Method and system for storing a web browser application session cookie from another client application program

• US 20060294196A1
• Filed: 06/27/2005
• Published: 12/28/2006
• Est. Priority Date: 06/27/2005
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Fisher, Darin W., Feirouz, Elie, Rosenberg, Doron, Wilson, Richard M.
• Application Number:
  US11/167,787
• Publication Number:
  US 20060294196A1
• Time in Patent Office: Days
• US Class Current: 709/217
• CPC Class Codes: G06F 16/957 Browsing optimisation, e.g. caching or content distillation
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

A system for storing a session cookie from another client application program, in which a separate client application is allowed to launch an external browser, and to supply a browser with a session cookie containing user specific session information. The browser is extended to support a new URI scheme providing for indication of a session cookie to be embedded into the browser, as well as an embedded URI to be processed by the browser after the indicated session cookie has been loaded into the browser. After the browser has been extended to handle the new URI scheme, a URI using the new scheme is passed to the browser as a command line parameter by a separate application program. The extended browser processes the new scheme URI, extracting the session cookie data and an embedded URI to be subsequently loaded. A client application separate from the browser may authenticate the user prior to the user requesting access to a secure Web page through the browser. The results of such background authentication steps, which are performed transparently with regard to the user, are then provided to the browser from the non-browser program, in order that the user need not re-supply them. Such previously obtained authentication credentials may be loaded by the non-browser application into the browser program on behalf of the user. Such user authentication credentials may be passed to the browser through a session cookie indicated to the browser using the new URI scheme disclosed herein.

Claims

1. A method for providing user access to a Web browser application program, comprising:

extending said Web browser application program to process an enhanced uniform resource identifier scheme, wherein said enhanced uniform resource identifier scheme defines a session cookie parameter and an embedded uniform resource identifier part;

receiving user data by an application program other than said Web browser application program;

receiving, by said application program other than said Web browser application program, a user indication that said Web browser application program is to be used to access a desired resource; and

forming, by said application program other than said Web browser application program, a uniform resource identifier consistent with said enhanced uniform resource identifier scheme, wherein said uniform resource identifier includes a session cookie parameter identifying said user data and an embedded uniform resource identifier identifying said desired resource.

2. The method of claim 1, further comprising passing said uniform resource identifier consistent with said enhanced uniform resource identifier scheme from said application program other than said Web browser application program to said Web browser application program.

3. The method of claim 2, further comprising processing said uniform resource identifier consistent with said enhanced uniform resource identifier scheme in said Web browser application program, wherein said processing includes storing said session cookie parameter identifying said user data for future reference by said Web browser application program, and accessing said desired resource based on said embedded resource identifier identifying said desired resource.

4. The method of claim 3, wherein said Web browser application program references and uses said user data identified by said session cookie while accessing said desired resource.

5. The method of claim 1, wherein said user data comprises at least one user authentication credential.

6. The method of claim 5, wherein said at least one user authentication credential comprises a password.

7. The method of claim 5, wherein said at least one user authentication credential comprises a single sign on token.

8. The method of claim 1, wherein said user data comprises encrypted user data.

9. The method of claim 4, further comprising said Web browser application program deleting said session cookie in response to detection that a user session has ended.

10. A system having a computer readable medium, said computer readable medium having program code for providing user access to a Web browser application program stored thereon, said program code comprising:

program code for extending said Web browser application program to process an enhanced uniform resource identifier scheme, wherein said enhanced uniform resource identifier scheme defines a session cookie parameter and an embedded uniform resource identifier part;

program code for receiving user data by an application program other than said Web browser application program;

program code for receiving, by said application program other than said Web browser application program, a user indication that said Web browser application program is to be used to access a desired resource; and

program code for forming, by said application program other than said Web browser application program, a uniform resource identifier consistent with said enhanced uniform resource identifier scheme, wherein said uniform resource identifier includes a session cookie parameter identifying said user data and an embedded uniform resource identifier identifying said desired resource.

11. The system of claim 10, further comprising program code for passing said uniform resource identifier consistent with said enhanced uniform resource identifier scheme from said application program other than said Web browser application program to said Web browser application program.

12. The system of claim 11, further comprising program code for processing said uniform resource identifier consistent with said enhanced uniform resource identifier scheme in said Web browser application program, wherein said processing includes storing said session cookie parameter identifying said user data for future reference by said Web browser application program, and accessing said desired resource based on said embedded resource identifier identifying said desired resource.

13. The system of claim 12, wherein said Web browser application program references and uses said user data identified by said session cookie while accessing said desired resource.

14. The system of claim 10, wherein said user data comprises at least one user authentication credential.

15. The system of claim 14, wherein said at least one user authentication credential comprises a password.

16. The system of claim 14, wherein said at least one user authentication credential comprises a single sign on token.

17. The system of claim 10, wherein said user data comprises encrypted user data.

18. The system of claim 13, further comprising said Web browser application program deleting said session cookie in response to detection that a user session has ended.

19. A computer program product having a computer readable medium, said computer readable medium having program code for providing user access to a Web browser application program stored thereon, said program code comprising:

program code for extending said Web browser application program to process an enhanced uniform resource identifier scheme, wherein said enhanced uniform resource identifier scheme defines a session cookie parameter and an embedded uniform resource identifier part;

program code for receiving user data by an application program other than said Web browser application program;

program code for receiving, by said application program other than said Web browser application program, a user indication that said Web browser application program is to be used to access a desired resource; and

program code for forming, by said application program other than said Web browser application program, a uniform resource identifier consistent with said enhanced uniform resource identifier scheme, wherein said uniform resource identifier includes a session cookie parameter identifying said user data and an embedded uniform resource identifier identifying said desired resource.

20. A computer data signal embodied in a carrier wave, said computer data signal including a program code for providing user access to a Web browser application program, said program code comprising:

program code for extending said Web browser application program to process an enhanced uniform resource identifier scheme, wherein said enhanced uniform resource identifier scheme defines a session cookie parameter and an embedded uniform resource identifier part;

program code for receiving user data by an application program other than said Web browser application program;

program code for receiving, by said application program other than said Web browser application program, a user indication that said Web browser application program is to be used to access a desired resource; and

program code for forming, by said application program other than said Web browser application program, a uniform resource identifier consistent with said enhanced uniform resource identifier scheme, wherein said uniform resource identifier includes a session cookie parameter identifying said user data and an embedded uniform resource identifier identifying said desired resource.

21. A system for providing user access to a Web browser application program, comprising:

means for extending said Web browser application program to process an enhanced uniform resource identifier scheme, wherein said enhanced uniform resource identifier scheme defines a session cookie parameter and an embedded uniform resource identifier part;

means for receiving user data by an application program other than said Web browser application program;

means for receiving, by said application program other than said Web browser application program, a user indication that said Web browser application program is to be used to access a desired resource; and

means for forming, by said application program other than said Web browser application program, a uniform resource identifier consistent with said enhanced uniform resource identifier scheme, wherein said uniform resource identifier includes a session cookie parameter identifying said user data and an embedded uniform resource identifier identifying said desired resource.

22. A method for providing user access to a secure resource through a Web browser application program, comprising:

authenticating said user at a secure resource by an application program other than said Web browser application program, wherein said authenticating is transparent to said user, wherein said authenticating involves at least one authentication credential of said user;

receiving, by said application program other than said Web browser application program, a user indication that said Web browser application program is to be used to access said secure resource; and

providing said authentication credential of said user from said application program other than said Web browser application program to said Web browser application program in a session cookie for use when accessing said secure resource.

23. The method of claim 22, wherein said authentication credential comprises a single sign on token.

24. The method of claim 22, wherein said authentication credential comprises a password.

25. The method of claim 22, further comprising:

providing a hyperlink to said secure resource in a user interface provided by said application program other than said Web application program; and

wherein said user indication that said Web browser application program is to be used to access said secure resource includes detection of said user clicking on said hyperlink.

26. The method of claim 22, wherein said providing said authentication credential of said user from said application program other than said Web browser application program comprises passing a session cookie data structure containing said authentication credential to said Web browser application program.

27. A system including a computer readable medium, said computer readable medium having program code stored thereon for providing user access to a secure resource through a Web browser application program, said program code comprising:

program code for authenticating said user at a secure resource by an application program other than said Web browser application program, wherein said authenticating is transparent to said user, wherein said authenticating involves at least one authentication credential of said user;

program code for receiving, by said application program other than said Web browser application program, a user indication that said Web browser application program is to be used to access said secure resource; and

program code for providing said authentication credential of said user from said application program other than said Web browser application program to said Web browser application program in a session cookie for use when accessing said secure resource.

28. The system of claim 27, wherein said authentication credential comprises a single sign on token.

29. The system of claim 27, wherein said authentication credential comprises a password.

30. The system of claim 27, further comprising:

program code for providing a hyperlink to said secure resource in a user interface provided by said application program other than said Web application program; and

wherein said user indication that said Web browser application program is to be used to access said secure resource includes detection of said user clicking on said hyperlink.

31. The system of claim 27, wherein said program code for providing said authentication credential of said user from said application program other than said Web browser application program comprises program code for passing a session cookie data structure containing said authentication credential to said Web browser application program.

32. A computer program product including a computer readable medium, said computer readable medium having program code stored thereon for providing user access to a secure resource through a Web browser application program, said program code comprising:

program code for authenticating said user at a secure resource by an application program other than said Web browser application program, wherein said authenticating is transparent to said user, wherein said authenticating involves at least one authentication credential of said user;

program code for receiving, by said application program other than said Web browser application program, a user indication that said Web browser application program is to be used to access said secure resource; and

program code for providing said authentication credential of said user from said application program other than said Web browser application program to said Web browser application program in a session cookie for use when accessing said secure resource.

33. A computer data signal embodied in a carrier wave, said computer data signal including program code for providing user access to a secure resource through a Web browser application program, said program code comprising:

program code for authenticating said user at a secure resource by an application program other than said Web browser application program, wherein said authenticating is transparent to said user, wherein said authenticating involves at least one authentication credential of said user;

program code for receiving, by said application program other than said Web browser application program, a user indication that said Web browser application program is to be used to access said secure resource; and

program code for providing said authentication credential of said user from said application program other than said Web browser application program to said Web browser application program for use when accessing said secure resource.

34. A system for providing user access to a secure resource through a Web browser application program, comprising:

means for authenticating said user at a secure resource by an application program other than said Web browser application program, wherein said authenticating is transparent to said user, wherein said authenticating involves at least one authentication credential of said user;

means for receiving, by said application program other than said Web browser application program, a user indication that said Web browser application program is to be used to access said secure resource; and

means for providing said authentication credential of said user from said application program other than said Web browser application program to said Web browser application program for use when accessing said secure resource.