Method for providing integrated user management environment to multi-internet service and system for the same

• US 20020099809A1
• Filed: 05/16/2001
• Published: 07/25/2002
• Est. Priority Date: 05/17/2000
• Status: Abandoned Application

• Current Assignee: Lycos Korea, Inc.
• Original Assignee: Lycos Korea, Inc.
• Inventors: Lee, Han Soo
• Application Number:
  US09/855,527
• Publication Number:
  US 20020099809A1
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

Method and system for providing an integrated user management environment to multi-Internet service, the method including the steps of (1) making a user'"'"'s client system to login a member management domain provided in a web service of a main server system for using a particular internet service, (2) providing a required single user ID information to the member management domain, (3) making the member management domain to authenticate the provided user ID information, (4) transferring specific information on the authenticated user from the member management domain to the user'"'"'s client system, and (5) making the user'"'"'s client system to login a service domain provided from a service server system by using the specific information, whereby providing the user with one of multi-Internet service in a portal service by using the single ID information only, whereby permitting the user to login multi-Internet service by using only one ID under the same user environment, and to use other services only by one time authentication for the ID.

Claims

1. A method for providing an integrated user management environment to multi-Internet service, comprising the steps of:

(1) making a user'"'"'s client system to login a member management domain provided in a web service of a main server system for using a particular internet service;

(2) providing a required single user ID information to the member management domain;

(3) making the member management domain to authenticate the provided user ID information;

(4) transferring specific information on the authenticated user from the member management domain to the user'"'"'s client system; and

,

(5) making the user'"'"'s client system to login a service domain provided from a service server system by using the specific information,

whereby providing the user with one of multi-Internet service in a portal service by using the single ID information only.

2. A method as claimed in claim 1, wherein the step (1) includes the steps of;

(1-1) making the user'"'"'s client system to request the service domain for a login, and

(1-2) directing the user'"'"'s client system to the member management domain instead of the service domain.

3. A method as claimed in claim 2, wherein the step (1-1) includes the steps of making the user'"'"'s client system to request an internal service domain provided from an internal service server system for a login, or making the user'"'"'s client system to request an external service domain provided from an external service server system for a login.

4. A method as claimed in claim 1, wherein the steps 3˜

5 are carried out by internal processing means included in a web server in the main server system and a service server in the service server system.

5. A method as claimed in claim 4, wherein the internal processing means is the JSP(Java Server Page).

6. A method as claimed in claim 1, wherein the step (3) includes the steps of;

(3-1) making a reference to a data base server in the main server system for user ID information, and

(3-2) comparing the received user ID information with the referred user ID information.

7. A method as claimed in claim 6, wherein the step (3) is carried out linked with data base login means contained in the web server of the main server system.

8. A method as claimed in claim 7, wherein the data base login means is the JDBC(Java Database Connectivity).

9. A method as claimed in claim 6, further comprising the step of providing the required user ID information again when the step (3) is failed.

10. A method as claimed in claim 1, wherein the step (4) includes the steps of;

(4-1) encrypting the authenticated user'"'"'s specific information in the data base server, and

(4-2) processing the encrypted specific information such that the encrypted specific information can be transferred to the user'"'"'s client system.

11. A method as claimed in claim 10, wherein the specific information includes user ID information and at least a portion of user'"'"'s member information.

12. A method as claimed in claim 11, wherein the user ID information includes a user ID and a password.

13. A method as claimed in claim 11, wherein the user member information includes a name, sex, date of birth, address, and the like.

14. A method as claimed in claim 10, wherein the step (4-1) includes the steps of;

(4-1-1) encrypting the authenticated user ID information,

(4-1-2) encrypting 8 bit information in the specific information, and

(4-1-3) encrypting 16 bit information in the specific information.

15. A method as claimed in claim 14, wherein the user ID information is also encrypted in the step (4-1-2).

16. A method as claimed in claim 10, wherein the processed user specific information has a cookie form.

17. A method as claimed in claim 1, wherein the step (5) includes the step of;

login an internal service server domain included in a domain identical to the member management domain, or a plurality of external service server domains each having a domain different from the member management domain.

18. A method as claimed in claim 17, wherein the step of login an internal service server domain includes the steps of;

(18-1) making the internal processing means to direct the user'"'"'s client system to the internal service domain,

(18-2) making the internal service domain to share the encrypted specific information provided from the user'"'"'s client system, and

(18-3) making the internal service domain to decrypt the shared specific information.

19. A method as claimed in claim 17, wherein the step of login the plurality of external service server domains includes the steps of;

(19-1) making the member management domain to obtain the specific information transferred to the user by using the internal processing means,

(19-2) directing the user'"'"'s client system to the external service domain by using the internal processing means, and

(19-3) making the member management domain to transfer the obtained user specific information to the external service domain, and

(19-4) making the external service domain to decrypt the transferred specific information.

20. A method as claimed in claim 17, wherein the service domain serves one of mail, chatting, game, and the like.

21. A method as claimed in claim 18 or 19, wherein the step of decrypting the specific information includes the steps of;

(21-1) decrypting the authenticated user ID information,

(21-2) decrypting 8 bit information in the specific information, and

(21-3) decrypting 16 bit information in the specific information.

22. A method as claimed in claim 1, after the step (5), further comprising the step of the client system re-logging in other service domain provided from service servers of the service server system, whereby providing the user with internal services different from each other, in multi-Internet services in the portal service, repeatedly.

23. A method as claimed in claim 22, wherein the step of the client system re-logging in other service domain includes the step of re-logging in the internal service server domain included in the portal service and the member management domain, or a plurality of external service server domain each having a domain different from the portal service domain.

24. A method as claimed in claim 23, wherein the step of re-logging in the internal service server domain includes the steps of;

making the user'"'"'s client system to request the other internal service domain,

making the other internal service domain to re-share the encrypted specific information transferred to the user'"'"'s client system, and

making the other service domain to re-decrypt the specific information.

25. A method as claimed in claim 23, wherein the step of re-logging in a plurality of external service server domain includes the steps of;

making the user'"'"'s client system to request other external service domain,

making the member management domain to re-obtain the specific information transferred to the user by using the internal processing means,

making the internal processing means to direct the user'"'"'s client system to the external service domain,

making the member management domain to re-transfer the obtained user specific information to the external service domain, and

making the external service domain to decrypt the transferred specific information.

26. A method as claimed in claim 25, wherein the step for making the user'"'"'s client system to make an initial login the member management domain, when the step for re-obtaining the specific information is failed.

27. A method as claimed in claim 1, further comprising the step of registering a required member ID before the step of logging in member management domain, whereby providing the user with ID information effective to whole multi-Internet service.

28. A method as claimed in claim 27, wherein the step of registering a required member ID includes the steps of;

making the user'"'"'s client system to login the membership registration domain in the web server of the main server system,

providing new user ID information and other member information to the membership registration domain,

verifying duplication of the user ID information, and

writing the verified user ID information and other member information on the data base server in the main server system.

29. A method as claimed in claim 1, further comprising the step of making the user'"'"'s client system logging out of the service domain provided from service servers of the service server system, whereby preventing leakage of user'"'"'s private information.

30. A method as claimed in claim 29, wherein the step of making the user'"'"'s client system logging out of the service domain includes the steps of;

(1) making the user'"'"'s client system to request for a logging out of the service domain,

(2) terminating a login maintaining environment between the user'"'"'s client system and the service domain, and

(3) deleting the user specific information.

31. A method as claimed in claim 30, wherein the step of making the user'"'"'s client system logging out of the service domain further includes the steps of writing user'"'"'s behaviour during the user uses the service after the step (3).

32. A method as claimed in claim 31, wherein the step of making the user'"'"'s client system logging out of the service domain further includes the steps of informing confirmation of logout to the user'"'"'s client system after the step (3).

33. A system for providing an integrated user management environment to multi-Internet service, comprising:

a user'"'"'s client system a communication thereto can be made through an external communication network, for displaying and processing various forms of information;

a main server system a communication thereto can be made through an external communication network, for providing a portal service to the user'"'"'s client system, and managing Internet services inclusive of the portal service and additional services in connection with the portal service on the whole; and

,

a plurality of service server systems a communication thereto can be made through an external communication network, for providing the additional services to the user through the portal service.

34. A system as claimed in claim 33, wherein the user'"'"'s client system includes means for displaying and processing information on the Internet.

35. A system as claimed in claim 34, wherein the means for displaying and processing information is a web browser.

36. A system as claimed in claim 34, wherein the main server system includes;

a router for connecting the main server system to other network through the Internet,

a web service part connected to the router so as to facilitate communication, for processing information to provide the portal service to the user, and

a data base service part connected to the web service part so as to facilitate communication, for storage and management of information required for the portal service.

37. A system as claimed in claim 36, wherein the web service part includes at least two web servers to cope with simultaneous login of the portal service by a plurality of users.

38. A system as claimed in claim 37, wherein the web server includes an internal processing means for making an interaction between the client system and the web server.

39. A system as claimed in claim 38, wherein the internal processing means is the JPA Jave Server Page).

40. A system as claimed in claim 37 wherein the web server includes data base login means for linking the internal processing means to the data base service part.

41. A system as claimed in claim 40 wherein the data base login means is the JDBC (Java Database Connectivity).

42. A system as claimed in claim 36, wherein the data base service part includes at least two data base servers to cope with simultaneous login of the portal service by a plurality of users.

43. A system as claimed in claim 36, wherein the main server system is connected between the router and the web service part, and further includes a protocol spreading device for preventing the main server system from being overloaded.

44. A system as claimed in claim 33, wherein the service server system includes;

an internal service server system connected to the main server system so as to facilitate communication thereto, and included in the same domain, and

a plurality of external service server system communication thereto can be made through the Internet, and each having a domain different from the main server system.

45. A system as claimed in claim 44, wherein the internal service server system includes;

a router for connecting the internal service server system to other network through the Internet, and

at least one service server connected to the router so as to facilitate communication for providing services different from each other.

46. A system as claimed in claim 44, wherein the external service server system includes;

a router for connecting the external service server system to other network through the Internet,

a web server connected to the router so as to facilitate communication for processing information to provide a particular service to the user, and

a service server connected to the web server so as to facilitate communication for providing the particular service to the user.

47. A system as claimed in claims 45 or 46, wherein the service server includes internal processing means for facilitating interaction between the user'"'"'s client system and the service server.

48. A system as claimed in claim 47, wherein the internal processing means is the JSP (Java Server Page).