US5875296A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Distributed file system web server user authentication with cookies
Assignee: Alibaba Group Holding Ltd
•
Filing: 1997-01-28
•
Granted: 1999-02-23
•
Expires: 2017-01-28
Abstract
Abstract A method of authenticating a Web client to a Web server connectable to a distributed file system of a distributed computing environment. The distributed computing environment includes a security service for returning a credential to a user authenticated to access the distributed file system. In response to receipt by the Web server of a user id and password from the Web client, a login protocol is executed with the security service. If the user can be authenticated, a credential is stored in a database of credentials associated with authenticated users. The Web server then returns to the Web client a persistent client state object having a unique identifier therein. This object, sometimes referred to as a cookie, is then used to enable the Web client to browse Web documents in the distributed file system. In particular, when the Web client desires to make a subsequest request to the distributed file system, the persistent client state object including the identifier is used in lieu of the user's id and password, which makes the session much more secure. In this operation, the cookie identifier is used as a pointer into the credential storage table, and the credential is then retrieved and used to facilitate multiple file accessess from the distributed file system. At the same time, the Web client may obtain access to Web server (as opposed to distributed file system) documents via conventional user id and password in an HTTP request.
Inventors
- 👤 Shaw-Ben Shi
- 👤 Michael Bradford Ault
- 👤 Ernst Robert Plassmann
- 👤 Bruce Arland Rich
- 👤 Mickella Ann Rosiles
- 👤 Theodore Jack London Shrader
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 11:46
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/32; H04L63/00; H04L63/16; H04L63/168; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/41; H04L12/00; H04L12/28; H04L12/42; H04L12/427; H04L63/08; H04L63/0815
Claims Analysis
Total Claims: 28
Claim 1
Independent Claim
126 words
A method of authenticating a client to a Web server connectable to a distributed file system of a distributed computing environment, the distributed computing environment including a security service for returning a credential to a user authenticated to access the distributed file system, comprising the steps of: (a) responsive to receipt by the Web server of a user id and password from the client, executing a login protocol with the security service and storing a credential resulting therefrom; (b) returning to the client a persistent client state object having an identifier therein; and (c) having the client use the persistent client state object including the identifier in lieu of a user id and password to obtain subsequent access to Web documents in the distributed file system.
Claim 2
Independent Claim
126 words
A method of authenticating a client to a Web server connectable to a distributed file system of a distributed computing environment, the distributed computing environment including a security service for returning a credential to a user authenticated to access the distributed file system, comprising the steps of: (a) responsive to receipt by the Web server of a user id and password from the client, executing a login protocol with the security service and storing a credential resulting therefrom; (b) returning to the client a persistent client state object having an identifier therein; and (c) having the client use the persistent client state object including the identifier in lieu of a user id and password to obtain subsequent access to Web documents in the distributed file system.
Claim 3
Dependent Claim
25 words
The method of authenticating as described in claim 1 wherein the identifier in the persistent client state object is used to retrieve the stored credential.
Claim 4
Dependent Claim
25 words
The method of authenticating as described in claim 1 wherein the user id and password are provided to the Web server in an HTML form.
Claim 5
Dependent Claim
21 words
The method of authenticating as described in claim 3 wherein the HTML form is completed by a user of the client.
Claim 6
Independent Claim
219 words
A method of authenticating a Web client to a Web server connectable to a distributed file system of a distributed computing environment, the distributed computing environment including a security service for returning a credential to a user authenticated to access the distributed file system, comprising the steps of: (a) for an HTTP request received by the Web server, determining whether the Web client has a browser that supports persistent client state objects; (b) if the Web client has a browser that supports persistent client state objects, having the Web server sends the Web client a login HTML form and a first persistent client state object including a URL identified by the HTTP request; (c) having the user complete the HTML form with user id and password; (d) transmitting the completed form along with the first persistent client state object including the URL back to the Web server; (e) extracting information from the completed form and executing a login protocol with the security service to generate a credential; (f) returning to the Web client a second persistent client state object having an identifier therein; and (g) having the Web client use the second persistent client state object including the identifier in lieu of a user id and password to obtain subsequent access to Web documents in the distributed file system.
Claim 7
Independent Claim
219 words
A method of authenticating a Web client to a Web server connectable to a distributed file system of a distributed computing environment, the distributed computing environment including a security service for returning a credential to a user authenticated to access the distributed file system, comprising the steps of: (a) for an HTTP request received by the Web server, determining whether the Web client has a browser that supports persistent client state objects; (b) if the Web client has a browser that supports persistent client state objects, having the Web server sends the Web client a login HTML form and a first persistent client state object including a URL identified by the HTTP request; (c) having the user complete the HTML form with user id and password; (d) transmitting the completed form along with the first persistent client state object including the URL back to the Web server; (e) extracting information from the completed form and executing a login protocol with the security service to generate a credential; (f) returning to the Web client a second persistent client state object having an identifier therein; and (g) having the Web client use the second persistent client state object including the identifier in lieu of a user id and password to obtain subsequent access to Web documents in the distributed file system.
Claim 8
Dependent Claim
18 words
The method of authenticating as described in claim 5 wherein the identifier is used to access the credential.
Claim 9
Independent Claim
182 words
A method of authenticating a Web client to a Web server connectable to a distributed file system of a distributed computing environment, the distributed computing environment including a security service for returning a credential to a user authenticated to access the distributed file system, comprising the steps of: (a) responsive to receipt of a transaction request from the Web client, executing a login protocol with the security service to determine whether the Web client has access rights to the distributed file system; (b) if the Web client does not have access rights to the distributed file system, returning an error message to the Web client; (c) if the Web client does have access rights to the distributed file system, storing a credential resulting from the login protocol in a database of credentials associated with authenticated users; (d) returning to the Web client a cookie having an identifier uniquely associated with the Web client; and (e) having the Web client use the cookie in lieu of a user id and password to obtain subsequent access to Web documents in the distributed file system.
Claim 10
Independent Claim
182 words
A method of authenticating a Web client to a Web server connectable to a distributed file system of a distributed computing environment, the distributed computing environment including a security service for returning a credential to a user authenticated to access the distributed file system, comprising the steps of: (a) responsive to receipt of a transaction request from the Web client, executing a login protocol with the security service to determine whether the Web client has access rights to the distributed file system; (b) if the Web client does not have access rights to the distributed file system, returning an error message to the Web client; (c) if the Web client does have access rights to the distributed file system, storing a credential resulting from the login protocol in a database of credentials associated with authenticated users; (d) returning to the Web client a cookie having an identifier uniquely associated with the Web client; and (e) having the Web client use the cookie in lieu of a user id and password to obtain subsequent access to Web documents in the distributed file system.
Claim 11
Dependent Claim
25 words
The method of authenticating as described in claim 7 wherein the identifier in the cookie is used to retrieve the stored credential from the database.
Claim 12
Independent Claim
106 words
A method of authenticating a Web client to a Web server connectable to a distributed file system of a distributed computing environment, the distributed computing environment including a security service for returning a credential to a user authenticated to access the distributed file system, comprising the steps of: maintaining credentials of the users authenticated to access the distributed file system in a storage; responsive to receipt from a Web client of a persistent client state object having an identifier therein, using the identifier to access one of the credentials in the storage; and using the credential to facilitate multiple file accesses in the distributed file system.
Claim 13
Independent Claim
106 words
A method of authenticating a Web client to a Web server connectable to a distributed file system of a distributed computing environment, the distributed computing environment including a security service for returning a credential to a user authenticated to access the distributed file system, comprising the steps of: maintaining credentials of the users authenticated to access the distributed file system in a storage; responsive to receipt from a Web client of a persistent client state object having an identifier therein, using the identifier to access one of the credentials in the storage; and using the credential to facilitate multiple file accesses in the distributed file system.
Claim 14
Dependent Claim
152 words
A computer program product for use in authenticating a Web client to a Web server connectable to a distributed file system of a distributed computing environment, the distributed computing environment including a security service for returning a credential to a user authenticated to access the distributed file system, the computer program product comprising: a computer-readable storage medium having a substrate; and program data encoded in the substrate of the computer-readable storage medium, wherein the program data comprises: means, responsive to receipt by the Web server of a user id and password from the Web client, for executing a login protocol with the security service and storing a credential resulting therefrom; means for returning to the Web client a persistent client state object having an identifier therein; and means responsive to receipt of the persistent client state object including the identifier for controlling subsequent access to Web documents in the distributed file system.
Claim 15
Dependent Claim
152 words
A computer program product for use in authenticating a Web client to a Web server connectable to a distributed file system of a distributed computing environment, the distributed computing environment including a security service for returning a credential to a user authenticated to access the distributed file system, the computer program product comprising: a computer-readable storage medium having a substrate; and program data encoded in the substrate of the computer-readable storage medium, wherein the program data comprises: means, responsive to receipt by the Web server of a user id and password from the Web client, for executing a login protocol with the security service and storing a credential resulting therefrom; means for returning to the Web client a persistent client state object having an identifier therein; and means responsive to receipt of the persistent client state object including the identifier for controlling subsequent access to Web documents in the distributed file system.
Claim 16
Dependent Claim
25 words
The computer program product as described in claim 10 wherein the program data further includes means for generating error messages responsive to the login protocol.
Claim 17
Dependent Claim
31 words
The computer program product as described in claim 10 wherein the program data further includes means for establishing a store of the credentials of users authenticated to the distributed file system.
Claim 18
Dependent Claim
18 words
The computer program product as described in claim 10 wherein the persistent client state object is a cookie.
Claim 19
Dependent Claim
137 words
A computer program product for use in authenticating a Web client to a Web server connectable to a distributed file system of a distributed computing environment, the distributed computing environment including a security service for returning a credential to a user authenticated to access the distributed file system, the computer program product comprising: a computer-readable storage medium having a substrate; and program data encoded in the substrate of the computer-readable storage medium, wherein the program data comprises: means for maintaining a storage of the credentials of the users authenticated to access the distributed file system; and means, responsive to receipt from a Web client of a persistent client state object having an identifier therein, for using the identifier to access one of the credentials in the storage to facilitate access to documents in the distributed file system.
Claim 20
Dependent Claim
137 words
A computer program product for use in authenticating a Web client to a Web server connectable to a distributed file system of a distributed computing environment, the distributed computing environment including a security service for returning a credential to a user authenticated to access the distributed file system, the computer program product comprising: a computer-readable storage medium having a substrate; and program data encoded in the substrate of the computer-readable storage medium, wherein the program data comprises: means for maintaining a storage of the credentials of the users authenticated to access the distributed file system; and means, responsive to receipt from a Web client of a persistent client state object having an identifier therein, for using the identifier to access one of the credentials in the storage to facilitate access to documents in the distributed file system.
Claim 21
Dependent Claim
153 words
A computer connectable to a distributed computing environment including a security service for returning a credential to a user authenticated to access the distributed file system, comprising: a processor; an operating system; a Web server program for providing World Wide Web information retrieval to Web clients connectable to the Web server program via a stateless computer network; a server plug-in for authenticating Web clients to the Web server program, comprising: means, responsive to receipt by the Web server of a user id and password from a Web client, for executing a login protocol with the security service and storing a credential resulting therefrom; means for returning to the Web client a persistent client state object having an identifier therein; and means responsive to subsequent receipt of the persistent client state object including the identifier in lieu of a user id and password to control access to Web documents in the distributed file system.
Claim 22
Dependent Claim
153 words
A computer connectable to a distributed computing environment including a security service for returning a credential to a user authenticated to access the distributed file system, comprising: a processor; an operating system; a Web server program for providing World Wide Web information retrieval to Web clients connectable to the Web server program via a stateless computer network; a server plug-in for authenticating Web clients to the Web server program, comprising: means, responsive to receipt by the Web server of a user id and password from a Web client, for executing a login protocol with the security service and storing a credential resulting therefrom; means for returning to the Web client a persistent client state object having an identifier therein; and means responsive to subsequent receipt of the persistent client state object including the identifier in lieu of a user id and password to control access to Web documents in the distributed file system.
Claim 23
Dependent Claim
18 words
The computer as described in claim 15 wherein the control means uses the identifier to access the credential.
Claim 24
Independent Claim
157 words
A method of accessing documents from a Web server and a distributed file system to which the Web server is connected, the distributed file system supported in a distributed computing environment having a security service for returning a credential to a user authenticated to access the distributed file system, the method comprising the steps of: (a) responsive to receipt by the Web server of a user id and password from the Web client, executing a login protocol with the security service and storing a credential resulting therefrom; (b) returning to the Web client a persistent client state object having an identifier therein; (c) having the Web client use the persistent client state object including the identifier in lieu of a user id and password to obtain access to Web documents in the distributed file system; and (d) having the Web client use the user id and password to obtain access to Web documents in the Web server.
Claim 25
Independent Claim
157 words
A method of accessing documents from a Web server and a distributed file system to which the Web server is connected, the distributed file system supported in a distributed computing environment having a security service for returning a credential to a user authenticated to access the distributed file system, the method comprising the steps of: (a) responsive to receipt by the Web server of a user id and password from the Web client, executing a login protocol with the security service and storing a credential resulting therefrom; (b) returning to the Web client a persistent client state object having an identifier therein; (c) having the Web client use the persistent client state object including the identifier in lieu of a user id and password to obtain access to Web documents in the distributed file system; and (d) having the Web client use the user id and password to obtain access to Web documents in the Web server.
Claim 26
Dependent Claim
25 words
The method as described in claim 17 further including maintaining a storage of the credentials of the users authenticated to use the distributed file system.
Claim 27
Dependent Claim
19 words
The method as described in claim 18 wherein the identifier is used to retrieve a credential from the storage.
Claim 28
Dependent Claim
31 words
The method as described in claim 17 further including the step of providing a custom error message from the Web server to the Web client if the login protocol is unsuccessful.
References Cited (Backward Citations)
US4578531A
Cited
US5187790A
Cited
US5497463A
Cited
US5491752A
Cited
US5530852A
Cited
US5644711A
Cited
US5678041A
Cited
US5708780A
Cited
US5572643A
Cited
US5734831A
Cited
US5796952A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-02-22 | 2002-08-24 | 2003-02-23 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-02-22 | 2006-08-24 | 2007-02-23 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-02-22 | 2010-08-24 | 2011-02-23 | $7700.00 | Window Closed / Lapsed |