Method and System for Access to Material on a Web Site

• US 20090064284A1
• Filed: 02/26/2008
• Published: 03/05/2009
• Est. Priority Date: 02/26/2007
• Status: Abandoned Application

• Current Assignee: Nordic River Software AB
• Original Assignee: Nordic River Software AB
• Inventors: Dixon, Mark, Poston, Timothy, Shalit, Tomer
• Application Number:
  US12/037,127
• Publication Number:
  US 20090064284A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

A user connected to a first service mounted on a remote server is enabled to connect to a second service, on the same or another server, without new steps required for log-in, and optionally including the passing of parameters from the first to the second service that enable the second service to open in a manner appropriate to the state of the user'"'"'s interaction with the first service at the moment of requesting the connection. In the case of the second service being provided from a second server, authentication is provided by means of an authentication broker, which provides a token that the operating system of the user'"'"'s computer is induced (via its normal response to received messages) to embed in a request for service to the second server, which verifies the token by an exchange with the broker. In either case, once the connection with the second server is achieved, later repeated access may be enabled without the user having to go through the procedure required to enable such access from scratch.

Claims

1. A method under control of a computer system for giving a user access to a plurality of services provided by a computer system, comprising the steps of

obtaining identity data of the user from the user;

validating the user to access a first service of the computer system by analyzing the identity data;

storing validating data indicating that the user is authorized to access the first service;

providing the first service to the user, giving access based on the validating data;

displaying an activation unit arranged to activate an invoke to a second service embedded in a display of the first service;

passing the validating data to the second service upon activation of the activation unit; and

providing the second service to the user, giving access based on the validating data.

2. A method according claim 1, wherein the identity data comprises identity information along with authorization data.

3. A method according to claim 1, wherein the computer system comprises a first computer providing the first service and the second service.

4. A method according to claim 1, wherein the computer system comprises a first computer providing the first service and a second computer providing the second service.

5. A method according to claim 1, wherein the first or second services or both are access to folders.

6. A method according claim 1, wherein the identity data are retained indirectly by a token, or a hashed representation.

7. A method according claim 1, where parameters specific to the second service are passed together with the identity data obtained from the user, modifying the second service.

8. A method according claim 1, where the activation unit represents a file, and the second service enables the user to edit the file.

9. A method according claim 7, where the second service is to analyze and report on the descent relations among the files in a folder specified by the parameters.

10. A method according claim 1, where the second service is a service to invite another user to make use of a file or folder.

11. A method according claim 10, where access to the said folder is automatically granted as a consequence of the said invitation.

12. A method according claim 1, where the second service is a service to display a list of those with access to the said folder, to send a message to one or more of those with access to the said folder, or to remove another user from the list of those with access to the said folder.

13. A method according claim 1, where the second service is an email client, a game, or a puzzle.

14. A method according claim 1, where the first service provides the functions needed by a web community.

15. A method according claim 7, where the second service is a plagiarism detector, optionally applied by default to all the files in a folder specified by the parameters.

16. A method according claim 1, where the second service provides a means whereby the connection between itself and the user'"'"'s computer can be quickly re-established, after the first connection session has ended, when the user re-visits the appropriate page of a web site operated by the second service,

17. A method according claim 16, where the reconnection occurs automatically and completely by an automatic name and password authentication, or by reference to a cookie on the user'"'"'s computer.

18. A method according claim 16, where code on the revisited page obtains and compares a unique identifier for the user'"'"'s computer with an identifier stored at the time of establishing the means whereby the connection between itself and the user'"'"'s computer can be re-established, using matching as a condition for completing the re-connection process.

19. A method according claim 1, where the second service creates an HTML file that the user is invited to save, by the use of the browser'"'"'s download menu, by drag and drop, or otherwise, such that opening the said file results in re-establishing the connection.

20. A method according claim 1, where the second service obtains and compares a unique identifier for the user'"'"'s computer with an identifier stored at the time of establishing the means whereby the connection between itself and the user'"'"'s computer can be re-established, using matching as a condition for completing the re-connection process.

21. A computer program product for giving, to a user already connected to a first server, access to content or a service on a web site provided by a second server, including a computer usable medium having computer program logic stored therein to enable a computer system to perform the steps of:

mounting on the first server a first remote service for a user;

in the display of the first remote service, showing the icon of a second service on the second server;

if the user clicks the icon, the first remote server requesting a token from an authentication broker;

the first remote server receiving a token from the authentication broker;

the first server sending the token to the user'"'"'s system, embedded in a construct to which the normal functioning of the user'"'"'s system responds by;

sending a message from the user'"'"'s system to the second server, in which is embedded a request for initiation of service and a copy of the token;

verifying the token in the request for initiation of service by an exchange between the second server and the authentication broker;

providing the said second service to the user, with no new request to the user for authentication data.

22. A computer comprising a control unit and a memory wherein a computer program product is stored in the memory arranged to be executed on the control unit, wherein the control unit is arranged to perform the steps of;

obtaining identity data of a user from the user;

validating the user to access a first service of the computer by analyzing the identity data;

storing validating data indicating that the user is authorized to access the first data;

providing the first service to the user, giving access based on the validating data;

displaying an activation unit, embedded in a display presenting the first service, arranged to activate a request to access second service; and

passing the validating data to the second service upon activation of the activation unit for enabling provision of the second service to the user, granting access based on the validating data.

23. A computer according to claim 22, wherein the first service is a service/folder provided locally of the computer device and the second service is a service/folder provided from a different computer.

24. A computer according to claim 22, wherein the first service is a service/folder provided locally of the computer device and the second service is also a service/folder provided locally from the computer.

25. A computer program product including a computer usable medium having computer program logic stored therein to enable a computer system to perform the steps of

obtaining identity data of the user from the user;

validating the user to access a first service of the computer system by analyzing the identity data;

storing validating data indicating that the user is authorized to access the first service;

providing the first service to the user, giving access based on the validating data;

displaying an activation unit, embedded in a display presenting the first service, arranged to activate and invoke the second service;

passing the validating data to the second service upon activation of the activation unit; and

providing the second service to the user, giving access based on the validating data.