System and method for validating security access across network layer and a local file layer

• US 20040123154A1
• Filed: 07/22/2003
• Published: 06/24/2004
• Est. Priority Date: 07/22/2002
• Status: Abandoned Application

• Current Assignee: Trusted Media Networks Incorporated
• Original Assignee: Trusted Media Networks Incorporated
• Inventors: Carden, Chris James, Lippman, Alan
• Application Number:
  US10/625,764
• Publication Number:
  US 20040123154A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 61/30 Managing network names, e.g. use of aliases or nicknames name-to-address mapping H04L61/45
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/289 Intermediate processing functionally located close to the data consumer application, e.g. in same machine, in same home or in same sub-network
• CPC Class Codes: H04L 67/2895 Intermediate processing functionally located close to the data provider application, e.g. reverse proxies
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561

Abstract

A system and method are provided that permit access to a local resource, such as a media content file, without the security warnings typically encountered. The system has a software component or set of components that validate a hyperlink to a local (or remote) resource in the context of the network security environment and securely allows that hyperlink to access local (or remote) resources without being subject to additional restrictions or user inconvenience. A method for generating the hyperlink is also disclosed.

Claims

1. A computer-implemented local resource access system, comprising:

an initiating program having an instruction that generates a request for access to a resource, the request including a token and having the form of a hyperlink; and

a translator program that receives the access request from the initiating program, the translator program further comprising instructions that generate a return token in response to the access request and instruction that return the return token to the initiating program, the return token further comprising a hyperlink containing a path to the local resource.

2. The system of claim 1, wherein the initiating program further comprises an instruction that receives the return token and an instruction that launches an application to execute the local resource pointed to by the return token.

3. The system of claim 1, wherein the translator program further comprises a local application that is part of the media delivery system.

4. The system of claim 3, wherein the translator program further comprises a local server that is part of a media delivery system.

5. The system of claim 1, wherein the translator program further comprises a web page plug-in and wherein the initiating program further comprises a web page.

6. The system of claim 1, wherein the initiating program further comprises an e-mail client application.

7. The system of claim 1, wherein the initiating program further comprises a messaging client application.

8. The system of claim 1, wherein the translator program further comprises an instruction that applies a network security policy to the return token wherein a validated return token is returned to the initiating program if the network security policy is satisfied.

9. The system of claim 8, wherein the network security policy returns an error report if the network security policy is not satisfied.

10. The system of claim 5, wherein the translator program further comprises an instruction that applies a network security policy to the return token wherein a validated return token is returned to the initiating program if the network security policy is satisfied.

11. The system of claim 10, wherein the network security policy returns an error report if the network security policy is not satisfied.

12. The system of claim 10, wherein the initiating program further comprises a java script that generates a hyperlink to the local resource if the validated return token is returned.

13. The system of claim 1, wherein the return token generation instruction further comprises an instruction for determining the type of hyperlink to be sent to the initiating program.

14. The system of claim 13, wherein the type of hyperlink comprises one of a localhost link, a loopback link, a file link and a protocol link.

15. A computer-implemented method for local resource access, comprising:

generating a request, by an initiating program, for access to a resource, the request including a token and having the form of a hyperlink;

generating a return token, by a translator program, in response to the access request; and

returning the return token to the initiating program, the return token further comprising a hyperlink containing a path to the local resource.

16. The method of claim 15 further comprising receiving the return token by the initiating program and launching an application to execute the local resource pointed to by the return token.

17. The method of claim 15 further comprising, prior to generating a return token, applying a network security policy to the return token wherein a validated return token is returned to the initiating program if the network security policy is satisfied.

18. The method of claim 17, wherein the network security policy returns an error report if the network security policy is not satisfied.

19. The method of claim 15, wherein the return token generation further comprises determining the type of hyperlink to be sent to the initiating program.

20. The method of claim 19, wherein the type of hyperlink comprises one of a localhost link, a loopback link, a file link and a protocol link.