Method for integrating multiple web servers based on individual client authorization

• US 7,146,423 B2
• Filed: 12/21/2001
• Issued: 12/05/2006
• Est. Priority Date: 12/13/2001
• Status: Expired due to Fees

• Current Assignee: Inventec Corporation
• Original Assignee: Inventec Corporation
• Inventors: Chin, Hung-Liang, Liao, Yi-Ming, Hsieh, Ming-Hsiao, Lu, Po-Wen, Lee, Mhing-Fen
• Primary Examiner(s): Caldwell, Andrew
• Assistant Examiner(s): WILLETT, STEPHAN F
• Application Number:
  US10/023,877
• Publication Number:
  US 20030120738A1
• Time in Patent Office: 1,810 Days
• Field of Search: 709/225, 709/229, 705/54, 707/2, 707/9, 707/102, 713/201, 726/2, 726/4, 726/16
• US Class Current: 709/229
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A method for integrating multiple web servers based on individual client authorization consists of setting up a client, a master web server, and at least one slave web server through a network such that after the said master web server receives commands inputted by the said client, an authentication routine relative to the said client is executed based on the said commands to determine the individual authorization level of the said client and web pages are collected from the said master server and slave web that the client is permitted to browse based on the said individual authorization level and, furthermore, web pages are respectively displayed via a specific screen model on the computer system of the said client.

Claims

1. A method for integrating multiple web servers based on individual client authorization, the said method comprises setting up a master web server of a manufacturer, at least one slave web server, and at least one client through a network, the master web server having an authorization data base;

the said slave web server belongs to a cooperating company that supports the said manufacturer and, furthermore, goods transaction information derived from financial management, production management, and materials management data are automatically updated between the said master web server and the said slave web server through the network, the said client refers to a plurality of computer systems of various departments of the said manufacturer and the said cooperating company which can log onto the network;

wherein the said master web server sequentially executes the steps below;

while any client logs onto the said master web server, executing an authentication routine relative to the said client based on commands inputted by the said client, the commands including an identification number and a verification number, and utilizing post-authentication results to determine the individual authorization level possessed by the said client;

when the said master web server reads a said identification number and a said verification number, the said master web server searching for an individual authorization level in the said authorization database that matches the said identification number and verification number and then collecting web pages from the said master web server and slave web server the client is permitted to browse and edit based on the said individual authorization level, then displaying the name of each of said web pages according to a specific screen model on the computer system of the said client, in which the said web pages contain information relating to the goods transactions derived from the financial management, production management, and materials management data of the manufacturer and the said cooperating company;

wherein the computer system of the client can directly access the corresponding web server and display the relevant web pages by reference to the names displayed according to the said specific screen model, without further authentication;

wherein the said authorization database is comprised of;

an identification comparison table;

said identification comparison table being configured to store a plurality of entries each having an identification number and a verification number and user name associated with said identification number;

a group comparison table;

said group comparison table being configured to store a plurality of entries each having an identification number and a group name and user name associated with said identification number;

a group authorization comparison table;

said group authorization comparison table being configured to store a plurality of entries each having a group name and an individual authorization name and user name associated with said group name; and

an individual authorization comparison table;

said individual authorization comparison table being configured to store a plurality of entries each having an individual authorization name and a web page name and web page name connection site associated with said individual authorization name.

2. The method of claim 1, wherein based on the identification number and verification number inputted by the client, the said master web server further executes the steps below:

based on the said identification number in the said group comparison table, searching for the same identification number that matches the said identification number and obtaining the identification number under the group names and user names;

based on the group names and the user names found after the search, searching the said group names and the said user names that conform to the same group names and user names in the said group authorization comparison table, and obtaining the individual authorization name under the said group names and user names;

utilizing the said individual authorization name to search the same individual authorization name that matches the said individual authorization name in the said individual authorization comparison table, and accessing the commensurate web page names and web page connection sites granted according to the said matching individual authorization name;

finally, displaying the said web page names and web page connection sites respectively on the specific screen model on the computer system of the client.

3. The method of claim 2, wherein the said master web server further executes the steps of while determining that the said identification number and verification number are incorrect, requesting the computer system of the client to once again output an identification number and a verification number.

4. The method of claim 1, wherein the said specific screen model comprises graphic display of respective web page data and the data displayed indicates the matching web page names of the web pages, with the said displayed data containing the web page connection sites;

as such, after a web page name is selected, the computer system of the client enters the corresponding said connection site of the web page based on the said connection site.