A method of persisting a network resource identifier, comprising the steps of:

(a) receiving a request with a parameter corresponding to a network resource identifier to persist, wherein said network resource identifier does not address a network resource that issued said request; and

(b) creating a link selector for issuing said network resource identifier.

46. A method according to claim 45, wherein said method further includes the step of:

(c) generating a second request after performing said step (a), wherein said second request includes a parameter corresponding to said network resource identifier to persist.

47. A method according to claim 46, wherein said parameter in said second request calls for said network resource identifier to be persisted by a network resource addressed by said second request.

48. A method according to claim 47, wherein said network resource addressed by said second request creates a link selector for issuing said network resource identifier.

49. A method according to claim 45, wherein said link selector includes an image.

50. A method according to claim 49, wherein said step (b) includes the step of:

(1) obtaining said image using an entry in a registration list, wherein said entry corresponds to said network resource identifier.

51. A method according to claim 50, wherein said link selector includes mouse-over text.

52. A method according to claim 51, wherein said step (b) includes the step of:

(2) obtaining said mouse-over text using said entry in said registration list.

53. A method according to claim 45, wherein said network resource identifier is a Uniform Resource Locator.

54. A method according to claim 45, wherein said network resource identifier addresses a network resource associated with an Identity System.

55. A method according to claim 54, wherein said network resource is a web page for an application in said Identity System.

56. A method according to claim 45, wherein said network resource identifier addresses a network resource associated with an Access System.

57. A method according to claim 45, wherein said method is performed as part of an Identity System.

58. A method according to claim 45, wherein said method is performed as part of an Access System.

59. A method according to claim 45, wherein said method is performed as part of an integrated Identity/Access System.

60. One or more processor readable storage devices having processor readable code embodied on said one or more processor readable storage devices, said processor readable code for programming one or more processors to perform a method comprising the steps of:

(a) receiving a request with a parameter corresponding to a network resource identifier to persist, wherein said network resource identifier does not address a network resource that issued said request; and

(b) creating a link selector for issuing said network resource identifier.

61. One or more processor readable storage devices according to claim 60, wherein said method further includes the step of:

(c) generating a second request after performing said step (a), wherein said second request includes a parameter corresponding to said network resource identifier to persist.

62. One or more processor readable storage devices according to claim 61, wherein said parameter in said second request calls for said network resource identifier to be persisted by a network resource addressed by said second request.

63. One or more processor readable storage devices according to claim 60, wherein said link selector includes an image and said step (b) includes the step of:

(1) obtaining said image using an entry in a registration list, wherein said entry corresponds to said network resource identifier.

64. One or more processor readable storage devices according to claim 63, wherein said link selector includes mouse-over text and said step (b) includes the step of:

(2) obtaining said mouse-over text using said entry in said registration list.

65. One or more processor readable storage devices according to claim 60, wherein said method is performed as part of an Identity System.

66. One or more processor readable storage devices according to claim 60, wherein said method is performed as part of an Access System.

67. An apparatus, comprising:

one or more storage devices; and

one or more processors in communication with said one or more storage devices, said one or more processors perform a method comprising the steps of;

(a) receiving a request with a parameter corresponding to a network resource identifier to persist, wherein said network resource identifier does not address a network resource that issued said request; and

(b) creating a link selector for issuing said network resource identifier.

68. An apparatus according to claim 67, wherein said method further includes the step of:

(c) generating a second request after performing said step (a), wherein said second request includes a parameter corresponding to said network resource identifier to persist, wherein said parameter in said second request calls for said network resource identifier to be persisted by a network resource addressed by said second request.

69. An apparatus according to claim 67, wherein said link selector includes an image and mouse-over text, wherein said step (b) includes the steps of:

(1) obtaining said image using an entry in a registration list, wherein said entry corresponds to said network resource identifier; and

(2) obtaining said mouse-over text using said entry in said registration list.

70. An apparatus according to claim 67, wherein said method is performed as part of an Identity System.

71. An apparatus according to claim 67, wherein said method is performed as part of an Access System.

72. A method of persisting a network resource identifier, comprising the steps of:

(a) receiving a request with a parameter corresponding to a network resource identifier to persist; and

(b) generating a second request after performing said step (a), wherein said second request includes a parameter corresponding to said network resource identifier to persist.

73. A method according to claim 72, wherein said parameter in said second request calls for said network resource identifier to be persisted by a network resource addressed by said second request.

74. A method according to claim 73, wherein said network resource addressed by said second request creates a link selector for issuing said network resource identifier.

75. A method according to claim 72, wherein said method is performed as part of an Identity System.

76. A method according to claim 72, wherein said method is performed as part of an Access System.

77. One or more processor readable storage devices having processor readable code embodied on said one or more processor readable storage devices, said processor readable code for programming one or more processors to perform a method comprising the steps of:

(a) receiving a request with a parameter corresponding to a network resource identifier to persist; and

(b) generating a second request after performing said step (a), wherein said second request includes a parameter corresponding to said network resource identifier to persist.

78. One or more processor readable storage devices according to claim 77, wherein said parameter in said second request calls for said network resource identifier to be persisted by a network resource addressed by said second request.

79. One or more processor readable storage devices according to claim 77, wherein said method is performed as part of an Identity System.

80. An apparatus, comprising:

one or more storage devices; and

one or more processors in communication with said one or more storage devices, said one or more processors perform a method comprising the steps of;

(a) receiving a request with a parameter corresponding to a network resource identifier to persist; and

(b) generating a second request after performing said step (a), wherein said second request includes a parameter corresponding to said network resource identifier to persist.

81. An apparatus according to claim 80, wherein said parameter in said second request calls for said network resource identifier to be persisted by a network resource addressed by said second request.