Method and system to enable access to multiple restricted applications through user's host application

• US 20050044380A1
• Filed: 08/21/2003
• Published: 02/24/2005
• Est. Priority Date: 08/21/2003
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Forlenza, Randolph Michael, Bostick, James Edward, Nambiar, Pradeep
• Application Number:
  US10/645,178
• Publication Number:
  US 20050044380A1
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers

Abstract

An example of a solution provided here comprises registering a first restricted application with at least one additional restricted application, and in response to a user performing only a single sign-on for the first restricted application, providing access to the first restricted application for the user, presenting to the user information identifying the at least one additional restricted application, and in response to the user'"'"'s selection, providing access to the at least one additional restricted application.

Claims

1. A method for permitting access to applications, said method comprising:

registering a first restricted application with at least one additional restricted application; and

in response to a user performing only a single sign-on for said first restricted application,

providing access to said first restricted application for said user;

presenting to said user information identifying said at least one additional restricted application; and

in response to said user'"'"'s selection, providing access to said at least one additional restricted application.

2. The method of claim 1, wherein said registering further comprises:

performing a single registration for all authorized users of said first restricted application.

3. The method of claim 1, wherein said registering further comprises:

performing a plurality of registrations,

for a plurality of groups of authorized users of said first restricted application; and

providing an access level for each of said groups.

4. The method of claim 1 wherein:

said first restricted application is an application other than merely a security mechanism.

5. The method of claim 1 wherein:

no additional key repository is required by said restricted applications.

6. The method of claim 1 wherein:

said presenting further comprises said first restricted application sending a document in hypertext markup language.

7. The method of claim 1, wherein said user'"'"'s selection further comprises:

receiving via said first restricted application a selection signal from said user; and

in response to said selection signal, sending via said first restricted application a request for access to said at least one additional restricted application.

8. The method of claim 7, wherein:

said user clicks a mouse button when a cursor is positioned over a predefined area of said presented information, to produce said selection signal.

9. The method of claim 1, further comprising:

collecting stored information regarding a user and an appropriate level of access; and

sending to said user;

a token and

a redirect URL pointing to said at least one additional restricted application.

10. The method of claim 9, wherein:

said token is encrypted; and

said token represents said appropriate level of access.

11. The method of claim 1, wherein:

one of said restricted applications is an intranet web server.

12. The method of claim 1, wherein:

one of said restricted applications is a portal.

13. The method of claim 1, wherein:

one of said restricted applications is a web application.

14. A method for permitting access to applications, said method comprising:

registering a first restricted application with a second restricted application; and

in response to a user;

signing on to said first restricted application only,

and requesting access to said second restricted application,

automatically logging in to said second restricted application, for said user;

wherein;

no new key repository is required by said first and second restricted applications.

15. The method of claim 14, wherein said automatically logging in further comprises:

under control of said second restricted application,

receiving from said first restricted application, a request to initiate said automatically logging in;

sending to said user'"'"'s client, via said first restricted application a response, having a complete-automatic-log-in URL, and token;

receiving directly from said user'"'"'s client a request, having said token; and

sending directly to said user'"'"'s client a response, having authenticated session information, and a welcome URL.

16. The method of claim 15, further comprising:

in response to said request to initiate,

creating said token;

storing a copy of said token; and

associating said token with said request to initiate.

17. The method of claim 15, further comprising:

verifying said token received from said user'"'"'s client; and

establishing a relationship and access level for said user'"'"'s client.

18. The method of claim 15 wherein:

said token represents an appropriate level of access.

19. The method of claim 14, further comprising:

under control of said first restricted application,

receiving from said user'"'"'s client a request for access to said second restricted application;

in response to said request for access, determining for said user, and said second restricted application, what level of access should be granted; and

sending to said second restricted application a request to initiate said automatically logging in.

20. A system for permitting access to applications, said system comprising:

means for registering a first restricted application with a second restricted application; and

means for automatically logging in to said second restricted application, for a user;

wherein;

no additional key repository is required by said first and second restricted applications; and

said means for automatically logging in is responsive to said user;

signing on to said first restricted application only,

and requesting access to said second restricted application.

21. The system of claim 20, wherein said means for automatically logging in further comprises:

means for receiving from said first restricted application, a request to initiate said

means for automatically logging in;

means for sending to said user'"'"'s client, via said first restricted application, a response, having a complete-automatic-log-in URL, and a token;

means for receiving directly from said user'"'"'s client a request, having said token; and

means for sending directly to said user'"'"'s client a response, having authenticated session information, and

a “

welcome”

URL or initial URL.

22. The system of claim 21, further comprising:

means for creating said token;

means for storing a copy of said token; and

means for associating said token with said request to initiate.

23. The system of claim 21, further comprising:

means for verifying said token received from said user'"'"'s client; and

means for establishing a relationship and access level for said user'"'"'s client.

24. The system of claim 21, wherein:

said token could represent an appropriate level of access.

25. The system of claim 20, further comprising:

means for receiving from said user'"'"'s client a request for access to said second restricted application;

means for determining for said user, and said second restricted application, what level of access should be granted; and

means for sending to said second restricted application a request to initiate said means for automatically logging in.

26. A computer-usable medium, having computer-executable instructions for permitting access to applications, said computer-usable medium comprising:

means for registering a first restricted application with a second restricted application; and

means for automatically logging in to said second restricted application, for a user;

wherein;

no additional key repository is required by said first and second restricted applications; and

said means for automatically logging in is responsive to said user;

signing on to said first restricted application only,

and requesting access to said second restricted application.

27. The computer-usable medium of claim 26, wherein said means for automatically logging in further comprises:

means for receiving from said first restricted application, a request to initiate said means for automatically logging in;

means for sending to said user'"'"'s client, via said first restricted application, a response, having a complete-automatic-log-in URL, and token;

means for receiving directly from said user'"'"'s client a request, having said token; and

means for sending directly to said user'"'"'s client a response, having authenticated session information, and a welcome URL.

28. The computer-usable medium of claim 27, further comprising:

means for creating said token;

means for storing a copy of said token; and

means for associating said token with said request to initiate.

29. The computer-usable medium of claim 27, further comprising:

means for verifying said token received from said user'"'"'s client; and

means for establishing a relationship and access level for said user'"'"'s client.

30. The computer-usable medium of claim 27, wherein:

said token represents an appropriate level of access.

31. The computer-usable medium of claim 26, further comprising:

means for receiving from said user'"'"'s client a request for access to said second restricted application;

means for determining for said user, and said second restricted application, what level of access should be granted; and

means for sending to said second restricted application a request to initiate said means for automatically logging in.