Method and system for filtering requests to a web site

• US 20040010710A1
• Filed: 07/10/2002
• Published: 01/15/2004
• Est. Priority Date: 07/10/2002
• Status: Abandoned Application

• Current Assignee: Infopower Corporation
• Original Assignee: Infopower Corporation
• Inventors: Lin, Chung-Chih, Hsu, Jui-Yu, Hsu, Wen-Hao
• Application Number:
  US10/191,559
• Publication Number:
  US 20040010710A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

The present invention provides a security control method to request access to a web site. The said method comprises: retrieving a URL (Uniform Resource Locator) from a request; verifying who sent the request and the user'"'"'s identification. Next, obtaining the user'"'"'s represented role, corresponding to the role of the user'"'"'s authority for accessing a web site. Allowing access to the data stored in the web site depends on the authority granted to the individual user, wherein the data is the targeted resource, which is located by the URL.

Claims

1. A method of security control for a request access a web site, said method comprising:

retrieving a URL (Uniform Resource Locator) from a request;

verifying an identification of a user who sent said request;

obtaining a represented role of said user;

getting said user'"'"'s authority for accessing a web site corresponding the said role; and

allowing said request to access a data stored in said web site depend on said user'"'"'s authority, wherein said data is the destination resource which is located by said URL.

2. The method according to claim 1, wherein said data includes at least a web page.

3. The method according to claim 1, further comprising retrieving an IP address (Internet Protocol address) from said request.

4. The method according to claim 3, further comprising locking at least a specific IP address, and refuse any requesting from said specific IP address.

5. The method according to claim 1, wherein verifying said user'"'"'s identification requires said user to input an account name and a password.

6. The method according to claim 5, wherein said step of requiring said user to input an account name and a password is required only at first time user access said web site.

7. The method according to claim 1, further comprising setting the authority of a request that comes from a specific IP address.

8. A method for filtering a request to access a web page, said method comprising:

receiving a request, said request being a HTTP request (Hypertext Transport Protocol request);

verifying the identification of a user who sent said request;

obtaining the role of said user, wherein said role represents the authority for said user, and the roles have the same authority can be aggregated in a group; and

said request accessing a web page according to the authority of said user.

9. The method according to claim 8, further comprising sending a notice to an unverified user to proceed a procedure of sign in.

10. The method according to claim 8, further comprising locking a specific IP address, and then blocking any request that comes from said specific IP address to access any web page.

11. A system of security control for filtering a request access a web site, said system comprising:

a parser module used to parse a request with a URL and a IP address;

a verify module providing a procedure of sign in to verify identification of a user who sent said request;

a role/group module, said user having a corresponding role in said role/group module, and each user has their own role;

an authority control module used to set up the authority of individual role, wherein said authority represents the accessing level that is permitted to said user, roles with the same authority being congregated to form a group in said role/group module; and

a connector module use to connect variables that said web site used, and provides said variables for said parser module during parsing.

12. The system according to claim 11, further comprising a modify module used to modify the setting parameter of said parser module, said verify module, said role/group module, said authority control module, and said connector module.

13. The system according to claim 11, wherein said request that comes from a specific IP address is allowed to access said web site directly without any inspection by said system.

14. The system according to claim 11, wherein said request that comes from a specific IP address is blocked from accessing said web site.

15. The system according to claim 11, wherein said authority control module further set authority for a group so that the roles who re included in said group have the same authority.