Context aware server devices

• US 20030074455A1
• Filed: 10/11/2001
• Published: 04/17/2003
• Est. Priority Date: 10/11/2001
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Nguyen, Khanh, Cao, Tai Anh, Banning, Kenneth Ray
• Application Number:
  US09/974,982
• Publication Number:
  US 20030074455A1
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

A server system and method in which the server determines whether a requesting client is accessing a requested document or page in a manner contemplated by the server. The server may first determine whether the client has direct access authority such as by interpreting cookie information supplied with the client request. The client may obtain direct access authority if the client has previously accessed server documents in a prescribed manner. If the client lacks direct access, the server may determine if the client has been referred or quoted to the requested page by a third party server or referrer that has authority to refer clients to the requested page. The server device may maintain a table of information in its storage to facilitate the determination of which referring parties have authority to which documents on the server. If the server determines that a particular request lacks both direct access authority and indirect authority, the server may return a version of the requested document (the unauthorized version) that indicates the lack of authority. The server may generate the unauthorized version of a document from the authorized version by executing a script to insert text or otherwise change the appearance of the returned document.

Claims

1. A method of processing a client request for a document from a server in a data processing network, comprising:

determining whether the requested document is context restricted;

responsive to determining that the requested document is context restricted, determining whether the client has access authority to the requested document; and

responsive to determining that the client lacks access authority, responding to the client request by returning a version of the requested document that differs from a version returned to a client having access authority.

2. The method of claim 1, wherein determining whether the client has access authority includes determining whether the client has direct access authority.

3. The method of claim 2, wherein the client request comprises an HTTP formatted request and further wherein determining whether the client has direct access authority includes comparing state information contained in the request to a predetermined value.

4. The method of claim 3, wherein the state information required to acquire direct access authority is sent to the client when the client views a document or set of documents that provide the required context for the requested document.

5. The method of claim 1, wherein determining whether the client has access authority includes determining whether the client has indirect access authority.

6. The method of claim 5, wherein the client request comprises an HTTP formatted request and further wherein determining whether the client has indirect access authority includes determining whether the client has been referred to the requested document by a third party server.

7. The method of claim 6, wherein determining whether the client has been referred by a third party server comprises determining whether the value of a request header field in the client request matches at least one entry in a table of authorized referrers.

8. The method of claim 7, wherein the request header field comprises a referrer header field of an HTTP request and wherein the table of authorized referrers is stored permanent storage to which the server has access.

9. The method of claim 1, wherein returning a version of the requested document that differs includes retrieving the requested document and running an application to insert a visibly detectable notice indicating that the requested document is being viewed out of context.

10. A computer program product comprising a sequence of instructions for processing a client request for a document from a server in a data processing network, the sequence being encoded on a computer readable medium, comprising:

computer code means for determining whether the requested document is context restricted;

computer code means for determining whether the client has access authority to the requested document responsive to determining that the requested document is context restricted; and

computer code means for responding to the client request by returning a version of the requested document responsive to determining that the client lacks access authority, wherein the version differs from a version returned to a client having access authority.

11. The computer program product of claim 10, wherein the code means for determining whether the client has access authority includes code means for determining whether the client has direct access authority.

12. The computer program product of claim 11, wherein the client request comprises an HTTP formatted request and further wherein the code means for determining whether the client has direct access authority includes code means for comparing state information contained in the request to a predetermined value.

13. The computer program product of claim 12, wherein the state information required to acquire direct access authority is sent to the client when the client views a document or set of documents that provide the required context for the requested document.

14. The computer program product of claim 10, wherein the code means for determining whether the client has access authority includes code means for determining whether the client has indirect access authority.

15. The computer program product of claim 14, wherein the client request comprises an HTTP formatted request and further wherein the code means for determining whether the client has indirect access authority includes code means for determining whether the client has been referred to the requested document by a third party server.

16. The computer program product of claim 15, wherein the code means for determining whether the client has been referred by a third party server comprises code means for determining whether the value of a request header field in the client request matches at least one entry in a table of authorized referrers.

17. The computer program product of claim 16, wherein the request header field comprises a referrer header field of an HTTP request and wherein the table of authorized referrers is stored in permanent storage to which the server has access.

18. The computer program product of claim 10, wherein the code means for returning a version of the requested document that differs includes code means for retrieving the requested document and code means for running an application to insert a visibly detectable notice indicating that the requested document is being viewed out of context.

19. A server for use in a data processing network, the server including processor and memory containing a sequence of instructions for processing a client request for a document from a server in a data processing network, the sequence being encoded on a computer readable medium, the instructions comprising:

computer code means for determining whether the requested document is context restricted;

computer code means for determining whether the client has access authority to the requested document responsive to determining that the requested document is context restricted; and

computer code means for responding to the client request by returning a modified version of the requested document responsive to determining that the client lacks access authority, wherein the version differs from the requested document returned to a client having access authority.

20. The server of claim 19, wherein the code means for determining whether the client has access authority includes code means for determining whether the client has direct access authority.

21. The server of claim 20, wherein the client request comprises an HTTP formatted request and further wherein the code means for determining whether the client has direct access authority includes code means for comparing state information contained in the request to a predetermined value.

22. The server of claim 21, wherein the state information required to acquire direct access authority is sent to the client when the client views a document or set of documents that provide the required context for the requested document.

23. The server of claim 19, wherein the code means for determining whether the client has access authority includes code means for determining whether the client has indirect access authority.

24. The server of claim 23, wherein the client request comprises an HTTP formatted request and further wherein the code means for determining whether the client has indirect access authority includes code means for determining whether the client has been referred to the requested document by a third party server.

25. The server of claim 24, wherein the code means for determining whether the client has been referred by a third party server comprises code means for determining whether the value of a request header field in the client request matches at least one entry in a table of authorized referrers.

26. The server of claim 25, wherein the request header field comprises a referrer header field of an HTTP request and wherein the table of authorized referrers is stored in permanent storage to which the server has access.

27. The server of claim 19, wherein the code means for returning a modified version of the requested document includes code means for retrieving the requested document and code means for running an application to insert a visibly detectable notice indicating that the requested document is being viewed out of context.