System and method to provide secure navigation to resources on the internet

• US 6,381,579 B1
• Filed: 06/17/1999
• Issued: 04/30/2002
• Est. Priority Date: 12/23/1998
• Status: Expired due to Term

• Current Assignee: X Corp. (f/k/a Twitter, Inc.) (X Holdings Corp.)
• Original Assignee: International Business Machines Corporation
• Inventors: Richards, Michael Leslie, Cox, Martin S., Coyle, R. Scott, Gervais, Paul M., Thomas, Jay Joseph, Hawley, Kenneth J., Neild, Gerald O. Jr., Barrentine, Alexander C.
• Primary Examiner(s): Choi, Kyle
• Assistant Examiner(s): ROBERTSON, DAVID
• Application Number:
  US09/336,365
• Time in Patent Office: 1,048 Days
• Field of Search: 705/8, 707/9, 707/10, 707/100, 709/201, 709/202, 709/203, 709/228, 345/335
• US Class Current: 705/7.13
• CPC Class Codes: G06Q 10/06311 Scheduling, planning or task assignment for a person or group
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

Provide an electronic-business-to-electronic-business portal that organizes the access to extended business applications. A method allows end users to access a server using standard Web browsers, and then view their own customized menu of applications. Enhanced security and administrative tools allow this portal to be shared throughout enterprises and across supply chains, providing secure access to collaborative applications by business partners and suppliers. Access to specific applications is granted to authorized users and teams, within and outside of a company. Real-time, on-line registration of users allows for rapid changes in teams and projects. Users can be added, deleted, or have access levels altered to reflect changes in the makeup of teams. Provide a common infrastructure for application administration, security management, and directory use, which can help reduce information technology (IT) costs and speed solution deployment.

Claims

1. An electronic-business-to-electronic business portal that organizes access to extended business applications wherein enhanced security and administrative tools allow said portal to be shared throughout enterprises and across supply chains, providing secure access to collaborative applications by business partners and suppliers, comprising:

means for implementing a plurality of dynamic containers wherein said dynamic containers are configurable and are represented in a desired hierarchy, said hierarchy including at least one resource link;

means for adding and deleting resource links to a list of available resource objects in said hierarchy, said resource links allowing user access to an application represented by a resource object, wherein said resource objects are chosen from a set of resource classes defining general categories of application types and the parameters needed to access said applications;

means for managing sets of resource users and resource managers in said hierarchy allowing said resource managers to see all resource links to which they have authority to manage, and allowing said resource users to see only links to a list of available resource objects in said hierarchy which said resource users have been allowed access, said access granted by said resource managers; and

means for dynamically altering a user interface to said hierarchy or said dynamic containers and said resource objects through a Web management application.

2. An electronic-business-to-electronic-business portal as recited in claim 1, wherein a plurality of said dynamic containers are nested within said hierarchy.

3. An electronic-business-to-electronic-business portal as recited in claim 1, wherein said resource manager provides a first link to said resource object from a first dynamic container and a second link to said resource object from a second dynamic container thereby enabling a resource object to be provided in multiple ones of said dynamic containers.

4. An electronic-business-to-electronic-business portal as recited in claim 1 wherein said means for implementing said dynamic containers manages a one-to-many relationship between a resource object and at least one resource link.

5. An electronic-business-to-electronic-business portal as recited in claim 1 wherein said means for implementing said plurality of dynamic containers uses a three-tiered structure for defining Web resource links, said three-tiered structure comprising a top level having a plurality of resource classes, an intermediate level having a plurality of resource instances, also known as resource objects, of said resource classes, each said resource object having a link to a resource class, and a low level having a plurality of resource links wherein each resource link at said low level points to a resource object at said intermediate level which is an instance of a resource class at said top level.

6. An electronic business-to-electronic business portal as recited in claim 1, wherein said means for dynamically altering the user interface submits a Web page with new parameter values for said user interface and then writes said new parameters values to the profile document for a local database and then, for each database whose user interface is controlled by said portal, writes said new parameter values to an associated profile document.

7. An electronic-business-to-electronic-business portal as recited in claim 2, wherein said means for implementing a plurality of nested dynamic containers uses a security access model wherein each entity in said hierarchy of said dynamic containers and said resource links has both a group of users having read access to said entity and a group of managers, having read and write authority to said entity.

8. An electronic-business-to-electronic-business portal as recited in claim 2, wherein said means for managing sets of resource users and resource managers in said hierarchy of nested said dynamic containers comprises:

a plurality of uniquely identified container documents and a plurality of uniquely identified resource link documents, wherein a resource link document comprises the contents of a dynamic container using a plurality of databases containing a plurality of resource link documents, a plurality of resource object documents, and a plurality of resource class documents, said dynamic container being a member of a specialized class of resource objects;

said hierarchy comprising a plurality of said dynamic containers and a plurality of said resource link documents, each having both a group of users and a group of managers, wherein said group of managers is a subset of said group of users, said group of users having at least read access to said dynamic containers and said resource links, and said managers having read/write access to said dynamic containers and said resources links;

a plurality of documents stored in a database, each said document associated with at least one user having at least one first field controlling read access and at least one second field controlling read/write access whereby said first fields and said second fields are used to authenticate user access to a document; and

an access scheme whereby nested groups of users are implemented wherein each dynamic container has associated with it and controlling access to it, a group of users, contents of said group of users being dynamically managed through a Web interface in such a way as to guarantee that after each modification to user of management access, user and manager groups of each of the dynamic containers reflect a hierarchy where;

1) each manager of a dynamic container has manager access to the entire set of child containers and resource links to said container, and

2) each user of a dynamic container or resource link has access to the entire set of parent containers to said container or said resource link, up to and including the top of the hierarchy of containers.

9. An electronic-business-to-electronic-business portal as recited in claim 5 wherein each said resource link contains an HyperText Markup Language (HTML) link to an application represented by a resource object, said application residing on an intranet or on the Internet and accessible using a standard Web browser.

10. A method for creating a resource object by a resource manager which allows said resource manager to provide access to said resource object in multiple dynamic containers in an electronic-business-to-electronic-business portal, said method comprising the steps:

(a) creating a resource object of a desired class of resources accessible through a dynamic container containing a link to said resource object by creating a new resource object document in a resource object database with parameters selected by a resource manager, wherein a set of available parameters are defined in a resource class document in a resource class database of said desired class and a set of available resource classes is defined by a resource integrator;

(b) entering a name of said desired resource class in said resource object document, wherein said resource class name acts as a link between said resource object and its parent class document;

(c) creating a plurality of group documents in a system directory wherein said group documents control user and manager access to said resource object; and

(d) constructing said resource object, comprising the steps;

(1) creating a resource link document to said resource object, said resource link document residing in a resource link database, containing a system unique ID of a dynamic container document in which a resource link was created and also containing a system unique ID of said resource object to which said resource link is associated;

(2) creating a plurality of group documents in a system directory wherein said group documents control user and manager access to said resource link;

(3) adding said group names to a first field controlling read access and to a second field controlling read/write access of said resource link document allowing dynamic addition and deletion of new resource links; and

(4) adding said group names to group documents that control access to resource object documents.

11. A method as recited in claim 10, wherein each said resource class is defined by said resource integrator using a distributed client/server database application coupled with a product that delivers Internet and Web browsing functionality to a user interface.

12. A method as recited in claim 10, further comprising a second dynamic container wherein steps d(1) through d(4) are performed using said second dynamic container such that references to which said resource class, said resource object and said resource link refer are the same for both said first and second dynamic containers.

13. A method allowing end users to access resources via a portal using standard Web browsers to view and execute their own customized menu of applications, said method comprising the steps of:

(a) creating a set of available resource classes;

(b) creating enterprise resources, including containers, resource objects, and resource links;

(c) granting and deleting access and control to resource managers and resource users;

(d) Repeating steps (a) through (c), as necessary, to accommodate changes in an enterprise hierarchy of resources and containers, and changes in resource user and resource manager access; and

(e) displaying said customized menu in a standard Web browser.

14. A method allowing end users to access resources via a portal using standard Web browsers to view and execute their own customized menu of applications as recited in claim 13 wherein step (a) further comprises the step of defining a plurality of resource classes, modifying an existing resource class, if necessary, said resource classes defined and modified by a resource integrator using distributed client/server database application coupled with a product that delivers Internet and Web browsing functionality to a user interface.

15. A method allowing end users to access resources via a portal using standard Web browsers to view and execute their own customized menu of applications as recited in claim 13 wherein step (b) further comprises the step of creating a custom enterprise hierarchy, or modifying an existing hierarchy, said hierarchy comprising containers, and resource links, by an authorized resource manager using a standard Web interface, said resource links providing access to resource objects.

16. A method allowing end users to access resources via a portal using standard Web browsers to view and execute their own customized menu of applications as recited in claim 13 wherein step (c) comprises the steps of:

(1) creating a set of resource managers and a set of resource users;

(2) modifying at least one first field controlling read access and at least one second field controlling read/write access associated with said resource objects and resource links, by a resource manager enabling each authorized resource user to access a custom hierarchy using a standard Web interface; and

(3) authenticating said resource managers, and said resource users via a userid and password protocol built in to a Web interface, wherein said userid is matched with names in a system database comprising the name of every user, user group, and server in a domain, as well as access levels of each said user, to determine which said customized menu is to be accessed.

17. A method allowing end users to access resources via a portal using standard Web browsers to view and execute their own customized menu of applications as recited in claim 14, wherein the step of defining a plurality of resource classes further comprising the steps:

A. creating a class definition for a container comprising the steps;

(1) filling out a new class document by a resource integrator;

(2) naming the resource class by a resource integrator;

(3) choosing an icon of the class by a resource integrator; and

(4) choosing container types to include by a resource integrator; and

B. creating a container of a class type of container comprising the steps;

(1) creating a new instance of said container class by a resource integrator;

(2) naming said new instance of said container by a resource integrator;

(3) describing said new instance of said container by a resource integrator; and

(4) submitting information to the system for processing,

wherein step (A) is repeated to add a new class definition for a container or modify an existing class definition for a container, and is skipped if said new instance of said container class is for an existing container class.

18. A method allowing end users to access resources via a portal using standard Web browsers to view and execute their own customized menu of applications as recited in claim 15 wherein said containers may be nested.

19. A machine readable medium containing code implementing an electronic-business-to-electronic business portal that organizes access to extended business applications wherein enhanced security and administrative tools allow said portal to be shared throughout enterprises and across supply chains, providing secure access to collaborative applications by business partners and suppliers, comprising:

a first code section for implementing a plurality of dynamic containers wherein said dynamic containers are configurable and are represented in a desired hierarchy, said hierarchy including at least one resource link;

a second code section implementing a means for adding and deleting resource links to a list of available resource objects in said hierarchy, said resource links allowing user access to an application represented by a resource object, wherein said resource objects are chosen from a set of resource classes defining general categories of application types and the parameters needed to access said applications;

a third code section for implementing a means for managing sets of resource users and resource managers in said hierarchy allowing said resource managers to see all resource links to which they have authority to manage, and allowing said resource users to see only links to a list of available resource objects in said hierarchy which said resource users have been allowed access, said access granted by said resource managers; and

a fourth code section for implementing a means for dynamically altering the user interface to said hierarchy or said dynamic containers and said resource objects through a Web management application.

20. A machine readable medium containing code implementing a method for creating a resource object by a resource manager which allows said resource manager to provide access to said resource object in multiple dynamic containers in an electronic-business-to-electronic-business portal, said code implementing the steps of:

(a) creating a resource object of a desired class of resources accessible through a dynamic container containing a link to said resource object by creating a new resource object document in a resource object database with parameters selected by a resource manager, wherein a set of available parameters are defined in a resource class document in a resource class database of said desired class and a set of available resource classes is defined by a resource integrator;

(b) entering a name of said desired resource class in said resource object document, wherein said resource class name acts as a link between said resource object and its parent class document;

(c) creating a plurality of group documents in a system directory wherein said group documents control user and manager access to said resource object; and

(d) constructing said resource object, comprising the steps;

(1) creating a resource link document to said resource object, said resource link document residing in a resource link database, containing a system unique ID of a dynamic container document in which a resource link was created and also containing a system unique ID of said resource object to which said resource link is associated;

(2) creating a plurality of group documents in a system directory wherein said group documents control user and manager access to said resource link;

(3) adding said group names to a first field controlling read access and to a second field controlling read/write access of said resource link document allowing dynamic addition and deletion of new resource links; and

(4) adding said group names to group documents that control access to resource object documents.