User controlled browser identification disclosing mechanism

• US 5,848,412 A
• Filed: 11/19/1996
• Issued: 12/08/1998
• Est. Priority Date: 11/19/1996
• Status: Expired due to Term

• Current Assignee: NCR Corporation
• Original Assignee: NCR Corporation
• Inventors: Friedman, Lee G., Rowland, Bruce R.
• Primary Examiner(s): Lintz, Paul R.
• Assistant Examiner(s): Colbert, Ella
• Application Number:
  US08/752,421
• Time in Patent Office: 749 Days
• Field of Search: 707/9, 707/103, 707/10, 902/21
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A user-controlled information disclosure process for web user identification. In this process, a user information database, a BrowserID Client applet, and a BrowserID Website database are configured at a user terminal. The user information database contains a plurality of information records about a user'"'"'s identification information and access levels for the respective information records. The BrowserID Website database contains the names of web sites and access levels for the respective web sites. In response to a request for user information from a web site, the BrowserID Client applet checks the existing access level in the BrowserID Website database for the web site (or negotiates a new level), and if appropriate, retrieves the access key granted by the web site to gain access to a controlled portion of a website.

Claims

1. A method for providing information to a web site at a user terminal, comprising the steps of:

at the user terminal,

(a) establishing a plurality of information records with respective access level indicators for indicating access levels;

(b) receiving a request from the web site with an access level being associated with the web site;

(c) checking the access level for the web site; and

(d) retrieving information records based on said access level indicators associated with the information records and the access level associated with the web site.

2. The method of claim 1, wherein in step (a), said access level indicators indicate different access levels.

3. The method of claim 2, in said step (a) the access level associated with the web site is defined by the user terminal.

4. A method for providing information to a plurality of web sites at a user terminal, comprising the steps of:

at the user terminal,

(a) establishing a plurality of first type of records containing access levels associated with the web sites;

(b) establishing a plurality of second type of records, each one of said second type of records containing user information and access level associated with said one record;

(c) receiving a request from one of the web sites;

(d) checking access level for the web site from said first type of records; and

(e) retrieving information from said second type of records based on the access level associated with the web site and the access levels associated with said second type of records.

5. The method of claim 4, wherein in step (a), said access levels are defined by the user terminal.

6. An apparatus for providing information to a web site at a user terminal, comprising:

at the user terminal,

(a) a receiver circuit for receiving a request from the web site with an access level being associated with the web site; and

(b) a processor logic for checking the access level for the web site; and

for retrieving information based on the access level associated with the web site.

7. The apparatus of claim 6, the access level associated with the web site is defined at the user terminal.

8. An apparatus for providing information to a web site at a user terminal, comprising:

at the user terminal,

(a) receiver circuit for receiving a request from the web site with an access level being associated with the web site;

(b) a storage medium for storing a plurality of information records with respective access level indicators for indicating access levels; and

(c) a processor logic for checking the access level for the web site; and

for retrieving information records based on said access level indicators associated with the information records and the access level associated with the web site.

9. The apparatus of claim 8, wherein said access level indicators indicate different access levels.

10. The apparatus of claim 9, wherein the access level associated with the web site is defined at the user terminal.

11. An apparatus for providing information to a plurality of web sites at a user terminal, comprising:

at the user terminal,

(a) a first storage medium for storing a plurality of first type of records containing access levels associated with the web sites;

(b) a second storage medium for storing a plurality of second type of records, each one of said second type of records containing user information and access level associated with said one record;

(c) a receiver circuit for receiving a request from one of the web sites; and

(d) a processor logic for checking access level for the web site from said first type of records, and for retrieving information from said second type of records based on the access level associated with the web site and the access levels associated with said second type of records.

12. The apparatus of claim 11, wherein said access levels are defined by the user terminal.