Methods and apparatus for synchronizing access control in a web server

• US 6,519,647 B1
• Filed: 07/23/1999
• Issued: 02/11/2003
• Est. Priority Date: 07/23/1999
• Status: Expired due to Term

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Howard, Michael, Multerer, Boyd C., Sellers, Timothy D., Dillingham, Lara N., Clark, Quentin J., Meijer, Ronald, Brown, Don L.
• Primary Examiner(s): Etienne, Ario
• Application Number:
  US09/360,880
• Time in Patent Office: 1,299 Days
• Field of Search: 709/229, 709/224, 709/203, 709/219, 709/225, 709/230, 709/228, 709/248, 713/200-202
• US Class Current: 709/229
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

Methods and apparatus for synchronizing access control in a web server are described. A plurality of security scenarios are defined, each of which has one or more security settings associated therewith. The security settings are those that are associated with a plurality of access control mechanisms that control access to a web server or to resources that are used by the web server. One or more of the security settings for one or more of the access control mechanisms are set when a security scenario is selected. Thus, the security settings for a number of different access control mechanisms can be set contemporaneously by selecting one security scenario.

Claims

1. A method for synchronizing access control in a web server comprising:

defining a plurality of security scenarios;

associating each security scenario with one or more security settings for a plurality of access control mechanisms that control access to a web server or to resources that are used by the web server; and

setting one or more security settings for one or more of the access control mechanisms responsive to selection of a security scenario.

2. The method of claim 1, wherein one of the access control mechanisms comprises an authentication mechanism for authenticating various users.

3. The method of claim 1, wherein one of the access control mechanisms comprises a web permissions mechanism that defines what particular operations are allowed on particular resources.

4. The method of claim 1, wherein one of the access control mechanisms comprises an access restriction mechanism that can permit or deny access to a web site based upon an identification that is associated with a particular user.

5. The method of claim 1, wherein one of the access control mechanisms comprises an access control list (ACL) of user information and the privileges that are associated with a particular resource.

6. The method of claim 1, wherein the access control mechanisms comprise:

an authentication mechanism for authenticating various users;

a web permissions mechanism that defines what particular operations are allowed on particular resources;

an access restriction mechanism that can permit or deny access to a web site based upon an identification that is associated with a particular user; and

an access control list (ACL) of user information and the privileges that are associated with a particular resource.

7. The method of claim 1, wherein the access control mechanisms comprise:

an authentication mechanism for authenticating various users;

an access restriction mechanism that can permit or deny access to a web site based upon an identification that is associated with a particular user; and

an access control list (ACL) of user information and the privileges that are associated with a particular resource.

8. The method of claim 1, wherein the setting of the one or more security settings comprises setting a security setting of a third party access control mechanism that controls access to resources that are not managed by the web server.

9. The method of claim 1 further comprising adjusting one or more security settings for one or more of the access control mechanisms responsive to user input.

10. An access controller for a web server comprising:

a memory;

an association stored in the memory of a plurality of security scenarios and one or more correlated security settings for a plurality of access control mechanisms that control access to a web server or to resources that are used by the web server, the security settings for the plurality of access control mechanisms being settable through selection of a correlated security scenario.

11. The access controller of claim 10, wherein one of the access control mechanisms comprises an authentication mechanism for authenticating various users.

12. The access controller of claim 10, wherein one of the access control mechanisms comprises a web permissions mechanism that defines what particular operations are allowed on particular resources.

13. The access controller of claim 10, wherein one of the access control mechanisms comprises an access restriction mechanism that can permit or deny access to a web site based upon an identification that is associated with a particular user.

14. The access controller of claim 10, wherein one of the access control mechanisms comprises an access control list (ACL) of user information and the privileges that are associated with a particular resource.

15. The access controller of claim 10, wherein one of the access control mechanisms comprises a third party access control mechanism that controls access to resources that are not managed by the web server.

16. The access controller of claim 10 further comprising a user interface configured to present a user with one or more user-selectable security scenarios.

17. A web server comprising:

a plurality of access control mechanisms, each access control mechanism being configured to control access to the web server or to resources that are used by the web server, and having one or more settable security settings; and

a plurality of security scenarios each being associated with one or more security settings of one or more access control mechanisms, the security scenarios being selectable by a user to automatically set the security settings of the one or more access control mechanisms with which the security scenario is associated.

18. The web server of claim 17, wherein one of the access control mechanisms comprises an authentication mechanism for authenticating various users.

19. The web server of claim 17, wherein one of the access control mechanisms comprises a web permissions mechanism that defines what particular operations are allowed on particular resources.

20. The web server of claim 17, wherein one of the access control mechanisms comprises an access restriction mechanism that can permit or deny access to a web site based upon an identification that is associated with a particular user.

21. The web server of claim 17, wherein one of the access control mechanisms comprises an access control list (ACL) of user information and the privileges that are associated with a particular resource.

22. The web server of claim 17, wherein the plurality of access control mechanisms comprise at least two of the following:

an authentication mechanism for authenticating various users;

a web permissions mechanism that defines what particular operations are allowed on particular resources;

an access restriction mechanism that can permit or deny access to a web site based upon an identification that is associated with a particular user; and

an access control list (ACL) of user information and the privileges that are associated with a particular resource.

23. A method of synchronizing access control in a web server comprising:

selecting a location within a hierarchical namespace, the location being associated with accessible resources;

presenting a user with an option to inherit security settings from an upstream location in the hierarchical namespace, the security settings setting security for a plurality of access control mechanisms that control access to a location'"'"'s accessible resources; and

inheriting the security settings from the upstream location responsive to a user opting to do so.

24. The method of claim 23 further comprising presenting the user with an option to select from one or more security scenarios, each security scenario being associated with one or more security settings for a plurality of access control mechanisms that control access to resources associated with the web server.

25. The method of claim 23, wherein one of the access control mechanisms comprises an authentication mechanism for authenticating various users.

26. The method of claim 23, wherein one of the access control mechanisms comprises a web permissions mechanism that defines what particular operations are allowed on particular resources.

27. The method of claim 23, wherein one of the access control mechanisms comprises an access restriction mechanism that can permit or deny access to resources based upon an identification that is associated with a particular user.

28. The method of claim 23, wherein one of the access control mechanisms comprises an access control list (ACL) of user information and the privileges that are associated with a particular resource.

29. The method of claim 23, wherein the plurality of access control mechanisms comprise:

an authentication mechanism for authenticating various users;

a web permissions mechanism that defines what particular operations are allowed on particular resources;

an access restriction mechanism that can permit or deny access to resources based upon an identification that is associated with a particular user; and

an access control list (ACL) of user information and the privileges that are associated with a particular resource.

30. A method for synchronizing access control to resources that are accessible through a web server comprising:

storing a plurality of security scenarios, each security scenario being associated with one or more security settings for a plurality of access control mechanisms that control access to resources;

accessing a stored security scenario; and

setting the security settings that are associated with an accessed security scenario.

31. The method of claim 30, wherein the setting of the security settings comprises setting security settings of a third party access control mechanism that controls access to resources that are not managed by the web server.

32. The method of claim 30, wherein one of the access control mechanisms comprises an authentication mechanism for authenticating various users.

33. The method of claim 30, wherein one of the access control mechanisms comprises a web permissions mechanism that defines what particular operations are allowed on particular resources.

34. The method of claim 30, wherein one of the access control mechanisms comprises an access restriction mechanism that can permit or deny access to a web site based upon an identification that is associated with a particular user.

35. The method of claim 30, wherein one of the access control mechanisms comprises an access control list (ACL) of user information and the privileges that are associated with a particular resource.

36. A computer-readable medium having computer-readable instructions stored thereon, which, when executed by a computer perform the following steps:

storing a plurality of security scenarios, each security scenario being associated with one or more security settings for a plurality of access control mechanisms that control access to resources, the access control mechanisms comprising;

an authentication mechanism for authenticating various users;

an access restriction mechanism that can permit or deny access to a web site based upon an identification that is associated with a particular user; and

an access control list (ACL) of user information and the privileges that are associated with a particular resource;

accessing a stored security scenario; and

setting the security settings that are associated with an accessed security scenario.