Providing Selective Access To A Web Site

• US 20110185412A1
• Filed: 04/04/2011
• Published: 07/28/2011
• Est. Priority Date: 01/13/2006
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Crespo, Arturo E., Perrochon, Louis Vincent
• Granted Patent: US 8,347,371 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms

Abstract

A restricted web site has features that are selectively exposed to clients. A screening web site interacts with clients and collects data about the clients using passive and/or active techniques. The screening site generates a token for the client, and includes data in the token identifying the token and describing the client. The token is encoded in a cookie and saved in the client'"'"'s web browser. The client subsequently provides the token to the restricted site. The restricted site validates the token to ensure that it is legitimate, has not expired, and has not been used before. The restricted site selects one or more features to provide to the client based on the data about the client in the token and/or on other information. If the client does not present a token or the token is invalid, the restricted site does not expose any features to the client.

Claims

1. A method for providing a user with restricted features of a restricted web site, comprising:

providing a restricted web site having a set of restricted features, the restricted site adapted to;

receive from the user a token having a key incorporated therein;

validate the token received from the user;

responsive to a determination that the token is invalid, provide the user with none of the features in the set of restricted features; and

responsive to a determination that the token is valid;

retrieve data about the user from a database entry using the key incorporated into the token;

determine selected features in the set of restricted features that the user may access based at least in part on the data retrieved from the database entry; and

provide the selected features to the user.

2. The method of claim 1, wherein the restricted site is further adapted to interact with the user as if the restricted site did not exist in response to a determination that the token is invalid.

3. The method of claim 1, further comprising:

providing another restricted web site adapted to receive the token from the user and selectively provide at least some of the features in the set to the user based at least in part on the received token.

4. The method of claim 1, wherein the restricted site is further adapted to:

prompt the user to provide an authentication credential;

receive the authentication credential from the user;

validate the login/password received from the user; and

provide the selected features to the user based at least in part on a determination that the login/password is valid.

5. The method of claim 1, wherein validating the token received from the user comprises:

determining whether the token is legitimate;

determining whether the token has expired; and

determining whether the token has been used before.

6. The method of claim 1, further comprising:

providing a screening web site adapted to;

store data about the user in the database entry identified by the key; and

selectively provide the user with the token having the key incorporated therein.

7. The method of claim 6, wherein the screening web site is further adapted to:

incorporate at least a part of the data about the user into the token provided to the user.

8. A system for providing a user with restricted features of a restricted web site, comprising:

a restricted web site having a set of restricted features comprising;

a token validation module for receiving from the user a token having a key incorporated therein, validating the token received from the user, responsive to a determination that the token is invalid, providing the user with none of the features in the set of restricted features, and, responsive to a determination that the token is valid, retrieving data about the user from a database entry using the key incorporated into the token; and

a selective access module for determining selected features in the set of restricted features that the user may access based at least in part on the data retrieved from the database entry, and providing the selected features to the user.

9. The system of claim 8, wherein the token validation module is further adapted to interact with the user as if the restricted site did not exist in response to a determination that the token is invalid.

10. The system of claim 8, further comprising another restricted web site adapted to receive the token from the user and selectively provide at least some of the features in the set to the user based at least in part on the received token.

11. The system of claim 8, wherein the selective access module is further adapted to:

prompt the user to provide an authentication credential;

receive the authentication credential from the user;

validate the login/password received from the user; and

provide the selected features to the user based at least in part on a determination that the login/password is valid.

12. The system of claim 8, wherein the token validation module is further adapted to:

determine whether the token is legitimate;

determine whether the token has expired; and

determine whether the token has been used before.

13. The system of claim 8, further comprising:

a screening web site comprising;

a data collection module for storing data about the user in the database entry identified by the key; and

a token generation module for selectively providing the user with the token having the key incorporated therein.

14. The system of claim 13, wherein the token generation module incorporates at least a part of the data about the user into the token provided to the user.

15. A non-transitory computer-readable storage medium encoded with executable computer program code for providing a user with restricted features of a restricted web site, the computer program code comprising program code for:

providing a restricted web site having a set of restricted features, the restricted site adapted to;

receive from the user a token having a key incorporated therein;

validate the token received from the user;

responsive to a determination that the token is invalid, provide the user with none of the features in the set of restricted features; and

responsive to a determination that the token is valid;

retrieve data about the user from a database entry using the key incorporated into the token;

determine selected features in the set of restricted features that the user may access based at least in part on the data retrieved from the database entry; and

provide the selected features to the user.

16. The storage medium of claim 15, wherein the restricted site is further adapted to interact with the user as if the restricted site did not exist in response to a determination that the token is invalid.

17. The storage medium of claim 15, further comprising:

providing another restricted web site adapted to receive the token from the user and selectively provide at least some of the features in the set to the user based at least in part on the received token.

18. The storage medium of claim 15, wherein the restricted site is further adapted to:

prompt the user to provide an authentication credential;

receive the login/password pair from the user;

validate the login/password received from the user; and

provide the selected features to the user based at least in part on a determination that the login/password is valid.

19. The storage medium of claim 15, wherein validating the token received from the user comprises:

determining whether the token is legitimate;

determining whether the token has expired; and

determining whether the token has been used before.

20. The storage medium of claim 15, wherein the computer program code further comprises program code for:

providing a screening web site adapted to;

store data about the user in the database entry identified by the key; and

selectively provide the user with the token having the key incorporated therein.