Method and system for providing a client access to an external service via an application services platform

• US 8,776,082 B2
• Filed: 12/28/2012
• Issued: 07/08/2014
• Est. Priority Date: 10/02/2006
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Cheenath, Manoj, Chasman, Douglas
• Primary Examiner(s): Sough, H S
• Assistant Examiner(s): JORDAN, KIMBERLY L
• Application Number:
  US13/730,712
• Publication Number:
  US 20130117810A1
• Time in Patent Office: 557 Days
• US Class Current: 719/313
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1017 based on a round robin mechanism
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561

Abstract

In accordance with embodiments, there are provided mechanisms and methods for providing a client access to an external service via an application services platform. These mechanisms and methods for providing a client access to an external service via an application services platform can enable embodiments to provide effective access to such external service without necessarily forcing the client to access the external service separately with respect to the application services platform. The ability of embodiments to provide such technique can enable the integration of an external service with an application services platform, thus allowing the client to access the external service in a more effective manner.

Claims

1. A method, comprising:

detecting a client request from an application supported by an application services platform including at least one application server to access an external service, the client request including authentication information for authenticating a client executing the application;

identifying the client from the authentication information;

determining whether the client request complies with at least one rule specific to the identified client, including;

identifying statistics associated with the client request, wherein the statistics are gathered from tracking previous usage of the external service;

gauging an amount of usage of the external service required by the client request, based on the statistics gathered from tracking previous usage of the external service;

comparing the amount of usage of the external service gauged to be required by the client request to a predetermined amount of usage of the external service allowed by one of the rules specific to the client; and

determining that the client request does not comply with the one of the rules specific to the client when the amount of usage of the external service gauged to be required by the client request exceeds the predetermined amount of usage of the external service allowed by one of the rules specific to the client; and

determining that the client request complies with the one of the rules specific to the client when the amount of usage of the external service gauged to be required by the client request does not exceed the predetermined amount of usage of the external service allowed by one of the rules specific to the client;

authenticating, by the application services platform, the client request using the authentication information;

invoking the external service on behalf of the client in response to a determination that the authentication information is valid and the determination that the client request complies with the one of the rules specific to the client; and

sending the client request to the external service.

2. The method of claim 1, wherein the application includes a network browser.

3. The method of claim 1, wherein the external service is not provided by the application services platform.

4. The method of claim 1, wherein the message information is received, at least in part, with the client request.

5. The method of claim 1, wherein another one of the rules relates to a protocol associated with the client request.

6. The method of claim 1, wherein another one of the rules relates to an address range associated with the client request.

7. The method of claim 1, wherein another one of the rules relates to a size of the client request.

8. The method of claim 1, wherein another one of the rules relates to a number of the client requests.

9. The method of claim 1, wherein the at least one rule is user configurable.

10. The method of claim 1, wherein the at least one rule is different for a plurality of other clients.

11. The method of claim 1, wherein the application services platform includes a multi-tenant database system.

12. The method of claim 1, wherein the external service includes a data validation service for validating data stored by the application services platform.

13. The method of claim 1, wherein another one of the rules defines whether the external service is allowed to be accessed by the client.

14. The method of claim 1, wherein the tracking of the previous usage of the external service is specific to previous usage of the external service by the client.

15. A non-transitory machine-readable medium carrying one or more sequences of instructions which, when executed by one or more processors, cause the one or more processors to carry out the steps of:

detecting a client request from an application supported by an application services platform including at least one application server to access an external service, the client request including authentication information for authenticating a client executing the application;

identifying the client from the authentication information;

determining whether the client request complies with at least one rule specific to the identified client, including;

identifying statistics associated with the client request, wherein the statistics are gathered from tracking previous usage of the external service;

gauging an amount of usage of the external service required by the client request, based on the statistics gathered from tracking previous usage of the external service;

comparing the amount of usage of the external service gauged to be required by the client request to a predetermined amount of usage of the external. service allowed by one of the rules specific to the client; and

determining that the client request does not comply with the one of the rules specific to the client when the amount of usage of the external service gauged to be required by the client request exceeds the predetermined amount of usage of the external service allowed by one of the rules specific to the client; and

determining that the client request complies with the one of the rules specific to the client when the amount of usage of the external service gauged to be required by the client request does not exceed the predetermined amount of usage of the external service allowed by one of the rules specific to the client;

authenticating, by the application services platform, the client request using the authentication information;

invoking the external service on behalf of the client in response to a determination that the authentication information is valid and the determination that the client request complies with the one of the rules specific to the client; and

sending the client request to the external service.

16. An apparatus, comprising:

a processor; and

one or more stored sequences of instructions which, when executed the processor, cause the processor to carry out the steps of;

detecting a client request from an application supported by an application services platform including at least one application server to access an external service, the client request including authentication information for authenticating a client executing the application;

identifying the client from the authentication information;

determining whether the client request complies with at least one rule specific to the identified client, including;

identifying statistics associated with the client request, wherein the statistics are gathered from tracking previous usage of the external service;

gauging an amount of usage of the external service required by the client request, based on the statistics gathered from tracking previous usage of the external service;

comparing the amount of usage of the external service gauged to be required by the client request to a predetermined amount of usage of the external service allowed by one of the rules specific to the client; and

determining that the client request does not comply with the one of the rules specific to the client when the amount of usage of the external service gauged to be required by the client request exceeds the predetermined amount of usage of the external service allowed by one of the rules specific to the client; and

determining that the client request complies with the one of the rules specific to the client when the amount of usage of the external service gauged to be required by the client request does not exceed the predetermined amount of usage of the external service allowed by one of the rules specific to the client;

authenticating, by the application services platform, the client request using the authentication information;

invoking the external service on behalf of the client in response to a determination that the authentication information is valid and the determination that the client request complies with the one of the rules specific to the client; and

sending the client request to the external service.