Providing a web page to a client

• US 8,713,111 B2
• Filed: 11/09/2009
• Issued: 04/29/2014
• Est. Priority Date: 11/11/2008
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Kamiyama, Yoshiroh, Nitta, Keisuke
• Primary Examiner(s): Bruckart, Benjamin R
• Assistant Examiner(s): CELANI, NICHOLAS P
• Application Number:
  US12/614,491
• Publication Number:
  US 20100122180A1
• Time in Patent Office: 1,632 Days
• Field of Search: 709/226
• US Class Current: 709/206
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 16/972 Access to data in other repository systems, e.g. legacy data or dynamic Web page generation
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213

Abstract

To display pieces of data provided by different servers in one page, a providing apparatus provides a page to a client terminal, the page including data retrieved from a server. The providing apparatus includes a) a page return unit for, upon receipt of a page retrieval request from the client terminal, returning a page including code to the client terminal, the code to be executed on the client terminal, the code causing the client terminal to transmit a data transmission instruction to the server, the data transmission instruction instructing the server to transmit the data to the providing apparatus, b) a data reception unit for receiving the data transmitted by the server, the server having received the data transmission instruction from the client terminal, and c) a transfer unit for transferring the data received from the server, to the client terminal.

Claims

1. A system, comprising:

a providing apparatus in an external network, for providing a page to a client terminal in an internal network, the internal network separated from the external network such that data retrieval requests to the internal network form the external network are prevented, the providing apparatus including at least one processor and at least one computer readable memory having program code stored thereon for execution on the processor, the program code including;

a page return unit for, upon receipt of a page retrieval request from the client terminal, returning a page including code to the client terminal, the code to be executed on the client terminal, the code including a data transmission instruction and an encryption key as a parameter of the data transmission instruction, and, when executed on the client terminal, causing the client terminal to

transmit the data transmission instruction directly to an internal server in the internal network, the data transmission instruction instructing the internal server to transmit specified data out of the internal network to the providing apparatus, and to encrypt the specified data using the encryption key prior to transmitting the specified data to the providing apparatus, and

send a data retrieval request for the specified data to the providing apparatus;

a data reception unit for receiving the encrypted specified data transmitted by the internal server responsive to the internal server having received the data transmission instruction from the client terminal; and

a transfer unit for transferring, responsive to the data retrieval request from the client terminal, the encrypted specified data received from the internal server, to the client terminal for decryption and display in the page.

2. The system according to claim 1, the program code further comprising

a page creation unit for creating a page including the encrypted specified data received from the internal server, wherein

the page return unit causing the client terminal to retransmit the page retrieval request to the providing apparatus, and

upon receipt of the page retrieval request retransmitted from the client terminal, the transfer unit returns the page created by the page creation unit to the client terminal.

3. The system according to claim 1, the program code further comprising:

a data retrieval unit for, upon receipt of the page retrieval request from the client terminal, acquiring data from an external server connected to the external network, the external network not preventing entry of a data retrieval request from the providing apparatus; and

an external data transmission unit for transmitting data retrieved by the data retrieval unit from the external server to the client terminal.

4. The system according to claim 1, the program code further comprising:

an input unit for receiving input of specification of data from the client terminal.

5. The system according to claim 1, wherein

the code to be executed on the client terminal causing the client terminal to load a script on the internal server while serving as the data transmission instruction.

6. The system according to claim 1, wherein

the page return unit returns a page further including second code to the client terminal, the second code to be executed on the client terminal, the second code instructing the client terminal to retrieve display contents of a predetermined area of the page from the providing apparatus and incorporate the retrieved display contents into the page, and the program code further comprising

a display contents creation unit for creating the display contents, the display contents including the data received from the internal server, wherein

upon receipt of a request for retrieval of display contents specified by the second code from the client terminal, the transfer unit returns display contents created by the display contents creation unit to the client terminal.

8. The system of claim 1, further comprising:

an internal server for providing the specified data to the providing apparatus, the internal server comprising at least one processor and at least one computer readable memory having server program code stored thereon for execution on the processor, the server program code including

a transmission instruction reception unit for receiving the data transmission instruction transmitted by the client terminal that has received the page from the providing apparatus, the page including the code, and

a data transmission unit for, upon receipt of the data transmission instruction, transmitting the encrypted specified data to the providing apparatus.

7. A system comprising:

an internal server, located in an internal network, for providing data; and

a providing apparatus, located in an external network, for providing a page to a client terminal in the internal network, the internal network separated from the external network such that data retrieval requests to the internal network from the external network are prevented, wherein

the providing apparatus includes;

at least one processor and at least one computer readable memory having providing apparatus program code stored thereon for execution on the processor, the providing apparatus program code including

a page return unit for, upon receipt of a page retrieval request from the client terminal, returning a page including code, the code to be executed on the client terminal, the code including a data transmission instruction and an encryption key as a parameter of the data transmission instruction, and, when executed on the client terminal, causing the client terminal to

transmit the data transmission instruction directly to the internal server, the data transmission instruction instructing the internal server to transmit specified data out of the internal network to the providing apparatus, and to encrypt the specified data using the encryption key prior to transmitting the specified data to the providing apparatus, and

send a data retrieval request for the specified data to the providing apparatus;

a data reception unit for receiving the encrypted specified data transmitted by the internal server responsive to the internal server having received the data transmission instruction from the client terminal; and

a transfer unit for transferring, responsive to the data retrieval request from the client terminal, the encrypted specified data received from the internal server, to the client terminal for decryption and display in the page; and

wherein the internal server includes at least one processor and at least one computer readable memory having server program code stored thereon for execution on the processor, the internal server program code including a data transmission unit for, upon receipt of the data transmission instruction from the client terminal, transmitting the encrypted specified data to the providing apparatus.

9. A computer program product including a non-transitory computer readable storage medium having program code stored thereon for causing a computer to function as a providing apparatus in an external network for providing a page to a client terminal in an internal network, the internal network separated from the external network such that data retrieval requests to the internal network from the external network are prevented, the page including data retrieved from a server, the program code, when executed on a computer causing the computer to function as:

a page return unit for, upon receipt of a page retrieval request from the client terminal, returning a page including code, the code to be executed on the client terminal, the code including a data transmission instruction and an encryption key as a parameter of the data transmission instruction, and, when executed on the client terminal, causing the client terminal to

transmit the data transmission instruction directly to an internal server in the internal network, the data transmission instruction instructing the internal server to transmit specified data out of the internal network to the providing apparatus, and to encrypt the specified data using the encryption key prior to transmitting the specified data to the providing apparatus, and

send a data retrieval request for the specified data to the providing apparatus;

a data reception unit for receiving the encrypted specified data transmitted by the internal server responsive to the internal server having received the data transmission instruction from the client terminal; and

a transfer unit for transferring, responsive to the data retrieval request from the client terminal, the specified data received from the internal server, to the client terminal for decryption and display in the page.