Technique for ensuring authorized access to the content of dynamic web pages stored in a system cache

• US 6,832,222 B1
• Filed: 06/23/2000
• Issued: 12/14/2004
• Est. Priority Date: 06/24/1999
• Status: Active Grant

• Current Assignee: Snap, Inc.
• Original Assignee: International Business Machines Corporation
• Inventors: Zimowski, Melvin Richard
• Primary Examiner(s): Pardo, Thuy N.
• Application Number:
  US09/602,249
• Time in Patent Office: 1,635 Days
• Field of Search: 707/1, 707/3, 707/9, 707/201, 707/200, 707/203, 707/202, 707/10, 709/203, 709/223, 709/229, 709/219, 709/218, 711/119, 711/137, 715/513
• US Class Current: 1/1
• CPC Class Codes: G06F 16/9574 of access to content, e.g. by caching
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99939 Privileged access
• CPC Class Codes: Y10S 707/99952 Coherency, e.g. same view to multiple users

Abstract

A method, apparatus, and article of manufacture for processing a request that requires the dynamic generation of a web page. In accordance with the present invention, a request to generate a dynamic web page is received. It is determined whether the request can be satisfied by using a cached web page and whether the userid associated with the request is authorized to access the cached web page. When it is determined that the request can be satisfied and that the userid has the proper authorization, the cached Web page is used to satisfy the request.

Claims

1. A method of processing a request that requires the dynamic generation of a web page, the method comprising the steps of:

receiving a request to generate a dynamic web page;

determining whether the request can be satisfied by using a cached web page and whether an identifier, which is associated with the request, is authorized to access the cached web page by determining whether the identifier is associated with a process having authority to dynamically generate the cached web page; and

when it is determined that the request can be satisfied and that the identifier has the proper authorization satisfying the request by using the cached web page.

2. The method of claim 1, further comprising the step of processing a caching directive that defines a usage scope of the cached web page.

3. The method of claim 2, wherein the usage scope is a public usage scope, and wherein determining further comprises determining whether the request is authorized to execute an application program that generated the cached web page.

4. The method of claim 2, wherein determining further comprises determining whether the request can be satisfied based on the usage scope.

5. The method of claim 2, wherein the caching directive specifies an amount of time that the cached web page is valid.

6. The method of claim 1, wherein said determining whether an identifier is authorized to access said cached web page includes determining whether the identifier is associated with a process without authority to access any data within the cached dynamic web page.

7. The method of claim 1, wherein satisfying the request by using the cached web page includes transmitting the cached web page over a wide area network.

8. The method of claim 7, wherein said wide area network is the Internet.

16. The apparatus of claim 7, further comprising one or more programs, performed by the computer, for processing a caching directive that defines a usage scope of the cached web page.

17. The apparatus of claim 16, wherein the usage scope is a public usage scope, and wherein determining further comprises determining whether the request is authorized to execute an application program that generated the cached web page.

18. The apparatus of claim 16, further comprising one or more programs, performed by the computer, for receiving a request to retrieve the web page, and determining whether to retrieve the web page based on the usage scope.

19. The apparatus of claim 16, wherein the caching directive specifies an amount of time that the cached web page is valid.

9. A method of processing a request that requires the dynamic generation of a web page, the method comprising the steps of:

receiving a request to generate a dynamic web page;

processing a caching directive that defines a usage scope of the cached web page, wherein the usage scope is a private usage scope and the request has a first user identifier;

determining whether the request can be satisfied by using a cached web page and whether the first identifier, which is associated with the request, is authorized to access the cached web page by determining whether the first identifier is associated with a process having authority to dynamically generate the cached web page, which includes and wherein determining further comprises determining whether the first user identifier matches a second user identifier that was associated with the web-server request which originally created the cached web page; and

when it is determined that the request can be satisfied and that the identifier has the proper authorization satisfying the request by using the cached web page.

10. The method of claim 9, wherein determining further comprises determining whether the request can be satisfied based on the usage scope.

11. The method of claim 9, wherein the caching directive specifies an amount of time that the cached web page is valid.

12. The method of claim 9, wherein said determining whether the first identifier is authorized to access said cached web page includes determining whether the first identifier is associated with a process without authority to access any data within the cached dynamic web page.

13. The method of claim 9, wherein satisfying the request by using the cached web page includes transmitting the cached web page over a wide area network.

14. The method of claim 13, wherein said wide area network is the Internet.

15. An apparatus for processing a request that requires the dynamic generation of a web page, the apparatus comprising:

a computer; and

one or more programs, performed by the computer, for receiving a request to generate a dynamic web page, determining whether the request can be satisfied by using a cached web page and whether an identifier, which is associated with the request, is authorized to access that cached web page by determining whether the identifier is associated with a process having authority to dynamically generate the cached web page, and when it is determined that the request can be satisfied and that the identifier has the proper authorization, satisfying the request by using the cached web page.

20. The apparatus of claim 15, wherein said determining whether the first identifier is authorized to access said cached web page includes determining whether the first identifier is associated with a process without authority to access any data within the cached dynamic web page.

21. The apparatus of claim 15, wherein satisfying the request by using the cached web page includes transmitting the cached web page over a wide area network.

22. The apparatus of claim 21, wherein said wide area network is the Internet.

23. An apparatus for processing a request that requires the dynamic generation of a web page, the apparatus comprising:

a computer; and

one or more programs, performed by the computer, for receiving a request to generate a dynamic web page;

for processing a caching directive that defines a usage scope of the cached web page, wherein the usage scope is a private usage scope and the request has a first user identifier;

determining whether the request can be satisfied by using a cached web page and whether the first identifier, which is associated with the request, is authorized to access the cached web page by determining whether the first identifier is associated with a process having authority to dynamically generate the cached web page, which includes determining whether the first user identifier matches a second identifier that was associated with the web server request which originally created the cached web page; and

when it is determined that the request can be satisfied and that the first identifier has the proper authorization, satisfying the request by using the cached web page.

24. The apparatus of claim 23, further comprising one or more programs, performed by the computer, for receiving a request to retrieve the web page, and determining whether to retrieve the web page based on the usage scope.

25. The apparatus of claim 23, wherein the caching directive specifies an amount of time that the cached web page is valid.

26. The apparatus of claim 23, wherein said determining whether the first identifier is authorized to access said cached web page includes determining whether the first identifier is associated with a process without authority to access any data within the cached dynamic web page.

27. The apparatus of claim 23, wherein satisfying the request by using the cached web page includes transmitting the cached web page over a wide area network.

28. The apparatus of claim 27, wherein said wide area network is the Internet.

29. An article of manufacture comprising a computer program carrier readable by a computer and embodying one or more instructions executable by the computer to perform method steps for processing a request that requires the dynamic generation of a web page, the method comprising the steps of:

receiving a request to generate a dynamic web page;

determining whether the request can be satisfied by using a cached web page and whether an identifier, which is associated with the request, is authorized to access that cached web page by determining whether the identifier is associated with a process having authority to dynamically generate the cached web page; and

when it is determined that the request can be satisfied and that the identifier has the proper authorization satisfying the request by using the cached web page.

30. The article of manufacture of claim 29, further comprising the step of processing a caching directive that defines a usage scope of the cached web page.

31. The article of manufacture of claim 30, wherein the usage scope is a public usage scope, and wherein determining further comprises determining whether the request is authorized to execute an application program that generated the cached web page.

32. The article of manufacture of claim 29, wherein said determining whether an identifier is authorized to access said cached web page includes determining whether the identifier is associated with a process without authority to access any data within the cached dynamic web page.

33. The article of manufacture of claim 29, wherein satisfying the request by using the cached web page includes transmitting the cached web page over a wide area network.

34. The article of manufacture of claim 33, wherein said wide area network is the Internet.

36. The article of manufacture of claim 30, wherein determining further comprises determining whether the request can be satisfied based on the usage scope.

37. The article of manufacture of claim 30, wherein the caching directive specifies an amount of time that the cached web page is valid.

41. The article of manufacture of claim 36, wherein satisfying the request by using the cached web page includes transmitting the cached web page over a wide area network.

42. The article of manufacture of claim 41, wherein said wide area network is the Internet.

35. An article of manufacture comprising a computer program carrier readable by a computer and embodying one or more instructions executable by the computer to perform method steps for processing a request that requires the dynamic generation of a web page, the method comprising the steps of:

receiving a request to generate a dynamic web page;

processing a caching directive that defines a usage scope of the cached web page, wherein the usage scope is a private usage scope and the request has a first user identifier;

determining whether the request can be satisfied by using a cached web page and whether the first identifier, which is associated with the request, is authorized to access the cached web page by determining whether the first identifier is associated with a process having authority to dynamically generate the cached web page, which includes determining whether the first user identifier matches a second user identifier that was associated with the web server request which originally created the cached web page; and

when it is determined that the request can be satisfied and that the identifier has the proper authorization satisfying the request by using the cached web page.

38. The article of manufacture of claim 35, wherein determining further comprises determining whether the request can be satisfied based on the usage scope.

39. The article of manufacture of claim 35, wherein the caching directive specifies an amount of time that the cached web page is valid.

40. The article of manufacture of claim 35, wherein said determining whether the first identifier is authorized to access said cached web page includes determining whether the first identifier is associated with a process without authority to access any data within the cached dynamic web page.