System and method for dynamically disabling partially streamed content

• US 20050010673A1
• Filed: 07/07/2003
• Published: 01/13/2005
• Est. Priority Date: 07/07/2003
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: R., Sivasankaran, Satuloori, Sridhar
• Granted Patent: US 7,308,504 B2
• Time in Patent Office: Days
• US Class Current: 709/231
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A system and method for dynamically disabling partially streamed content may include a server receiving a request from a client. A session may be initiated or continued in response to the request. The server may begin to stream content to the client as a partial fulfillment of the request. While processing the request, the server may determine if the partially streamed content should be disabled. In response to determining that the partially streamed content should be disabled, the server may disable the partially streamed content without terminating the session. Disabling the partially streamed content may involve preventing the client from accessing content referenced by a hyperlink associated with the partially streamed content, or may involve the use of a controller located on the client to disable content streamed to the client.

Claims

1. A method, comprising:

processing a request from a client, wherein the request initiates or continues a session between a server and the client;

streaming out content from the server to the client as a partial fulfillment of the request;

while processing the request;

determining if the content should be disabled; and

if the content should be disabled, disabling the content without terminating the session.

2. The method of claim 1, wherein said determining comprises detecting an occurrence of a security violation during said processing.

3. The method of claim 1, wherein said determining comprises detecting an occurrence of a process timeout.

4. The method of claim 1, wherein said disabling comprises preventing the client from accessing content referenced by a hyperlink associated with the content streamed to the client.

5. The method of claim 4, wherein said preventing comprises:

maintaining a lookup table of all hyperlinks associated with the content streamed to the client; and

invalidating the hyperlinks by modifying said lookup table to redirect the hyperlinks to an error message.

6. The method of claim 1, wherein said disabling comprises instructing a controller on the client to disable content received by the client.

7. The method of claim 6, wherein the controller is provided by the server independent from any application running on the server.

8. The method of claim 6, wherein the controller is specific to an application running on server.

9. The method of claim 6, wherein the controller is operable to disable the content by prohibiting the content from being copied or saved.

10. The method of claim 6, wherein the controller is provided by the client.

11. The method of claim 6, wherein the controller is sent to the client.

12. The method of claim 11, wherein the controller is sent to the client at the beginning of the session.

13. The method of claim 11, wherein the controller is sent to the client upon determining that the content should be disabled.

14. A system, comprising:

one or more processors; and

memory accessible by the one or more processors and configured to store program instructions executable by the one or more processors to implement a server configured to;

process a request from a client, wherein said request initiates or continues a session between the server and the client;

stream out content from the server to the client as a partial fulfillment of the request;

wherein the server comprises a content disabling mechanism configured to;

determine if the content should be disabled while processing said request; and

if the content should be disabled, disable the content without terminating said session.

15. The system of claim 14, wherein the content disabling mechanism is configured to determine that said content should be disabled in response to an occurrence of a security violation during the processing of the request.

16. The system of claim 14, wherein the content disabling mechanism is configured to determine that said content should be disabled in response to an occurrence of a process timeout.

17. The system of claim 14, wherein the content disabling mechanism is configured to prevent a user from accessing content referenced by a hyperlink associated with the content streamed to the client.

18. The system of claim 17, wherein to prevent a user from accessing content referenced by a hyperlink, the content disabling mechanism is configured to maintain a lookup table of all hyperlinks associated with the content streamed to the client, and invalidate one or more of the hyperlinks by modifying said lookup table to redirect the one or more hyperlinks to an error message.

19. The system of claim 14, further comprising a controller, wherein the controller is operable by the content disabling mechanism to prevent a user from accessing said hyperlink associated with the content.

20. The system of claim 19, wherein the controller is provided by the server independent from any application run on the server.

21. The system of claim19, wherein the controller is specific to an application run by the server.

22. The system of claim 19, wherein the controller is operable by the content disabling mechanism to prohibit the content from being copied or saved.

23. The system of claim 19, wherein the controller is built into the client.

24. The system of claim 19, wherein the controller is sent to the client.

25. The system of claim 24, wherein the controller is sent to the client at the beginning of the session.

26. The system of claim 24, wherein the controller is sent to the client upon determining that said content should be invalidated.