Method and system for validating access to a group of related elements

• US 8,245,049 B2
• Filed: 06/14/2004
• Issued: 08/14/2012
• Est. Priority Date: 06/14/2004
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Ramani, Sundaram, Beda, Joseph S., Alcazar, Mark, Franco, Roberto A., Tokumi, Roland Katsuaki, Bedworth, John G.
• Primary Examiner(s): Abrishamkar, Kaveh
• Application Number:
  US10/867,338
• Publication Number:
  US 20050278792A1
• Time in Patent Office: 2,983 Days
• Field of Search: 713/182, 713/189, 713/190
• US Class Current: 713/182
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/104 Grouping of entities

Abstract

A method and system for validating access to a group of related elements are described. The elements within the group access a security context associated with a markup domain when a call is made to an element. An authorized call to an element is enabled such that the markup domain is navigated to a new web page. However, an unauthorized call is prevented so that the navigation to the new web page is not permitted. After the markup domain has been navigated, the security context associated with the markup domain is invalidated. A new security context is generated and associated with the markup domain. The elements associated with the web page navigated from are inaccessible after navigation of the markup domain to the new page. The association of the new security context with the markup domain prevents an unauthorized user from accessing any element that references the previous security context.

Claims

1. A computer-implemented method for validating access to a first element within a group of related elements, comprising:

associating, by a computing device capable of network navigation, a security context with each element within the group of related elements;

wherein the group of related elements is generated from the same markup domain;

verifying, by the computing device capable of network navigation, access to the first element when the security context associated with the first element permits access to the first element; and

invalidating, by the computing device capable of network navigation, access to the first element when the security context associated with the first element does not permit access to the first element;

wherein all elements that could be generated from a markup domain are associated with the same security context; and

wherein the security context associated with the first element comprises an in-memory component.

2. The computer-implemented method of claim 1, further comprising modifying a security context associated with a second element in response to navigating a markup page associated with the first element.

3. The computer-implemented method of claim 2, wherein the markup page is navigated from a first domain to a second domain.

4. The computer-implemented method of claim 1, wherein invalidating access further comprises disabling a call to the first element.

5. The computer-implemented method of claim 1, further comprising validating access to the first element when the security context associated with the first element permits access to the first element.

6. The computer-implemented method of claim 5, wherein validating access further comprises enabling a call to the first element.

7. The computer-implemented method of claim 1, wherein associating a security context further comprises associating the same security context with each element in the group of related elements.

8. A system for validating access to a first element within a group of related elements, comprising:

a network that is configured to provide access to web pages; and

a computing device coupled to the network, the computing device including an application that is configured to;

associate a security context with each element within the group of related elements;

verify access to the first element when the security context associated with the first element permits access to the first element;

invalidate access to the first element when the security context associated with the first element does not permit access to the first element;

navigate a markup page associated with the first element; and

modify the security context associated with a second element in response to navigating the markup page.

9. The system of claim 8, wherein the markup page is navigated from a first domain to a second domain.

10. The system of claim 8, wherein the group of related elements is generated from the same markup domain.

11. The system of claim 8, wherein all elements that could be generated from a markup domain are associated with the same security context.

12. The system of claim 8, wherein the application is further configured to invalidate access by disabling a call to the first element.

13. The system of claim 8, wherein the application is further configured to validate access to the first element when the security context associated with the first element permits access to the first element.

14. The system of claim 13, wherein the application is further configured to validate access by enabling a call to the first element.

15. The system of claim 8, wherein the application is further configured to associate a security context by associating the same security context with each element in the group of related elements.

16. A computer-readable storage device having computer-executable instructions for validating access to a first element within a group of related elements, comprising:

associating a security context with each element within the group of related elements, each element being associated with a markup domain;

verifying access to the first element when the security context associated with the first element permits access to the first element;

validating access to the first element when the security context associated with the first element permits access to the first element;

invalidating access to the first element when the security context associated with the first element does not permit access to the first element; and

modifying a security context associated with a second element in response to navigating a markup page associated with the first element;

wherein the markup page is navigated from a first domain to a second domain.

17. The computer-readable storage device of claim 16, wherein invalidating access further comprises disabling a call to the first element.

18. The computer-readable storage device of claim 16, wherein all elements that could be generated from a markup domain are associated with the same security context.