System and method for providing access to computer program applications

• US 20040073667A1
• Filed: 10/11/2002
• Published: 04/15/2004
• Est. Priority Date: 10/11/2002
• Status: Abandoned Application

• Current Assignee: Caterpillar Incorporated
• Original Assignee: Caterpillar Incorporated
• Inventors: Barker, Paul C., Hogan, Patrick M., Brady, Francis V., Casey, Thomas F., Hamilton, Darin E.
• Application Number:
  US10/269,307
• Publication Number:
  US 20040073667A1
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/01 Protocols

Abstract

A system and method for provide access to at least one computer program application through a server system to a user. The system and method log the user onto the server system in response to logon information established by the user and associate the user with an organization as a function of the logon information. Access to the at least one computer program application is granted to the user as a function of the organization associated with the user.

Claims

1. A method for providing access to at least one computer program application through a server system to a user, including:

logging the user onto the server system in response to logon information established by the user;

associating the user with an organization as a function of the logon information;

granting access to the at least one computer program application to the user as a function of the organization associated with the user.

2. A method, as set forth in claim 1, including the step of providing a directory of users, each user in the directory being associated with an organization.

3. A method, as set forth in claim 2, wherein the step of associating the user with an organization includes the steps of:

establishing an identity of the user as a function of the logon information; and

,

querying the directory of users for the organization associated with the user.

4. A method, as set forth in claim 2, wherein the directory of users is maintained in a database.

5. A method, as set forth in claim 4, wherein the database is a relational database.

6. A method, as set forth in claim 1, wherein the logon information is entered by the user.

7. A method, as set forth in claim 1, wherein the user establishes the logon information using a client system connected to the server system.

8. A method, as set forth in claim 7, wherein the step of logging the user onto the server system includes the steps of:

accessing a web page stored on the server system by the user;

determining if a logon cookie is stored on the client system; and

,

if the logon cookie is stored on the client system, retrieving the logon information from the logon cookie.

9. A method, as set forth in claim 8, if the logon cookie is not stored on the client system, performing the step of requesting the logon information from the user.

10. A method, as set forth in claim 9, including the step of writing the logon cookie onto the client system.

11. A method, as set forth in claim 7, including the steps of:

determining if an organization cookie is stored on the client system; and

,

if the organization cookie is stored on the client system, retrieving the organization with which the user is associated from the organization cookie.

12. A method, as set forth in claim 11, including the step of providing a directory of users, the directory including an organization associated with each user, if any, and if the organization cookie is not stored on the client system, then performing the step of querying the directory of users for the organization associated with the user.

13. A method, as set forth in claim 12, including the step of writing the organization cookie to the client system.

14. A method, as set forth in claim 1, wherein the step of granting access to the computer program application includes the step of determining access information as a function of the organization associated with the user.

15. A method, as set forth in claim 14, wherein the step of granting access to the computer program application further includes granting access to the computer program application as a function of the access information.

16. A method, as set forth in claim 15, further including the steps of:

providing a user access table, the user access table containing any access overrides for the users; and

,

querying the user access table as a function of the user and establishing any access overrides for the user.

17. A method, as set forth in claim 16, wherein the step of granting access to the computer program application further includes granting access to the computer program application as a function of the access information and any access overrides associated with the user.

18. A method for providing access to a plurality of computer program applications through a server system to a user, including:

logging the user to the server system in response to logon information established by the user;

associating the user with an organization as a function of the logon information; and

,

granting access to one or more of the computer program applications as a function of the organization associated with the user.

19. A method, as set forth in claim 18, including the step of providing a directory of users, the directory including an organization associated with each user, if any.

20. A method, as set forth in claim 19, wherein the step of associating the user with an organization includes the steps of:

establishing an identity of the user as a function of the logon information; and

,

querying the directory of users for the organization associated with the user.

21. A method, as set forth in claim 19, wherein the directory of users is maintained in a database.

22. A method, as set forth in claim 21, wherein the database is a relational database.

23. A method, as set forth in claim 18, wherein the logon information is entered by the user.

24. A method, as set forth in claim 18, wherein the user establishes the logon information using a client system connected to the server system.

25. A method, as set forth in claim 24, wherein the step of logging the user onto the server system includes the steps of:

accessing a web page stored on the server system by the user;

determining if a logon cookie is stored on the client system; and

,

if the logon cookie is stored on the client system, retrieving the logon information from the logon cookie.

26. A method, as set forth in claim 25, if the logon cookie is not stored on the client system, performing the step of requesting the logon information from the user.

27. A method, as set forth in claim 26, including the step of writing the logon cookie onto the client system.

28. A method, as set forth in claim 24, including the steps of:

determining if an organization cookie is stored on the client system; and

,

if the organization cookie is stored on the client system, retrieving the organization with which the user is associated from the organization cookie.

29. A method, as set forth in claim 28, including the step of providing a directory of users, the directory including an organization associated with each user, if any, and if the organization cookie is not stored on the client system, then performing the step of querying the directory of users for the organization associated with the user.

30. A method, as set forth in claim 29, including the step of writing the organization cookie to the client system.

31. A method, as set forth in claim 18, including the steps of providing a user access table, the user access table including any access overrides associated with the users.

32. A method, as set forth in claim 18, wherein the step of granting access to one or more of the computer program applications includes the step of determining access information as a function of the organization associated with the user.

33. A method, as set forth in claim 32, wherein the step of granting access to the one or more computer program applications further includes granting access to the one or more of the computer program applications as a function of the access information.

34. A method, as set forth in claim 19, further including the steps of:

providing a user access table, the user access table containing any access overrides for the users; and

,

querying the user access table as a function of the user and establishing any access overrides for the user.

35. A method, as set forth in claim 34, wherein the step of granting access to the one or more computer program applications further includes granting access to the computer program application as a function of the access information and any access overrides associated with the user.

36. A method for providing access to a plurality of computer program applications through a server system to a user, including:

logging the user to the server system in response to logon information established by the user;

associating the user with an organization as a function of the logon information;

determining access information as a function of the organization associated with the user;

determining any overrides as a function of the user; and

,

granting access to one or more of the computer program applications as a function of the access information and the overrides associated with the user.

38. A method, as set forth in claim 36, including the step of providing a user access table, the user access table containing any access overrides for the users, wherein the step of granting access to one or more of the computer program applications includes the step of querying the user access table as a function of the identification of the user and establishing any access overrides for the user, and wherein the access is granted to the one or more of the computer program applications as a function of the access information and any access overrides.

37. A method for providing access to a plurality of computer program applications through a Web server to a user through a Web browser on a client system, including:

a. accessing a Web page by the user using the Web browser;

b. determining if a logon cookie is stored on the client system;

c. if the logon cookie is not stored on the client system, performing the steps of;

1. requesting logon information from the user; and

2. writing the logon cookie to the client system;

d. if the logon cookie is stored on the client system, then retrieving the logon information from the logon cookie;

e. providing a directory of users, the directory including an organization associated with each user, if any;

f. determining if an organization cookie is stored on the client system;

g. if the organization cookie is not stored on the client system, performing the steps of;

1. establishing an identity of the user as a function of the logon information;

2. querying the directory of users for the organization associated with the user; and

,

3. writing the organization cookie to the client system;

h. if the organization cookie is stored on the client system, then determining the organization associated with the user as a function of the organization cookie;

i. determining access information as a function of the organization associated with the user;

j. granting access to one or more of the computer program applications as a function of the access information.

39. A computer readable program product for providing access to a plurality of computer program applications through a server system to a user, the computer readable program product, comprising:

computer readable program code means for logging the user to the server system in response to logon information established by the user;

computer readable program code means for associating the user with an organization as a function of the logon information; and

,

computer readable program code means for granting access to one or more of the computer program applications as a function of the organization associated with the user.

40. A computer readable program product for providing access to a plurality of computer program applications through a server system to a user, the computer readable program product, comprising:

computer readable program code means for logging the user to the server system in response to logon information established by the user;

computer readable program code means for associating the user with an organization as a function of the logon information;

computer readable program code means for determining access information as a function of the organization associated with the user;

computer readable program code means for determining any overrides as a function of the user; and

,

computer readable program code means for granting access to one or more of the computer program applications as a function of the access information and the overrides associated with the user.

41. A system for providing access to a plurality of computer program applications to a user, comprising:

a client system for allowing the user to logon to the system by establishing logon information; and

,

a server system, coupled to the client system by a communication link, for receiving the logon information from the client machine, associating the user with an organization as a function of the logon information, and granting access to one or more of the computer program applications as a function of the organization associated with the user.

42. A system, as set forth in claim 41, further comprising a directory of users, the directory including an organization associated with each user, if any.

43. A system, as set forth in claim 42, wherein the server system establishes an identity of the user as a function of the logon information and queries the directory of users for the organization associated with the user.

44. A system, as set forth in claim 43, wherein the directory of users is maintained in a database.

45. A system, as set forth in claim 44, wherein the database is a relational database.

46. A system, as set forth in claim 41, wherein the logon information is entered by the user.

47. A system, as set forth in claim 41, further comprising a client system connected to the system, wherein the user establishes the logon information using the client system.

48. A system, as set forth in claim 47, wherein the server system logs the user onto the system by determining if a logon cookie is stored on the client system in response to accessing a web page by the user and, if the logon cookie is stored on the client system, retrieving the logon information from the logon cookie.

49. A system, as set forth in claim 48, wherein the server system requests logon information from the user, if the logon cookie is not stored on the client system.

50. A system, as set forth in claim 49, wherein the server system writes the logon cookie onto the client system of the logon cookie was not previously stored on the client system.

51. A system, as set forth in claim 47, wherein the server system determines if an organization cookie is stored on the client system and retrieves the organization with which the user is associated from the organization cookie.

52. A system, as set forth in claim 51, further comprising a directory of users, the directory including an organization associated with each user, if any, and wherein the server system queries the directory of users for the organization associated with the user, if the organization cookie is not stored on the client system,

53. A system, as set forth in claim 52, wherein the server system writes organization cookie to the client system if the organization cookie was not previously written to the client system.

54. A system, as set forth in claim 41, further comprising a user access table, the user access table including any access overrides associated with the users.

55. A system, as set forth in claim 41, wherein the server system determines access information as a function of the organization associated with the user.

56. A system, as set forth in claim 55, wherein the server system grants access to the one or more computer program applications as a function of the access information.

57. A system, as set forth in claim 51, further including a user access table, the user access table containing any access overrides for the users;

and wherein the server system queries the user access table as a function of the user and establishes any access overrides for the user.

58. A system, as set forth in claim 57, wherein the server system grants access as a function of the access information and any access overrides associated with the user.