SYSTEM AND METHOD FOR CONTROLLING WEB PAGES ACCESS RIGHTS

• US 20080163367A1
• Filed: 11/22/2007
• Published: 07/03/2008
• Est. Priority Date: 12/27/2006
• Status: Abandoned Application

• Current Assignee: Hon Hai Precision Industry Co., Ltd.
• Original Assignee: Hon Hai Precision Industry Co., Ltd.
• Inventors: YEH, CHIEN-FA, LEE, CHUNG-I, LIN, BOR-CHUAN
• Application Number:
  US11/944,423
• Publication Number:
  US 20080163367A1
• Time in Patent Office: Days
• US Class Current: 726/21
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment

Abstract

An exemplary method for controlling Web pages access rights is provided. The method includes: inputting an address of a Web page from a user at a client computer for accessing the Web page; popping up a login box for prompting the user to input a web page login at the client computer; receiving the web page login and determining whether the user is permitted to log on the Web page by searching a corresponding user account stored in a database; permitting the user to log on the Web page if the web page login input by the user is matched with the corresponding user account; determining whether the user has a right of accessing the Web page by searching all rights corresponding to the web page login from the database; and reporting a result denoting whether the user is authorized to access the Web page. A related system is also provided.

Claims

1. A system for controlling Web pages access rights, the system comprising an application server, a database and at least one client computer, the application server comprising:

an authentication filter configured for detecting whether a user has successfully logged on a Web page, and popping up a login box for prompting the user to input a web page login at the at least one client computer;

a verifying unit configured for receiving the web page login from the at least one client computer, and determining whether the web page login is matched with a corresponding user account from the database; and

an authorization filter comprising an authorizing unit configured for determining whether the user has a right of accessing the Web page by searching all rights corresponding to the web page login from the database, and reporting a result denoting whether the user is authorized to access the Web page.

2. The system for controlling Web pages access rights as described in claim 1, wherein the web page login input by the user comprises a user name and a password corresponding to the user name.

3. The system for controlling Web pages access rights as described in claim 1, wherein the application server further comprises a configuration file configured for storing configurations of the application server, and comprises a spring framework inversion of control container that is an execution environment of the configuration file.

4. The system for controlling Web pages access rights as described in claim 1, wherein the database is configured for storing user accounts data that comprising user names and passwords, and storing rights of accessing the Web pages corresponding to each user name.

5. The system for controlling Web pages access rights as described in claim 4, wherein the rights of accessing the Web pages are saved as a lightweight directory access protocol form in the database.

6. A method for controlling Web pages access rights, the method comprising:

inputting an address of a Web page from a user at a client computer for accessing the Web page;

popping up a login box for prompting the user to input a web page login at the client computer;

receiving the web page login and determining whether the user is permitted to log on the Web page by searching a corresponding user account stored in a database;

permitting the user to log on the Web page if the web page login input by the user is matched with the corresponding user account;

determining whether the user has a right of accessing the Web page by searching all rights corresponding to the web page login from the database; and

reporting a result denoting whether the user is authorized to access the Web page.

7. The method for controlling Web pages access rights as described in claim 6, wherein the web page login input by the user comprises a user name and a password corresponding to the user name.

8. The method for controlling Web pages access rights as described in claim 6, wherein the step of reporting a result further comprises:

reporting the result denoting that the user is authorized to access the Web page if the user has the right of accessing the Web page;

or

reporting the result denoting that the user is forbidden access to the Web page if the user does not have the right of accessing the Web page.

9. The method for controlling Web pages access rights as described in claim 6, further comprising a step of:

popping up the login box once more for prompting the user to input a valid web page login if the user is not permitted to log on the Web page.

10. The method for controlling Web pages access rights as described in claim 6, wherein the database is configured for storing user accounts data that comprising user names and passwords, and storing rights of accessing the Web pages corresponding to each user name.

11. The method for controlling Web pages access rights as described in claim 10, wherein the rights of accessing the Web pages are saved as a lightweight directory access protocol form in the database.