Method, software program, and system for managing access to information and the transfer thereof

• US 7,814,537 B2
• Filed: 01/19/2007
• Issued: 10/12/2010
• Est. Priority Date: 12/29/2000
• Status: Active Grant

• Current Assignee: IntraLinks Incorporated (SS&C Technologies Holdings Incorporated)
• Original Assignee: IntraLinks Incorporated (SS&C Technologies Holdings Incorporated)
• Inventors: Fredell, Thomas L.
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): Perungavoor; Venkat
• Application Number:
  US11/625,126
• Publication Number:
  US 20070118889A1
• Time in Patent Office: 1,362 Days
• Field of Search: None
• US Class Current: 726/8
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A method for granting an access to information includes electronically establishing, by at least one intermediary server, through a first authentication procedure at least one first client login authentication data which allows at least one client processor to access the at least one intermediary server, electronically receiving, by the at least one intermediary server, at least one second client login authentication data from at least one host server, wherein the at least one second client login authentication data is established by the at least one host server using a second authentication procedure, wherein the at least one second client login authentication data allows the at least one client processor to access the at least one host server, wherein the first authentication procedure is separate from the second authentication procedure, and wherein the at least one intermediary server is independently managed from the at least one host server.

Claims

1. A method for granting an access to information, comprising:

a) electronically establishing, by at least one intermediary server, through a first authentication procedure at least one first client login authentication data which allows at least one client processor to access the at least one intermediary server;

b) electronically receiving, by the at least one intermediary server, at least one second client login authentication data from at least one host server,

i) wherein the at least one second client login authentication data is established by the at least one host server using a second authentication procedure,

ii) wherein the at least one second client login authentication data allows the at least one client processor to access the at least one host server,

iii) wherein the first authentication procedure is separate from the second authentication procedure, and

iv) wherein the at least one intermediary server is independently managed from the at least one host server;

c) electronically storing, by the at least one intermediary server, at least one second client login authentication data, in one or more data structures;

d) electronically granting, by the at least one intermediary server, an access to a content of the at least one intermediary server to the at least one client processor when the at least one intermediary server receives the at least one first client login authentication data from the at least one client processor;

e) electronically receiving, by the at least one intermediary server, a request to access the at least one host server from the at least one client processor; and

f) electronically providing, by the at least one intermediary server, the at least one second client login authentication data to the at least one host server after the at least one client processor has connected to the at least one intermediary server, wherein the at least one client processor avoids a need to use the second authentication procedure to access the at least one host server.

2. The method of claim 1, wherein the step of providing the at least one second client login authentication data further comprises transferring the at least one second client login authentication data to the at least one client processor from the at least one second intermediary server.

3. The method of claim 1, wherein the step of providing the at least one second client login authentication data further comprises transferring the at least one second client login authentication data to the at least one host server from the at least one intermediary server.

4. The method of claim 1, wherein the at least one client processor is selected from the group including:

a) a computer;

b) a wireless telephone; and

c) a Personal Digital Assistant.

5. The method of claim 1, wherein the at least one second login authentication data is provided via the world wide web.

6. The method of claim 5, wherein the at least one second login authentication data is provided in an encrypted format.

13. The method of claim 1, wherein the method further comprises a step of electronically and periodically submitting, by the at least one intermediary server, the at least one second client login authentication data to the at least one host server to confirm a validity of the at least one second client login authentication data.

7. A computer system for granting an access to information, the computer system comprising:

memory having at least one region for storing computer executable program code; and

an intermediary server processor for executing the program code stored in the memory, wherein the program code comprises;

a) code to establish, by at least one intermediary server, through a first authentication procedure at least one first client login authentication data which allows at least one client processor to access the at least one intermediary server;

b) code to receive, by the at least one intermediary server, at least one second client login authentication data from at least one host server,

i) wherein the at least one second client login authentication data is established by the at least one host server using a second authentication procedure,

ii) wherein the at least one second client login authentication data allows the at least one client processor to access the at least one host server,

iii) wherein the first authentication procedure is separate from the second authentication procedure, and

iv) wherein the at least one intermediary server is independently managed from the at least one host server;

c) code to store, by the at least one intermediary server, at least one second client login authentication data, in one or more data structures;

d) code to grant, by the at least one intermediary server, an access to a content of the at least one intermediary server to the at least one client processor when the at least one intermediary server receives the at least one first client login authentication data from the at least one client processor;

e) code to receive, by the at least one intermediary server, a request to access the at least one host server from the at least one client processor; and

f) code to provide, by the at least one intermediary server, the at least one second client login authentication data to the at least one host server after the at least one client processor has connected to the at least one intermediary server, wherein the at least one client processor avoids a need to use the second authentication procedure to access the at least one host server.

8. The method of claim 7, wherein the code to provide the at least one second client login authentication data further comprises code to to transfer the at least one second client login authentication data from the at least one intermediary server to the at least one client processor.

9. The system of claim 7, wherein the code to provide the at least one second client login authentication data further comprises code to transfer the at least one second client login authentication data to the at least one host server from the at least one intermediary server.

10. The system of claim 7, wherein the at least one client processor is selected from the group including:

a) a computer;

b) a wireless telephone; and

c) a Personal Digital Assistant.

11. The system of claim 7, wherein the at least one second login authentication data is provided via the world wide web.

12. The system of claim 11, wherein the at least one second login authentication data is provided in an encrypted format.

14. The method of claim 7, wherein the system further comprises code to submit, electronically and periodically, by the at least one intermediary server, the at least one second client login authentication data to the at least one host server to confirm a validity of the at least one second client login authentication data.