Methods and apparatus for enabling context sharing

• US 8,528,066 B2
• Filed: 08/25/2009
• Issued: 09/03/2013
• Est. Priority Date: 08/25/2009
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Fusari, David, Hartz, George
• Primary Examiner(s): Kim, Jung
• Assistant Examiner(s): DE JESUS LASSAIA, CARLOS MANUEL
• Application Number:
  US12/547,331
• Publication Number:
  US 20110055912A1
• Time in Patent Office: 1,470 Days
• Field of Search: 726/8, 726/12
• US Class Current: 726/8
• CPC Class Codes: G06F 16/972 Access to data in other repository systems, e.g. legacy data or dynamic Web page generation
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/561 Adding application-functional data or data for application control, e.g. adding metadata

Abstract

Some embodiments relate to processing a web page requested by a web browser. The requested web page is received, and additional code is inserted into the web page that alters and/or augments the functionality of the web page. The web page is then forwarded to the web browser that requested it. The browser executes the code inserted into the web page, thereby augmenting the functionality of the web page.

Claims

1. A method comprising:

receiving, by a web proxy of a context management system, a request for a login page of a first web-based application program hosted by a first web server, wherein;

the context management system provides single sign-on functionality and context-sharing functionality to multiple web-based application programs including at least the first web-based application program and a second web-based application program hosted by a second web server, and

requests from a web browser executing on a client computer are redirected to the web proxy when the requests correspond to the web-based application programs to which the context management system provides the single sign-on functionality and the context-sharing functionality;

obtaining, by the web proxy, the login page of the first web-based application program from the first web server;

transforming, by the web proxy, the login page of the first web-based application program by inserting software code that provides the single sign-on functionality to the first web-based application program into the login page of the first web-based application program, wherein the software code that provides the single sign-on functionality to the first web-based application program, when executed by the web browser on the client computer, causes the web browser to send single sign-on credentials supplied by a user of the client computer to a context-sharing server of the context management system to sign the user into the first web-based application program;

forwarding, by the web proxy to a first instance of the web browser, the login page of the first web-based application program including the software code that provides the single sign-on functionality to the first web-based application program;

receiving, by the web proxy, a request for a login page of the second web-based application program while the user is logged into the first web-based application program;

obtaining, by the web proxy, the login page of the second web-based application program from the second web server;

transforming, by the web proxy, the login page of the second web-based application program by inserting software code that provides the single sign-on functionality to the second web-based application program into the login page of the second web-based application program, wherein the software code that provides the single sign-on functionality to the second web-based application program, when executed by the web browser on the client computer, causes the web browser to interface with the context-sharing server to automatically sign the user into the second web-based application program;

forwarding, by the web proxy to a second instance of the web browser, the login page of the second web-based application program including the software code that provides the single sign-on functionality to the second web-based application program;

obtaining, by the web proxy, a web page of the first web-based application program and a web page of the second web-based application program in response to requests received while the user is logged into the first web-based application program and the second web-based application program;

transforming, by the web proxy, the web page of the first web-based application program and the web page of the second web-based application program by inserting software code that provides the context-sharing functionality into the web page of the first web-based application program and the web page of the second web-based application program, wherein;

the software code that provides the context-sharing functionality, when executed by the web browser on the client computer, causes the first instance of the web browser to implement a first context-sharing engine and causes the second instance of the web browser to implement a second context-sharing engine,

the first context-sharing engine notifies the context-sharing server of context changes in the first web-based application program and is notified by the context-sharing server of context changes in the second web-based application program, and

the second context-sharing engine notifies the context-sharing server of context changes in the second web-based application program and is notified by the context-sharing server of context changes in the first web-based application program;

forwarding, by the web proxy to the first instance of the web browser, the web page of the first web-based application program including the software code that provides the context-sharing functionality;

forwarding, by the web proxy to the second instance of the web browser, the web page of the second web-based application program including the software code that provides the context-sharing functionality;

receiving, by the web proxy, a request to change context that was sent by the second context-sharing engine in response to being notified by the context-sharing server of a change in context in the first web-based application program;

obtaining, by the web proxy, a requested web page of the second web-based application program from the second web server;

transforming, by the web proxy, the requested web page of the second web-based application program to generate a modified web page that reflects the change in context and includes the software code that provides the context-sharing functionality; and

forwarding, by the web proxy, the modified web page to the second instance of the web browser.

2. The method of claim 1, wherein:

the web browser sends to the context-sharing server a request to determine if the user of the client computer is logged into the context-sharing server, and

the web browser receives from the context-sharing server an indication of whether the user is logged into the context-sharing server.

3. The method of claim 1, wherein:

the context-sharing server stores the single sign-on credentials supplied by the user of the client computer.

4. The method of claim 3, wherein:

the software code that provides the single sign-on functionality to the second web-based application program, when executed by the web browser on the client computer, requests and receives the single sign-on credentials from the context-sharing server.

5. The method of claim 4, wherein:

the software code that provides the single sign-on functionality to the second web-based application program, when executed by the web browser on the client computer, enters the single sign-on credentials into the login page of the second web-based application program and submits the login page of the second web-based application program including the single sign-on credentials to the second web server.

6. The method of claim 5, further comprising:

receiving, by the web proxy, a response indicating that log in to the second web-based application program was successful.

7. The method of claim 1, wherein:

the software code that provides the single sign-on functionality to the first web-based application program, when executed by the web browser on the client computer, prompts the user to input updated single sign-on credentials for the first web-based application program if logging in to the first web-based application program is not successful; and

the context-sharing server stores the updated single sign-on credentials.

8. The method of claim 1, wherein:

the software code that provides the single sign-on functionality to the first web-based application program, when executed by the web browser on the client computer, performs a keep-alive technique to keep the user logged into the first web-based application program.

9. The method of claim 1, wherein:

the software code that provides the single sign-on functionality to the first web-based application program, when executed by the web browser on the client computer, prompts the user to input the single sign-on credentials by displaying a single sign-on login page hosted on the context-sharing server.

10. The method of claim 1, wherein:

the software code that provides the single sign-on functionality to the first web-based application program, when executed by the web browser on the client computer, prompts the user to input the single sign-on credentials by displaying the login page of the first web-based application via the web browser.

11. The method of claim 10, wherein:

the login page of the first web-based application displays a watermark in an input field to indicate that the single sign-on credentials are being provided to the context-sharing server for storage and future use.

12. The method of claim 1, wherein:

the first web-based application program comprises a search engine, and

the context of the first web-based application program comprises the user performing a new search.

13. The method of claim 1, wherein the change in context of the first web-based application program comprises the user requesting medical records of a particular patient.

14. The method of claim 13, wherein the modified web page that reflects the change in context displays billing records of the particular patient.

15. The method of claim 1, wherein redirection of requests to the web proxy is provided by at least one of the web browser, a domain name service (DNS) server, and a DNS proxy server.

16. The method of claim 15, wherein the web browser is configured to redirect requests corresponding to the first web-based application program and the second web-based application program to the web proxy.

17. The method of claim 15, wherein the DNS server is configured to map domain names of the first web server and the second web server to an IP address of the web proxy.

18. The method of claim 15, wherein the DNS proxy is configured to intercept DNS requests to the DNS server and to respond to the DNS requests by supplying an IP address of the web proxy.

19. The method of claim 15, wherein the context management system comprises the DNS proxy server.

20. The method of claim 1, wherein:

the first context-sharing engine and the second context sharing engine are instructed by the context-sharing server to lock displayed browser windows when a most recent user access request is not within a predetermined amount of time.

21. The method of claim 1, wherein at least one of the first context-sharing engine and the second context-sharing engine is configured to receive notifications from the context-sharing server of changes in context in a remotely executing application program that is emulated on the client computer using an emulation client.

22. The method of claim 21, wherein the software code that provides the context-sharing functionality joins the remotely execution application program to an existing context session which includes the first web-based application program and the second web-based application program.

23. At least one tangible computer-readable device encoded with computer-executable instructions that, when executed, cause at least one computer to perform a method comprising:

receiving, by a web proxy of a context management system, a request for a login page of a first web-based application program hosted by a first web server, wherein;

the context management system provides single sign-on functionality and context-sharing functionality to multiple web-based application programs including at least the first web-based application program and a second web-based application program hosted by a second web server, and

requests from a web browser executing on a client computer are redirected to the web proxy when the requests correspond to the web-based application programs to which the context management system provides the single sign-on functionality and the context-sharing functionality;

obtaining, by the web proxy, the login page of the first web-based application program from the first web server;

transforming, by the web proxy, the login page of the first web-based application program by inserting software code that provides the single sign-on functionality to the first web-based application program into the login page of the first web-based application program, wherein the software code that provides the single sign-on functionality to the first web-based application program, when executed by the web browser on the client computer, causes the web browser to send single sign-on credentials supplied by a user of the client computer to a context-sharing server of the context management system to sign the user into the first web-based application program;

forwarding, by the web proxy to a first instance of the web browser, the login page of the first web-based application program including the software code that provides the single sign-on functionality to the first web-based application program;

receiving, by the web proxy, a request for a login page of the second web-based application program while the user is logged into the first web-based application program;

obtaining, by the web proxy, the login page of the second web-based application program from the second web server;

transforming, by the web proxy, the login page of the second web-based application program by inserting software code that provides the single sign-on functionality to the second web-based application program into the login page of the second web-based application program, wherein the software code that provides the single sign-on functionality to the second web-based application program, when executed by the web browser on the client computer, causes the web browser to interface with the context-sharing server to automatically sign the user into the second web-based application program;

forwarding, by the web proxy to a second instance of the web browser, the login page of the second web-based application program including the software code that provides the single sign-on functionality to the second web-based application program;

obtaining, by the web proxy, a web page of the first web-based application program and a web page of the second web-based application program in response to requests received while the user is logged into the first web-based application program and the second web-based application program;

transforming, by the web proxy, the web page of the first web-based application program and the web page of the second web-based a licaionm m by inserting n software code that provides the context-sharing functionality into the web page of the first web-based application program and the web page of the second web-based application program, wherein;

the software code that provides the context-sharing functionality, when executed by the web browser on the client computer, causes the first instance of the web browser to implement a first context-sharing engine and causes the second instance of the web browser to implement a second context-sharing engine,

the first context-sharing engine notifies the context-sharing server of context changes in the first web-based application program and is notified by the context-sharing server of context changes in the second web-based application program, and

the second context-sharing engine notifies the context-sharing server of context changes in the second web-based application program and is notified by the context-sharing server of context changes in the first web-based application program;

forwarding, by the web proxy to the first instance of the web browser, the web page of the first web-based application program including the software code that provides the context-sharing functionality;

forwarding, by the web proxy to the second instance of the web browser, the web page of the second web-based application program including the software code that provides the context-sharing functionality;

receiving, by the web proxy, a request to change context that was sent by the second context-sharing engine in response to being notified by the context-sharing server of a change in context in the first web-based application program;

obtaining, by the web proxy, a requested web page of the second web-based application program from the second web server;

transforming, by the web proxy, the requested web page of the second web-based application program to generate a modified web page that reflects the change in context and includes the software code that provides the context-sharing functionality; and

forwarding, by the web proxy, the modified web page to the second instance of the web browser.

24. The at least one tangible computer-readable device of claim 23, wherein:

the web browser sends to the context-sharing server a request to determine if the user of the client computer is logged into the context-sharing server, and

the web browser receives from the context-sharing server an indication of whether the user is logged into the context-sharing server.

25. The at least one tangible computer-readable device of claim 23, wherein:

the context-sharing server stores the single sign-on credentials supplied by the user of the client computer.

26. The at least one tangible computer-readable device of claim 25, wherein:

the software code that provides the single sign-on functionality to the second web-based application program, when executed by the web browser on the client computer, requests and receives the single sign-on credentials from the context-sharing server.

27. The at least one tangible computer-readable device of claim 26, wherein:

the software code that provides the single sign-on functionality to the second web-based application program, when executed by the web browser on the client computer, enters the single sign-on credentials into the login page of the second web-based application program and submits the login page of the second web-based application program including the single sign-on credentials to the second web server.

28. The at least one tangible computer-readable device of claim 27, wherein the method further comprises:

receiving, by the web proxy, a response indicating that log in to the second web-based application program was successful.

29. The at least one tangible computer-readable device of claim 23, wherein:

the software code that provides the single sign-on functionality to the first web-based application program, when executed by the web browser on the client computer, prompts the user to input updated single sign-on credentials for the first web-based application program if logging in to the first web-based application program is not successful; and

the context-sharing server stores the updated single sign-on credentials.

30. The at least one tangible computer-readable device of claim 23, wherein:

the software code that provides the single sign-on functionality to the first web-based application program, when executed by the web browser on the client computer, performs a keep-alive technique to keep the user logged into the first web-based application program.

31. The at least one tangible computer-readable device of claim 23, wherein:

the software code that provides the single sign-on functionality to the first web-based application program, when executed by the web browser on the client computer, prompts the user to input the single sign-on credentials by displaying a single sign-on login page hosted on the context-sharing server.

32. The at least one tangible computer-readable device of claim 23, wherein:

the software code that provides the single sign-on functionality to the first web-based application program, when executed by the web browser on the client computer, prompts the user to input the single sign-on credentials by displaying the login page of the first web-based application via the web browser.

33. The at least one tangible computer-readable device of claim 32, wherein:

the login page of the first web-based application displays a watermark in an input field to indicate that the single sign-on credentials are being provided to the context-sharing server for storage and future use.

34. The at least one tangible computer-readable device of claim 23, wherein:

the first web-based application program comprises a search engine, and

the change in context of the first web-based application program comprises the user performing a new search.

35. The at least one tangible computer-readable device of claim 23, wherein the change in context of the first web-based application program comprises the user requesting medical records of a particular patient.

36. The at least one tangible computer-readable device of claim 35, wherein the modified web page that reflects the change in context displays billing records of the particular patient.

37. The at least one tangible computer-readable device of claim 23, wherein redirection of requests to the web proxy is provided by at least one of the web browser, a domain name service (DNS) server, and a DNS proxy server.

38. The at least one tangible computer-readable device of claim 37, wherein the web browser is configured to redirect requests corresponding to the first web-based application program and the second web-based application program server to the web proxy.

39. The at least one tangible computer-readable device of claim 37, wherein the DNS server is configured to map domain names of the first web server and the second web server to an IP address of the web proxy.

40. The at least one tangible computer-readable device of claim 37, wherein the DNS proxy is configured to intercept DNS requests to the DNS server and to respond to the DNS requests by supplying an IP address of the web proxy.

41. The at least one tangible computer-readable device of claim 37, wherein the context management system comprises the DNS proxy server.

42. The at least one tangible computer-readable device of claim 23, wherein:

the first context-sharing engine and the second context sharing engine are instructed by the context-sharing server to lock displayed browser windows when a most recent user access request is not within a predetermined amount of time.

43. The at least one tangible computer-readable device of claim 23, wherein at least one of the first context-sharing engine and the second context-sharing engine is configured to receive notifications from the context-sharing server of changes in context in a remotely executing application program that is emulated on the client computer using an emulation client.

44. The at least one tangible computer-readable device of claim 43, wherein the software code that provides the context-sharing functionality joins the remotely execution application program to an existing context session which includes the first web-based application program and the second web-based application program.

45. At least one computer comprising:

memory storing processor-executable instructions; and

at least one processor, coupled to the memory, that executes the processor-executable instructions to;

receive, by a web proxy of a context management system, a request for a login page of a first web-based application program hosted by a first web server, wherein;

the context management system provides single sign-on functionality and context-sharing functionality to multiple web-based application programs including at least the first web-based application program and a second web-based application program hosted by a second web server, and

requests from a web browser executing on a client computer are redirected to the web proxy when the requests correspond to the web-based application programs to which the context management system provides the single sign-on functionality and the context-sharing functionality;

obtain, by the web proxy, the login page of the first web-based application program from the first web server;

transform, by the web proxy, the login page of the first web-based application program by inserting software code that provides the single sign-on functionality to the first web-based application program into the login page of the first web-based application program, wherein the software code that provides the single sign-on functionality to the first web-based application program, when executed by the web browser on the client computer, causes the web browser to send single sign-on credentials supplied by a user of the client computer to a context-sharing server of the context management system to sign the user into the first web-based application program;

forward, by the web proxy to a first instance of the web browser, the login page of the first web-based application program including the software code that provides the single sign-on functionality to the first web-based application program;

receive, by the web proxy, a request for a login page of the second web-based application program while the user is logged into the first web-based application program;

obtain, by the web proxy, the login page of the second web-based application program from the second web server;

transform, by the web proxy, the login page of the second web-based application program by inserting software code that provides the single sign-on functionality to the second web-based application program into the login page of the second web-based application program, wherein the software code that provides the single sign-on functionality to the second web-based application program, when executed by the web browser on the client computer, causes the web browser to interface with the context-sharing server to automatically sign the user into the second web-based application program;

forward, by the web proxy to a second instance of the web browser, the login page of the second web-based application program including the software code that provides the single sign-on functionality to the second web-based application program;

obtain, by the web proxy, a web page of the first web-based application program and a web page of the second web-based application program in response to requests received while the user is logged into the first web-based application program and the second web-based application program;

transform, by the web proxy, the web page of the first web-based application program and the web page of the second web-based application program by inserting software code that provides the context-sharing functionality into the web page of the first web-based application program and the web page of the second web-based application program, wherein;

the software code that provides the context-sharing functionality, when executed by the web browser on the client computer, causes the first instance of the web browser to implement a first context-sharing engine and causes the second instance of the web browser to implement a second context-sharing engine,

the first context-sharing engine notifies the context-sharing server of context changes in the first web-based application program and is notified by the context-sharing server of context changes in the second web-based application program, and

the second context-sharing engine notifies the context-sharing server of context changes in the second web-based application program and is notified by the context-sharing server of context changes in the first web-based application program;

forward, by the web proxy to the first instance of the web browser, the web page of the first web-based application program including the software code that provides the context-sharing functionality;

forward, by the web proxy to the second instance of the web browser, the web page of the second web-based application program including the software code that provides the context-sharing functionality;

receive, by the web proxy, a request to change context that was sent by the second context-sharing engine in response to being notified by the context-sharing server of a change in context in the first web-based application program;

obtain, by the web proxy, a requested web page of the second web-based application program from the second web server;

transform, by the web proxy, the requested web page of the second web-based application program to generate a modified web page that reflects the change in context and includes the software code that provides the context-sharing functionality; and

forward, by the web proxy, the modified web page to the second instance of the web browser.

46. The at least one computer of claim 45, wherein:

the web browser sends to the context-sharing server a request to determine if the user of the client computer is logged into the context-sharing server, and

the web browser receives from the context-sharing server an indication of whether the user is logged into the context-sharing server.

47. The at least one computer of claim 46, wherein:

the context-sharing server stores the single sign-on credentials supplied by the user of the client computer.

48. The at least one computer of claim 47, wherein:

the software code that provides the single sign-on functionality to the second web-based application program, when executed by the web browser on the client computer, requests and receives the single sign-on credentials from the context-sharing server.

49. The at least one computer of claim 48, wherein:

the software code that provides the single sign-on functionality to the second web-based application program, when executed by the web browser on the client computer, enters the single sign-on credentials into the login page of the second web-based application program and submits the login page of the second web-based application program including the single sign-on credentials to the second web server.

50. The at least one computer of claim 49, wherein the at least one processor executes the processor-executable instructions to:

receive, by the web proxy, a response indicating that log in to the second web-based application program was successful.

51. The at least one computer of claim 45, wherein:

the software code that provides the single sign-on functionality to the first web-based application program, when executed by the web browser on the client computer, prompts the user to input updated single sign-on credentials for the first web-based application program if logging in to the first web-based application program is not successful; and

the context-sharing server stores the updated single sign-on credentials.

52. The at least one computer of claim 45, wherein:

the software code that provides the single sign-on functionality to the first web-based application program, when executed by the web browser on the client computer, performs a keep-alive technique to keep the user logged into the first web-based application program.

53. The at least one computer of claim 45, wherein:

the software code that provides the single sign-on functionality to the first web-based application program, when executed by the web browser on the client computer, prompts the user to input the single sign-on credentials by displaying a single sign-on login page hosted on the context-sharing server.

54. The at least one computer of claim 45, wherein:

the software code that provides the single sign-on functionality to the first web-based application program, when executed by the web browser on the client computer, prompts the user to input the single sign-on credentials by displaying the login page of the first web-based application via the web browser.

55. The at least one computer of claim 54, wherein:

the login page of the first web-based application displays a watermark in an input field to indicate that the single sign-on credentials are being provided to the context-sharing server for storage and future use.

56. The at least one computer of claim 45, wherein:

the first web-based application program comprises a search engine, and

the change in context of the first web-based application program comprises the user performing a new search.

57. The at least one computer of claim 45, wherein the change in context of the first web-based application program comprises the user requesting medical records of a particular patient.

58. The at least one computer of claim 57, wherein the modified web page that reflects the change in context displays billing records of the particular patient.

59. The at least one computer of claim 45, wherein the web browser is configured to redirect requests corresponding to the first web-based application program and the second web-based application program to the web proxy.

60. The at least one computer of claim 45, wherein redirection of requests to the web proxy is provided by a domain name service (DNS) server configured to map the domain names of the first web server and the second web server to an IP address of the web proxy.

61. The at least one computer of claim 45, wherein redirection of requests to the web proxy is provided by a domain name service (DNS) proxy server configured to intercept DNS requests to a DNS server and to respond to the DNS requests by supplying an IP address of the web proxy.

62. The at least one computer of claim 45, wherein:

the first context-sharing engine and the second context sharing engine are instructed by the context-sharing server to lock displayed browser windows when a most recent user access request is not within a predetermined amount of time.

63. The at least one computer of claim 45, wherein at least one of the first context-sharing engine and the second context-sharing engine is configured to receive notifications from the context-sharing server of changes in context in a remotely executing application program that is emulated on the client computer using an emulation client.

64. The at least one computer of claim 63, wherein the software code that provides the context-sharing functionality joins the remotely execution application program to an existing context session which includes the first web-based application program and the second web-based application program.