Providing data to applications from an access system

• US 20020091798A1
• Filed: 02/26/2001
• Published: 07/11/2002
• Est. Priority Date: 07/10/2000
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Joshi, Vrinda S., Thiyagarajan, Lakshmi Velandai
• Granted Patent: US 7,134,137 B2
• Time in Patent Office: Days
• US Class Current: 709/219
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 16/955 using information identifiers, e.g. uniform resource locators [URL]
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 61/4523 using lightweight directory access protocol [LDAP]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

An access system is disclosed that can provide data to a downstream application. In one embodiment, the data is provided as header variables associated with an HTTP request. Other embodiments can use other protocols and other means for transmitting the data. The data provided to the downstream applications include information about the user accessing the application. In one embodiment, the data provided to the downstream application includes information from an identity profile stored in an LDAP directory structure.

Claims

1. A method for providing data to a resource, comprising the steps of:

adding one or more header variables to information associated with a request for access to said resource, said step of adding one or more header variables is performed in response to an access system event; and

providing said one or more header variables to said resource from said to information associated with said request.

2. A method according to claim 1, wherein:

said request is an HTTP request.

3. A method according to claim 1, wherein:

said step of adding includes adding said one or more header variables to an HTTP request; and

said step of providing includes directing said HTTP request toward said resource.

4. A method according to claim 1, wherein:

said step of adding includes adding said one or more header variables to a data structure on a web server.

5. A method according to claim 1, wherein:

said resource is a software application.

6. A method according to claim 1, further comprising the step of:

receiving configuration information, said configuration information includes an indication of what data to add to said information as one or more header variables.

7. A method according to claim 6, wherein:

said indication of what data to add to said information includes an indication of a variable name, a text string and an attribute.

8. A method according to claim 7, wherein:

said attribute is part of an identity profile in an LDAP directory structure.

9. A method according to claim 1, further comprising the step of:

receiving configuration information, said configuration information includes an indication of a set of one or more attributes from an identity profile to add to said information.

10. A method according to claim 9, wherein:

said configuration information is for configuring a policy domain.

11. A method according to claim 9, wherein:

said configuration information is for configuring a policy.

12. A method according to claim 1, further comprising the steps of:

detecting said access system event.

13. A method according to claim 12, wherein:

said access system event is an authorization success event.

14. A method according to claim 12, wherein:

said access system event is an authorization failure event.

15. A method according to claim 12, wherein:

said access system event is an authentication success event.

16. A method according to claim 12, wherein:

said access system event is an authentication failure event.

17. A method according to claim 1, further comprising the steps of:

;

receiving said request from a user, said user is associated with an identity profile, said one or more header variables include information from said identity profile; and

authorizing access to said resource for said user, said step of authorizing is said access system event.

18. A method according to claim 1, wherein said step of adding includes the steps of:

determining whether a redirect URL is designated for said access system event; and

determining whether one or more header variables are designated for said access system event.

19. A method according to claim 1, further comprising the step of:

adding a redirect URL to said information associated with said request.

20. A method according to claim 1, further comprising the steps of:

receiving said information at said resource;

reading said one or more header variables from said information; and

responding to said request, said step of responding includes using said header variables.

21. A method for providing data to a resource, comprising the steps of:

receiving request information in response to an access system event;

reading one or more header variables from said request information; and

responding to said request, said step of responding includes using said header variables.

22. A method according to claim 21, wherein:

said step of receiving request information includes receiving an HTTP request, said HTTP request includes said one or more header variables.

23. A method according to claim 21, wherein:

said request information is received from a web server that stores said request information in a data structure.

24. A method according to claim 21, wherein:

said one or more header variables include attribute information from an identity profile.

25. A method according to claim 21, wherein:

said one or more header variables include attribute information from an identity profile stored in an LDAP directory structure.

26. A method according to claim 21, wherein:

said resource is protected by said access system.

28. One or more processor readable storage devices according to claim 27, wherein:

said request is an HTTP request.

29. One or more processor readable storage devices according to claim 27,wherein said method further comprises the step of:

receiving configuration information, said configuration information includes an indication of what data to add to said information as one or more header variables.

30. One or more processor readable storage devices according to claim 27, wherein said method further comprises the step of:

receiving configuration information, said configuration information includes an indication of a set of one or more attributes from an identity profile to add to said information.

31. One or more processor readable storage devices according to claim 27, wherein said method further comprises the step of:

detecting said access system event.

32. One or more processor readable storage devices according to claim 27, wherein said method further comprises the steps of:

receiving said request from a user, said user is associated with an identity profile, said one or more header variables include information from said identity profile; and

authorizing access to said resource for said user, said step of authorizing is said access system event.

27. One or more processor readable storage devices having processor readable code embodied on said processor readable storage devices, said processor readable code for programming one or more processors to perform a method comprising the steps of:

adding one or more header variables to information associated with a request for access to said resource, said step of adding one or more header variables is performed in response to an access system event; and

providing said one or more header variables to said resource from said to information associated with said request.

33. An access system, comprising:

a communication interface;

one or more storage devices; and

one or more processors in communication with said one or more storage devices and said communication interface, said one or more processors programmed to preform a method comprising the steps of;

adding one or more header variables to information associated with a request for access to said resource, said step of adding one or more header variables is performed in response to an access system event; and

providing said one or more header variables to said resource from said to information associated with said request.

34. An apparatus according to claim 33, wherein:

said request is an HTTP request.

35. An apparatus according to claim 33,wherein said method further comprises the step of:

receiving configuration information, said configuration information includes an indication of what data to add to said information as one or more header variables.

36. An apparatus according to claim 33, wherein said method further comprises the step of:

receiving configuration information, said configuration information includes an indication of a set of one or more attributes from an identity profile to add to said information.

37. An apparatus according to claim 33, wherein said method further comprises the step of:

detecting said access system event.

38. An apparatus according to claim 33, wherein said method further comprises the steps of:

receiving said request from a user, said user is associated with an identity profile, said one or more header variables include information from said identity profile; and

authorizing access to said resource for said user, said step of authorizing is said access system event.