Extensible configuration system to allow a website to authenticate users based on an authorization protocol

• US 9,185,112 B2
• Filed: 10/10/2012
• Issued: 11/10/2015
• Est. Priority Date: 10/10/2012
• Status: Active Grant

• Current Assignee: Adobe Systems Incorporated (Adobe Inc.)
• Original Assignee: Adobe Systems Incorporated (Adobe Inc.)
• Inventors: Wilkes, Ryan, Trieloff, Lars, Meschberger, Felix, Norris, Tyson, Doshi, Pankil
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): KANAAN, SIMON P
• Application Number:
  US13/648,825
• Publication Number:
  US 20140101723A1
• Time in Patent Office: 1,126 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06Q 30/0629 for generating comparisons
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/306 User profiles

Abstract

An extensible configuration system to allow a website to authenticate users based on an authorization protocol is disclosed. In some embodiments, the extensible configuration system includes receiving an identifier for an authentication provider; and automatically configuring a website to use the authentication provider for logging into the website.

Claims

1. A method comprising:

receiving, at a web server, a request to login to a web page of a web site that is hosted by the web server, the request comprising a user login identity for logging a user into the web page, the user login identity authenticating the user based on a separate account managed by an authentication provider different from the web server, the web site comprising a plurality of web pages configured to be logged into based on a plurality of user login identities;

contacting, at the web server, the authentication provider to authenticate the user login identity;

contacting, at the web server, the authentication provider to identify social profile data that is associated with the separate account, the social profile data comprising an interest that is associated with the separate account;

identifying, at the web server, personalized content from potential content based on the interest by at least;

generating, at the web server, a user profile based on the social profile data, the user profile comprising a tag received from the social profile data and indicating the interest;

storing the user profile locally at the web server;

matching, at the web server, the tag of the user profile to a common tag of a group of user profiles, the group of user profiles associated with other users, generated from a set of social profile data of the other users, and stored locally at the web server, the set of social profile data comprising tags associated with the other users, the user profiles grouped in the group based on the common tag identified from the tags; and

selecting, at the web server, the personalized content based on matching the tag to the common tag such that the personalized content is associated with the group of user profiles and such that, when logging the user into another web page of the plurality of web pages based on another user login identity of the plurality of user login identities, the other web page is personalized differently from the web page by selecting different personalized content from the potential content based on the other user login identity and the user profile;

permitting, at the web server, the login to the web page based on the authentication provider authenticating the user login identity; and

providing, at the web server, the personalized content as part of the web page of the web site hosted by the web server.

2. The method of claim 1 further comprising:

receiving user profile data associated with the user login identity from the authentication server; and

identifying additional personalized content based on the user profile data received.

3. The method of claim 2, wherein identifying additional personalized content comprises:

identifying a trait based on the user profile data received; and

selecting a group of potential advertisements associated with the trait identified.

4. The method of claim 1, further comprising:

receiving a permission to a resource associated with the user login identity from the authentication provider; and

accessing the resource using the permission received.

5. The method of claim 1, wherein the personalized content comprises a teaser, a newsletter, an advertisement, a customized web page, or an e-mail communication to be displayed on the web page provided.

6. The method of claim 1, further comprising:

identifying rules and conditions for selecting the personalized content based on the user profile; and

causing a computing device of the user to store the user profile, the rules and conditions, and the tag in a user context at a browser of the computing device, and wherein identifying the personalized content comprises;

accessing the user context from the computing device of the user;

matching the user context to the group of user profiles based on the tag stored in the context; and

selecting the personalized content based on the matching of the user context to the group of user profiles and based on determining that the rules and conditions stored in the context permit the selection of the personalized content.

7. The method of claim 6, wherein the user profile is generated based on sets of social profile data that are received from a plurality of authentication providers and that correspond to a plurality of user login identities of the user.

8. The method of claim 6, wherein the web site is configured to control using the separate account to log into each web page based on each web page and user login identity.

9. The method of claim 1, wherein logging the user into the web page comprises receiving a particular set of user profile data from the authentication provider specific to the web page, wherein logging the user into the other web page comprises receiving another particular set of user profile data from the authentication provider specific to the other web page, and wherein each of the two web pages is personalized based on the respective particular set of user profile data.

10. The method of claim 1, wherein the web site is hosted on a web authoring platform, wherein the web authoring platform is configured to provide an authentication engine and a social connect engine, wherein the authentication engine is configured to communicate with authentication providers to authenticate the user based on user login identities, and wherein the social connect engine is configured to personalize the web page.

11. The method of claim 10, wherein the authentication engine and the social connect engine are provided to the web site as one or more pluggable services, wherein the one or more pluggable services are configured to at least:

set-up authentications users with the authentication provider based on generating an application associated with the authentication provider and, in response to generating the application, receiving an application identifier and a secret from the authentication provider;

generate a service at the web authoring platform based on the application, the service having a configuration comprising the application identifier and the secret; and

authenticate the user by using the service to at least provide the user login identity, the application identifier, and the secret to the authentication provider.

12. A computer program product comprising a non-transitory computer-readable medium embodying program instructions, the program instructions comprising:

program instructions for receiving, at a web server, a request to login to a web page of a web site that is hosted by the web server, the request comprising a user login identity for logging a user into the web page, the user login identity authenticating the user based on a separate account managed by an authentication provider different from the web server, the web site comprising a plurality of web pages configured to be logged into based on a plurality of user login identities;

program instructions for contacting, at the web server, the authentication provider to authenticate the user login identity;

program instructions for contacting, at the web server, the authentication provider to identify social profile data that is associated with the separate account, the social profile data comprising an interest that is associated with the separate account;

program instructions for identifying, at the web server, personalized content from potential content based on the interest by at least;

generating, at the web server, a user profile based on the social profile data, the user profile comprising a tag received from the social profile data and indicating the interest;

storing the user profile locally at the web server;

matching, at the web server, the tag of the user profile to a common tag of a group of user profiles, the group of user profiles associated with other users, generated from a set of social profile data of the other users, and stored locally at the web server, the set of social profile data comprising tags associated with the other users, the user profiles grouped in the group based on the common tag identified from the tags; and

selecting, at the web server, the personalized content based on matching the tag to the common tag such that the personalized content is associated with the group of user profiles and such that, when logging the user into another web page of the plurality of web pages based on another user login identity of the plurality of user login identities, the other web page is personalized differently from the web page by selecting different personalized content from the potential content based on the other user login identity and the user profile;

program instructions for permitting, at the web server, the login to the web page based on the authentication provider authenticating the user login identity; and

program instructions for providing, at the web server, the personalized content as part of the web page of the web site hosted by the web server.

13. The computer program product of claim 12, further comprising:

program instructions for receiving user profile data associated with the user login identity from the authentication server; and

program instructions for identifying additional personalized content based on the user profile data received.

14. The computer program product of claim 13, wherein program instructions identifying additional personalized content comprises:

program instructions for identifying a trait based on the user profile data received; and

program instructions for selecting a group of potential advertisements associated with the trait identified.

15. The computer program product of claim 12, further comprising:

program instructions for receiving a permission to a resource associated with the user login identity from the authentication server; and

program instructions for accessing the resource using the permission received.

16. The computer program product of claim 12, wherein the personalized content comprises a teaser, a newsletter, an advertisement, a customized web page, or an e-mail communication to be displayed on the web page provided.

17. A system of a web server comprising a processor and a non-transitory computer-readable medium, wherein the non-transitory computer-readable medium embodies one or more program components that configure the web server to carry out operations comprising:

receiving a request to login to a web page of a web site that is hosted by the web server, the request comprising a user login identity for logging a user into the web page, the user login identity authenticating the user based on a separate account managed by an authentication provider different from the web server, the web site comprising a plurality of web pages configured to be logged into based on a plurality of user login identities;

contacting the authentication provider to authenticate the user login identity;

contacting the authentication provider to identify social profile data that is associated with the separate account, the social profile data comprising an interest that is associated with the separate account;

identifying personalized content from potential content based on the interest by at least;

generating a user profile based on the social profile data, the user profile comprising a tag received from the social profile data and indicating the interest;

storing the user profile locally at the web server;

matching the tag of the user profile to a common tag of a group of user profiles, the group of user profiles associated with other users, generated from a set of social profile data of the other users, and stored locally at the web server, the set of social profile data comprising tags associated with the other users, the user profiles grouped in the group based on the common tag identified from the tags;

selecting the personalized content based on matching the tag to the common tag such that the personalized content is associated with the group of user profiles and such that, when logging the user into another web page of the plurality of web pages based on another user login identity of the plurality of user login identities, the other web page is personalized differently from the web page by selecting different personalized content from the potential content based on the other user login identity and the user profile;

permitting the login to the web page based on the authentication provider authenticating the user login identity; and

providing the personalized content as part of the web page of the web site hosted by the web server.

18. The system of claim 17, wherein identifying personalized content comprises:

matching the interest associated with the user login identity to a label identifying advertisements targeted to the matched interest.

19. The system of claim 17, wherein identifying personalized content comprises:

selecting a group of potential advertisements matching the interests associated with the user login identity.

20. The system of claim 17, wherein identifying personalized content comprises:

identifying a user group for the user login identity based on the interest associated with the user login identity; and

selecting a group of advertisements targeted to the user group.