Client inherited functionally derived from a proxy topology where each proxy is independently configured

• US 6,112,228 A
• Filed: 02/13/1998
• Issued: 08/29/2000
• Est. Priority Date: 02/13/1998
• Status: Expired due to Term

• Current Assignee: Micro Focus Software, Inc. (Open Text Corporation)
• Original Assignee: Novell Incorporated (Open Text Corporation)
• Inventors: Earl, Douglas G., Newey, Cory R.
• Primary Examiner(s): Maung, Zarni
• Assistant Examiner(s): Moezzi, Mahmanzar
• Application Number:
  US09/023,895
• Time in Patent Office: 928 Days
• Field of Search: 709/227, 709/230, 709/225, 709/229, 709/265, 709/204
• US Class Current: 709/205
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A system and method efficiently provides services offered by proxy servers to client computers coupled to a network. The system comprises a proxy server interface configured to expose the services within a web brower executing on a client computer. The services available to the client are dependent upon the topology of the network coupling the client to the proxy servers and the access rights of the client with respect to the services. The invention further provides an efficient method that allows clients to inherit functionality from the proxy servers as a function of the network topology and access rights.

Claims

1. A method for efficiently providing services to a user of a computer from a plurality of proxy servers interconnected to form a network topology having a proxy chain, the method comprising the steps of:

configuring the topology of the network to increase the services available to the user by directly connecting the computer to a first proxy server;

passing a list of the available services from each remaining proxy server along the proxy chain to the first proxy server said list including an identified first default function list and a second separate to be authenticated function list so that the available services are selectively inherited by the first proxy server;

authenticating a specific service for a client upon user request;

providing a specialized user interface of the computer using a proxy server interface of the first proxy server; and

displaying the inherited services including separate said first and second lists to the user of the computer.

2. The method of claim 1 further comprising the steps of, wherein the computer is a client computer executing a browser application:

issuing a request for data at a web site from the browser application to the first proxy server;

if the client is authorized to access information from the web site, fulfilling the request at the first proxy server;

transferring a data stream from the first proxy server to the browser application.

3. The method of claim 2 wherein the step of fulfilling comprises one of the steps of:

retrieving the data locally from a memory of the client; and

remotely acquiring the data from the web site.

4. The method of claim 3 wherein the step of remotely acquiring comprises the steps of:

forwarding the request over the network from the first proxy server to a web server; and

transferring the data stream from the web server to the proxy server.

5. The method of claim 4, wherein the step of displaying comprises the steps of:

inserting the proxy server interface into the data stream transferred to the browser application;

displaying the proxy server interface on a display screen of the client computer, the proxy server interface including graphical objects representing the inherited services within the specialized user interface; and

selecting the inherited services by one of pointing at the objects with a pointing device and pressing keys of a keyboard.

6. The method of claim 5, wherein the graphical objects are buttons and wherein the pointing device is a mouse, further including the steps of saving an original document in response to a user request, and responding to the user with a display of a graphical object which refers to the original document.

7. The method of claim 2 wherein the first proxy server executes on one of the client computer and another server computer.

8. The method of claim 2 wherein the list of the available services comprises one of a default function list containing services that do not require authentication by the client to the network and an authenticated function list containing services that require authentication on behalf of the client along with the services that do not require authentication.

9. The method of claim 8 wherein the step of passing comprises the steps of propagating the list downstream over the proxy chain to the first proxy server such that the inherited services are available to the client depending upon the client'"'"'s access rights.

10. The method of claim 9 wherein the step of configuring comprises the step of manipulating the topology of the proxy servers coupled to the network to thereby alter the quantity and selection of services provided to the client.

11. Apparatus for efficiently providing services to a user of a computer from a plurality of proxy servers interconnected to form a network topology having a proxy chain, the apparatus comprising:

means for configuring the topology of the network to increase the services available to the user by directly connecting the computer to a first proxy server;

means for passing a list said list, including an identified first default function list and a second separate to be authorized function list of the available services from each remaining proxy server along the proxy chain to the first proxy server so that the available services are inherited by the first proxy server; and

means for displaying the inherited services in the form of said first default function list and a second to be authorized function list within a specialized user interface of the computer using a proxy server interface of the first proxy server.

12. The apparatus of claim 11 wherein the computer is a client computer executing a browser application and wherein the first proxy server executes on one of the client computer and another server computer.

13. The apparatus of claim 12 wherein the list of the available services comprises one of a default function list containing services that do not require authentication by the client to the network and an authenticated function list containing services that require authentication on behalf of the client along with the services that do not require authentication.