System and method for synchronizing login processes

• US 7,536,714 B2
• Filed: 04/06/2004
• Issued: 05/19/2009
• Est. Priority Date: 07/11/2003
• Status: Active Grant

• Current Assignee: Computer Associates Think Inc. (Broadcom, Inc.)
• Original Assignee: Computer Associates Think Inc. (Broadcom, Inc.)
• Inventors: Yuan, Sheue
• Primary Examiner(s): LAFORGIA, CHRISTIAN A
• Application Number:
  US10/819,012
• Publication Number:
  US 20050010824A1
• Time in Patent Office: 1,869 Days
• Field of Search: 713/168
• US Class Current: 726/7
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations

Abstract

In certain embodiments, a method for synchronizing login processes in a web environment includes receiving user authentication information for a particular one of a plurality of access points, each access point operable to provide a user system that submitted the user authentication information access to one or more target items. The method includes authenticating the user authentication information to determine whether the user system associated with the user authentication information is authorized to access the one or more target items associated with the particular access point. The method includes initiating a successful login to the particular access point if it is determined that the user system associated with the user authentication information is authorized to access the one or more target items and automatically propagating the successful login to the particular access point to one or more of the other access points based at least on the successful login to the particular access point.

Claims

1. A method for synchronizing login processes in a web environment, comprising:

receiving user authentication information for a particular one of a plurality of access points, each access point operable to provide a user system that submitted the user authentication information access to one or more target items;

authenticating the user authentication information to determine whether the user system associated with the user authentication information is authorized to access the one or more target items associated with the particular access point;

initiating a successful login to the particular access point if it is determined that the user system associated with the user authentication information is authorized to access the one or more target items; and

automatically propagating the successful login to the particular access point to one or more of the other access points, through the user system and hidden from an end user, based at least on the successful login to the particular access point.

2. The method of claim 1, further comprising, for each of the plurality of access points, displaying a login form for receiving the user authentication information, the login form being associated with a corresponding login page on an application server system in communication with the user system.

3. The method of claim 2, wherein one or more of the login forms each comprise a corresponding hidden form element indicating whether a successful login has occurred for an access point associated with another login form and wherein automatically propagating the successful login through the user system comprises:

searching the user system for one or more login forms other than the login form associated with the particular access point for which a successful login was initiated; and

for each found login form;

determining whether the login form comprises a corresponding hidden form element; and

if the found login form comprises the corresponding hidden form element, setting the corresponding hidden form element to TRUE and automatically submitting the found login form with the user authentication information.

4. The method of claim 3, further comprising authenticating the user authentication information associated with the found login form that was automatically submitted to determine whether the user system is authorized to access the one or more target items associated with the access point associated with the login form.

5. The method of claim 3, wherein the corresponding hidden form element for the login form associated with the particular access point is initially set to FALSE.

6. The method of claim 2, wherein the one or more target items for each access point are associated with a backend server system, the login form for each access point comprising a target backend server connection indicator indicating the target backend server associated with the one or more target items of the access point.

7. The method of claim 6, further comprising:

for the login form associated with the particular access point, storing the target backend server connection indicator;

propagating the successful login comprising;

searching the user system for one or more login forms other than the login form associated with the particular access point for which a successful login was initiated; and

for each found login form;

determining whether the target backend server connection indicator for the found login form matches the stored target backend server connection indicator for the login form associated with the particular access point; and

if a match is determined, automatically submitting the found login form with the user authentication information.

8. The method of claim 7, further comprising authenticating the user authentication information associated with the found login form that was automatically submitted to determine whether the user system is authorized to access the one or more target items associated with the access point associated with the login form.

9. The method of claim 7, further comprising storing the target backend server connection indicator of the login form for the particular access point as cookies for the login page associated with the login form for the particular access point.

10. The method of claim 2, wherein the login page comprises at least one of an embedded script document and an HTML page running on the application server system in communication with the user system.

11. The method of claim 1, wherein each access point comprises a portlet.

12. The method of claim 1, wherein the user authentication information comprises at least one of:

a user name identifying a user of the user system;

a password; and

a domain name.

13. A system for synchronizing login processes in a web environment, comprising:

a memory; and

an application server system comprising an action form, the action form operable to;

receive, from a login page, user authentication information for a particular one of a plurality of access points, each access point operable to provide a user system that submitted the user authentication information access to one or more target items;

authenticate the user authentication information to determine whether the user system associated with the user authentication information is authorized to access the one or more target items associated with the particular access point;

initiate a successful login to the particular access point if it is determined that the user system associated with the user authentication information is authorized to access the one or more target items; and

automatically propagate the successful login to the particular access point to one or more of the other access points, through the user system and hidden from an end user, based at least on the successful login to the particular access point.

14. The system of claim 13, wherein the application server system is operable to, for each of the plurality of access points, display a login form for receiving the user authentication information, the login form being associated with the login page on the application server system in communication with the user system.

15. The system of claim 14, wherein one or more of the login forms each comprise a corresponding hidden form element indicating whether a successful login has occurred for an access point associated with another login form, the action form operable to propagate the successful login through the user system by:

searching the user system for one or more login forms other than the login form associated with the particular access point for which a successful login was initiated; and

for each found login form;

determining whether the login form comprises a corresponding hidden form element; and

if the found login form comprises the corresponding hidden form element, setting the corresponding hidden form element to TRUE and automatically submitting the found login form with the user authentication information.

16. The system of claim 15, wherein the action form is further operable to authenticate the user authentication information associated with the found login form that was automatically submitted to determine whether the user system is authorized to access the one or more target items associated with the access point associated with the login form.

17. The system of claim 14, wherein the corresponding hidden form element for the login form associated with the particular access point is initially set to FALSE.

18. The system of claim 14, wherein the one or more target items for each access point are associated with a backend server system, the login form for each access point comprising a target backend server connection indicator indicating the target backend server associated with the one or more target items of the access point.

19. The system of claim 18, wherein the action form is further operable to:

for the login form associated with the particular access point, store the target backend server connection indicator in the memory; and

propagate the successful login by;

searching the user system for one or more login forms other than the login form associated with the particular access point to which the user system was granted access; and

for each found login form;

determining whether the target backend server connection indicator for the found login form matches the stored target backend server connection indicator for the login form associated with the particular access point; and

if a match is determined, automatically submitting the found login form with the user authentication information.

20. The system of claim 19, wherein the action form is further operable to authenticate the user authentication information associated with the found login form that was automatically submitted to determine whether the user system is authorized to access the one or more target items associated with the access point associated with the login form.

21. The system of claim 19, wherein the action form is further operable to store the target backend server connection indicator of the login form for the particular access point as cookies for the login page associated with the login form for the particular access point.

22. The system of claim 14, wherein the login page comprises at least one of an embedded script document and an HTML page running on the application server system in communication with the user system.

23. The system of claim 13, wherein each access point comprises a portlet.

24. The system of claim 13, wherein the user authentication information comprises at least one of:

a user name identifying a user of the user system;

a password;

and a domain name.

25. The system of claim 13, wherein the application server system comprises the memory.

26. A method for synchronizing login processes in a web environment, comprising:

in response to receiving user authentication information for a particular one of a plurality of access points, initiating a successful login to the particular access point if it is determined based on authentication of the user authentication information that a user system associated with user authentication information is authorized to access one or more target items associated with the particular access point; and

automatically propagating the successful login to the particular access point to one or more of the other access points, through the user system and hidden from an end user, based at least on the successful login to the particular access point.