Web application server with secure common gateway interface

• US 5,857,191 A
• Filed: 07/08/1996
• Issued: 01/05/1999
• Est. Priority Date: 07/08/1996
• Status: Expired due to Term

• Current Assignee: Cufer Asset Ltd LLC (Intellectual Ventures LLC)
• Original Assignee: Gradient Technologies (EWC HH&B Holdings LLC)
• Inventors: Blackwell, William C. Jr., Alston, Robin, Farrington, Kevin M.
• Primary Examiner(s): Amsbury, Wayne
• Assistant Examiner(s): CHANNAVAJJALA, SRIRAMA T
• Application Number:
  US08/676,783
• Time in Patent Office: 911 Days
• Field of Search: 707/3, 707/10, 707/1, 707/103, 707/104, 395/200.59, 395/200.33, 395/188.01, 395/684, 395/200.45, 395/831, 380/25, 380/23, 380/49, 370/401, 705/35
• US Class Current: 1/1
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: Y10S 707/99931 Database or file accessing
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing

Abstract

A web browser communicates through a secure local proxy to a web server that has an interface for secure communications. The application server has an application program conforming to the CGI programming model that can run continuously as a process and can maintain state information, such as pointers to next records, thus requiring less computational and memory overhead for a succession of requests.

Claims

1. An application server for receiving from a web browser requests to access an object, the server comprising:

a secure interface for receiving the requests from the web browser over a communications line;

an application program conforming to the common gateway interface (CGI) protocol and stored in a storage medium for accessing the object and for providing data as a result of the access; and

an application program interface with a library of routines stored in a storage medium for communicating between the application program conforming to the CGI protocol and the secure interface to provide secure communications to the object.

2. The server of claim 1, wherein the secure interface receives communications with Distributed Computing Environment Remote Procedure Call (DCE RPC).

3. The server of claim 1, wherein the application program has an open database call to keep the object open between successive requests from the web browser.

4. A method comprising server-implemented steps of:

receiving over the Internet from a web browser a first request for access to a database;

accessing the database in response to the first request according to the CGI protocol;

providing data from the database to the web browser according to the CGI protocol without closing the database;

receiving over the Internet from a web browser a second request for access to a database;

accessing the non-closed database according to the CGI protocol in response to the second request from the web browser; and

providing data from the database to the web browser according to the CGI protocol in response to the second request.

5. The method of claim 4, wherein the receiving steps include receiving requests over DCE RPC.

6. A system responsive to requests from a user with a web browser, the system comprising:

a web server having an interface for allowing secure communications between the server and the web browser, the web server for providing documents to the web browser;

a first object accessible over the Internet; and

a first application server with a secure interface that allows secure communications of the type provided by the web server, the first application server being responsive to the web browser for accessing the first object to retrieve data therefrom and for providing the retrieved data to the web browser independent of the web server.

7. The system of claim 6, further comprising a second object accessible over the Internet, and a second application server having a secure interface and being responsive to the web browser for accessing and retrieving data from the second object independent of the web server.

8. The system of claim 6, wherein the first web server is a DCE-aware server and the secure interface supports DCE.

9. The system of claim 6, further comprising a cell directory service, responsive to a request from the client, for determining a network location of a requested server.

10. The system of claim 6, wherein the application server is multi-threaded.

11. The system of claim 6, wherein the accessible object is a database, and the application server is programmed to access the database during multiple requests without closing the database between requests.

12. The system of claim 6, wherein the first accessible object is a database, and wherein the application server has an application program for accessing the database, and an application programming interface for communicating between the application program and the secure interface.

13. The system of claim 12, wherein the application program conforms to the CGI protocol, and the secure interface supports DCE.