METHODS AND SYSTEMS FOR PROVIDING SECURE ACCESS TO A HOSTED SERVICE VIA A CLIENT APPLICATION

• US 20120084394A1
• Filed: 12/08/2011
• Published: 04/05/2012
• Est. Priority Date: 12/23/2003
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Yeates, Anthony J., Dournov, Pavel A., Shrivastava, Sumeet Updesh, Arunachalam, Vaidyanathan, Whitlock, Donna L.
• Granted Patent: US 9,258,146 B2
• Time in Patent Office: Days
• US Class Current: 709/217
• CPC Class Codes: G06Q 20/206 comprising security or operator identification provisions, e.g. password entry
• CPC Class Codes: H04L 12/6418 Hybrid transport
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34

Abstract

The present invention discloses methods and systems for providing secure user access to services offered by a service provider to a client application over a network. One embodiment includes receiving an application cookie from the client application and populating a service cookie based on information in the application cookie. Information in the service cookie is utilized as a basis for regulating a provision of services to the client application.

Claims

1. A method of selectively providing a retail management service over a computer network, the method comprising:

populating a service cookie with an indication that the retail management service is available to a user having a particular role;

transmitting the populated service cookie to a point-of-sale application;

receiving from the point-of-sale application a request to access the retail management service; and

verifying the service cookie and, upon verification, providing the retail management service to the point-of-sale application.

2. The method of claim 1, wherein populating the service cookie further comprises cross-referencing the particular role with information in a database to determine that the retail management service is available to the user.

3. The method of claim 1, wherein the indication identifies the particular role but does not identify the person specifically.

4. The method of claim 1, wherein receiving the request to access the retail management service further comprises receiving the populated service cookie in conjunction with the request.

5. The method of claim 1, wherein providing the retail management service further comprises providing the retail management service so as to be consistent with a scope of services identified in the populated service cookie.

6. The method of claim 1, wherein populating a service cookie comprises populating the service cookie based at least in part upon information contained in an application cookie received from a point-of-sale client application.

7. The method of claim 6, wherein populating the service cookie further comprises populating based on an identification of services determined to be associated with information in the application cookie.

16. The method of claim 1, wherein populating the cookie further comprises cross-referencing the particular role with information in a database to determine that the service is available to the user.

17. The method of claim 1, wherein the indication identifies the particular role but does not identify the person specifically.

18. The method of claim 1, wherein receiving the request to access the service further comprises receiving the cookie in conjunction with the request.

19. The method of claim 1, wherein providing the service further comprises providing the service so as to be consistent with a scope of services identified in the cookie.

20. The method of claim 1, wherein the cookie is populated based at least in part on information derived from a second cookie that is an application cookie.

8. A method of receiving a retail management service over a computer network, the method comprising:

receiving, from a service provider over the computer network, a service cookie that is populated with an indication of the retail management service;

transmitting the service cookie over the computer network to the service provider, wherein transmitting comprises transmitting in conjunction with a request for the retail management service; and

receiving the retail management service from the service provider.

9. The method of claim 8, wherein receiving the service cookie comprises receiving a service cookie that has been populated based on information included within a populated application cookie.

10. The method of claim 8, further comprising transmitting a populated application cookie over the network to the service provider, the service cookie being populated by the service provider based on information in the application cookie.

11. The method of claim 10, further comprising deleting the application cookie.

12. The method of claim 10, wherein the application cookie includes user role information.

13. The method of claim 10, wherein the application cookie includes a merchant identifier.

14. The method of claim 8, further comprising authenticating a user, determining a role associated with the authenticated user, and including an indication of the role in the application cookie.

15. A method of selectively providing a service over a computer network, the method comprising:

populating a cookie with an indication that the service is available to a user having a particular role;

transmitting the cookie to an application;

receiving from the application a request to access the service; and

verifying the cookie and, upon verification, providing the service to the application.