Access control system for an ISP hosted shared email server

• US 6,374,292 B1
• Filed: 03/07/2000
• Issued: 04/16/2002
• Est. Priority Date: 07/20/1999
• Status: Expired due to Term

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Srivastava, Anil K., Misner, Timothy C., Huff, Daryl A.
• Primary Examiner(s): Maung, Zarni
• Assistant Examiner(s): CALDWELL, ANDREW T
• Application Number:
  US09/520,864
• Time in Patent Office: 770 Days
• Field of Search: 709/206, 709/229, 709/223, 707/9, 713/155-158, 713/201, 340/5.5, 340/5.74, 705/5, 345/741-743
• US Class Current: 709/206
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/4555 Directories for electronic mail or instant messaging
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

Precedence rules that govern the granting of user level services for a domain in a shared mail server for an email provider are disclosed. Accordingly, when a request for the user level service is made, a determination is made whether or not the requested service is a member of a proper set of allowed domain level services. If the requested user level service is within the proper set of allowed domain level services, then the requested user level service is granted. In so doing, the granted user level service becomes a member of the proper subset of the set of allowed domain level services for the shared mail server.

Claims

1. A method of granting a user level service by an ISP hosted shared mail server to a user residing in domain having an associated set of allowed domain level services, comprising:

(a) receiving a request for the user level service at the ISP hosted shared mail server;

(b) determining if the requested user level service is a member of the set of allowed domain level services that are specified by the ISP hosted shared mail server;

(c) determining if the requested user level service is a member of a set of allowed user level service that are specified by a domain administrator;

(d) granting the requested user level service if the requested user level service is a member of the set of allowed domain level services or is member of the set of allowed user level services such that the granted user level service is an allowed user level service.

2. A method as recited in claim 1, wherein when the requested user level service is determined to not be a member of the set of allowed domain level services, then the requested user level service is not granted and is a non-allowed user level service.

3. A method as recited in claim 2, wherein when the user requests a plurality of user level services, then only those of the requested plurality of services that are members of the set of allowed domain level services are granted such that the granted user level services are members of the set of allowed user level services.

4. A method as recited in claim 3, wherein the allowed user level service is selected from the group consisting of:

IMAP, IMAPS, POP3, POP3S, or SMTP.

5. A method as recited in claim 3, wherein the allowed user level service is a security service requiring a credential.

6. A computer-readable medium containing programming instructions for granting a user level service by an ISP hosted shared mail server to a user residing in a domain having an associated set of allowed domain level services, the computer-readable medium comprising computer program code devices configured to cause a computer to execute the operations of:

(a) receiving a request for the user level service at the ISP hosted shared mail server;

(b) determining if the requested user level service is a member of the set of allowed domain level services that are specified by the ISP hosted shared mail server;

(c) determining if the requested user level service is a member of the set of allowed user level services that are specified by a domain administrator; and

(d) granting the requested user level service if the requested user level service is a member of the set of allowed domain level services or is a member of the set of allowed user level services such that the granted user level service is an allowed user level service.

7. A computer-readable medium containing programming instructions for granting a user level service to a user residing in a domain having an associated set of allowed domain level services as recited in claim 6, the computer-readable medium further comprising computer program code devices configured to cause a computer to execute the operations of:

wherein when the requested user level service is determined to not be a member of the set of allowed domain level services, then the requested user level service is not granted and is a non-allowed user level service.

8. A computer-readable medium containing programming instructions for granting a user level service to a user residing in a domain having an associated set of allowed domain level services as recited in claim 6, the computer-readable medium further comprising computer program code devices configured to cause a computer to execute the operations of:

when the user requests a plurality of user level services, then only those of the requested plurality of services that are members of the set of allowed domain level services are granted.