METHOD AND SYSTEM FOR PROVIDING A CLIENT ACCESS TO AN EXTERNAL SERVICE VIA AN APPLICATION SERVICES PLATFORM

• US 20130117810A1
• Filed: 12/28/2012
• Published: 05/09/2013
• Est. Priority Date: 10/02/2006
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Cheenath, Manoj, Chasman, Doug
• Granted Patent: US 8,776,082 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1017 based on a round robin mechanism
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561

Abstract

In accordance with embodiments, there are provided mechanisms and methods for providing a client access to an external service via an application services platform. These mechanisms and methods for providing a client access to an external service via an application services platform can enable embodiments to provide effective access to such external service without necessarily forcing the client to access the external service separately with respect to the application services platform. The ability of embodiments to provide such technique can enable the integration of an external service with an application services platform, thus allowing the client to access the external service in a more effective manner.

Claims

1. A method, comprising:

detecting a client request from an application supported by an application services platform including at least one application server to access an external service, the client request including authentication information for authenticating a client executing the application;

identifying the client from the authentication;

determining whether the client request complies with at least one rule specific to the identified client, including;

identifying statistics associated with the client request, wherein the statistics are gathered from tracking previous usage of the external service;

gauging an amount of usage of the external service required by the client request, based on the statistics gathered from tracking previous usage of the external service;

comparing the amount of usage of the external service gauged to be required by the client request to a predetermined amount of usage of the external service allowed by one of the rules specific to the client; and

determining that the client request does not comply with the one of the rules specific to the client when the amount of usage of the external service gauged to be required by the client request exceeds the predetermined amount of usage of the external service allowed by one of the rules specific to the client.; and

determining that the client request complies with the one of the rules specific to the client when the amount of usage of the external service gauged to be required by the client request does not exceed the predetermined amount of usage of the external service allowed by one of the rules specific to the client;

authenticating the client request using the authentication information for determining whether the client sent the client request, by the application services platform;

preparing an invocation message to invoke the external service on behalf of the client only in response to a determination based on the authentication that the client sent the client request and the determination that the client request complies with the one of the rules specific to the client, the invocation message including message information; and

sending the invocation message to the external service.

2. The method of claim 1, wherein the application includes a network browser.

3. The method of claim 1, wherein the external service is not provided by the application services platform.

4. The method of claim 1, wherein the message information is received, at least in part, with the client request.

5. The method of claim 1, wherein another one of the rules relates to a protocol associated with the client request.

6. The method of claim 1, wherein another one of the rules relates to an address range associated with the client request.

7. The method of claim 1, wherein another one of the rules relates to a size of the client request.

8. The method of claim 1, wherein another one of the rules relates to a number of the client requests.

9. The method of claim 1, wherein the at least one rule is user configurable.

10. The method of claim 1, wherein the at least one rule is different for a plurality of other clients.

11. The method of claim 1, wherein the client request is reformatted to prepare the invocation message.

12. The method of claim 1, wherein the application services platform includes a multi-tenant database system.

13. The method of claim 1, wherein the invocation message is sent to a proxy to cause the message information to be delivered to the external service.

14. The method of claim 1, further comprising:

receiving from the proxy a response to the invocation message issued by the external service, the response received from the proxy including a date of receipt by the proxy, a description of the proxy, and a description of content provide by the external service;

determining whether the response complies with at least one other rule separate from the at least one rule specific to the identified client;

conditionally processing the response to forward the processed response to the client, wherein the response is processed when it is determined that the response complies with the at least one other rule and the response is not processed when it is determined that the response does not comply with the at least one other rule;

wherein the processing includes integrating data included in the response with data stored at the application services platform.

15. The method of claim 1, wherein the external service includes a data validation service for validating data stored by the application services platform.

16. The method of claim 1, wherein another one of the rules defines whether the external service is allowed to be accessed by the client.

17. The method of claim 1, wherein the tracking of the previous usage of the external service is specific to previous usage of the external service by the client.

18. A non-transitory machine-readable medium carrying one or more sequences of instructions which, when executed by one or more processors, cause the one or more processors to carry out the steps of:

detecting a client request from an application supported by an application services platform including at least one application server to access an external service, the client request including authentication information for authenticating a client executing the application;

identifying the client from the authentication;

determining whether the client request complies with at east one rule specific to the identified client, including;

identifying statistics associated with the client request, wherein the statistics are gathered from tracking previous usage of the external service;

gauging an amount of usage of the external service required by the client request based on the statistics gathered from tracking previous usage of the external service;

comparing the amount of usage of the external service gauged to be required by the client request to a predetermined amount of usage of the external service allowed by one of the rules specific to the client; and

determining that the client request does not comply with the one of the rules specific to the client when the amount of usage of the external service gauged to be required by the client request exceeds the predetermined amount of usage of the external service allowed by one of the rules specific to the client; and

determining that the client request complies with the one of the rules specific to the client when the amount of usage of the external service gauged to be required by the client request does not exceed the predetermined amount of usage of the external service allowed by one of the rules specific to the client;

authenticating the client request using the authentication information for determining whether the client sent the client request, by the application services platform;

preparing an invocation message to invoke the external service on behalf of the client only in response to a determination based on the authentication that the client sent the client request and the determination that the client request complies with the one of the rules specific to the client, the invocation message including message information; and

sending the invocation message to the external service.

19. An apparatus, comprising:

a processor; and

one or more stored sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of;

detecting a client request from an application supported by an application services platform including at least one application server to access an external service, the client request including authentication information for authenticating a client executing the application;

identifying the client from the authentication;

determining whether the client request complies with a least one rule specific to the identified client, including;

identifying statistics associated with the client request, wherein the statistics are gathered from tracking previous usage of the external service;

gauging an amount of usage of the external service required by the client request, based on the statistics gathered from tracking previous usage of the external service;

comparing the amount of usage of the external service gauged to be required by the client request to a predetermined amount of usage of the external service allowed by one of the rules specific to the client; and

determining that the client request does not comply with the one of the rules specific to the client when the amount of usage of the external service gauged to be required by the client request exceeds the predetermined amount of usage of the external service allowed by one of the rules specific to the client; and

determining that the client request complies with the one of the rules specific to the client when the amount of usage of the external service gauged to be required by the client request does not exceed the predetermined amount of usage of the external service allowed by one of the rules specific to the client;

authenticating the client request using the authentication information for determining whether the client sent the client request, by the application services platform;

preparing an invocation message to invoke the external service on behalf of the client only in response to a determination based on the authentication that the client sent the client request and the determination that the client request complies with the one of the rules specific to the client, the invocation message including message information; and

sending the invocation message to the external service.