US6049877A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Systems, methods and computer program products for authorizing common gateway interface application requests
Assignee: International Business Machines Corp
•
Filing: 1997-07-16
•
Granted: 2000-04-11
•
Expires: 2017-07-16
Abstract
Abstract Systems, methods, and computer program products for authorizing a client request to a web server to execute a CGI application are provided. A web server receives a client request to execute a CGI application from a client. Authentication routines shared by a set of CGIs are executed by the requested CGI application to determine if the request is accompanied by an authentication token. If one is not received, then the CGI attempts to authenticate the client. Upon successful authentication, the CGI creates an authentication token using an authentication key and transmits the token to the client. The authentication token contains token data which is verifiable by the CGI application. Subsequent client requests to execute this or other CGI applications in this set of CGIs instrumented with the authentication routines are accompanied by the authentication token. The requested CGI executes its authentication routines to validate the authentication token and returns the requested output.
Inventors
- 👤 John Gregg White
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 14:08
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3234; H04L2209/00; H04L2209/56
Claims Analysis
Total Claims: 18
Claim 1
Independent Claim
239 words
A method of authorizing a client request to a web server to execute any one of a plurality of CGI applications hosted by a web server having an application programming interface (API), wherein each CGI application in a set comprises a user authentication routine that executes independently from the web server API, wherein a client carries out the steps of: sending a client request to execute a first CGI application within the set to the web server; receiving from the web server an authentication token created by the first CGI application user authentication routine, wherein the authentication token authorizes execution of the first CGI application and each CGI application within the set for a predetermined time duration; and responsive to receiving the authentication token created by the CGI application user authentication routine from the web server, storing the authentication token for use with subsequent CGI application execution requests to the web server; and wherein the web server carries out the steps of: receiving the client request to execute a first CGI application from the client; responsive to receiving the client request, executing the first CGI application user authentication routine to create the authentication token containing information verifiable by the user authentication routine of each CGI application within the set; executing the first CGI application; and sending the authentication token created by the first CGI application user authentication routine to the client with results of the first CGI application execution.
Claim 2
Independent Claim
239 words
A method of authorizing a client request to a web server to execute any one of a plurality of CGI applications hosted by a web server having an application programming interface (API), wherein each CGI application in a set comprises a user authentication routine that executes independently from the web server API, wherein a client carries out the steps of: sending a client request to execute a first CGI application within the set to the web server; receiving from the web server an authentication token created by the first CGI application user authentication routine, wherein the authentication token authorizes execution of the first CGI application and each CGI application within the set for a predetermined time duration; and responsive to receiving the authentication token created by the CGI application user authentication routine from the web server, storing the authentication token for use with subsequent CGI application execution requests to the web server; and wherein the web server carries out the steps of: receiving the client request to execute a first CGI application from the client; responsive to receiving the client request, executing the first CGI application user authentication routine to create the authentication token containing information verifiable by the user authentication routine of each CGI application within the set; executing the first CGI application; and sending the authentication token created by the first CGI application user authentication routine to the client with results of the first CGI application execution.
Claim 3
Dependent Claim
14 words
A method according to claim 1, wherein the authentication token is an HTTP cookie.
Claim 4
Independent Claim
177 words
A method of authorizing a client request to a web server to execute any one of a plurality of CGI applications within a first set hosted by a web server having an application programming interface (API), wherein each CGI application within the first set comprises a user authentication routine that executes independently from the web server API, said method comprising the steps of: receiving a client request to execute a first one of the CGI applications in the first set; responsive to receiving the client request, executing a CGI application user authentication routine to create an authentication token that can be shared by each of the CGI applications within the first set and that authorizes execution of any one of the CGI applications in the first set when subsequent client requests are made to execute any of the CGI applications in the first set during a predetermined time duration; executing the first CGI application; and sending the authentication token created by the CGI application user authentication routine to the client with results of the CGI application execution.
Claim 5
Independent Claim
177 words
A method of authorizing a client request to a web server to execute any one of a plurality of CGI applications within a first set hosted by a web server having an application programming interface (API), wherein each CGI application within the first set comprises a user authentication routine that executes independently from the web server API, said method comprising the steps of: receiving a client request to execute a first one of the CGI applications in the first set; responsive to receiving the client request, executing a CGI application user authentication routine to create an authentication token that can be shared by each of the CGI applications within the first set and that authorizes execution of any one of the CGI applications in the first set when subsequent client requests are made to execute any of the CGI applications in the first set during a predetermined time duration; executing the first CGI application; and sending the authentication token created by the CGI application user authentication routine to the client with results of the CGI application execution.
Claim 6
Dependent Claim
105 words
A method according to claim 3, further comprising the steps of: receiving from the client the authentication token created by the CGI application user authentication routine with a subsequent client request to execute a second CGI applications in the first set; responsive to receiving the subsequent client request and authentication token created by a CGI application user authentication routine, verifying via a user authentication routine within the requested CGI application that the received authentication token is valid; and responsive to verifying that the received authentication token is valid, executing the second CGI application; and sending results of the second CGI application execution to the client.
Claim 7
Dependent Claim
55 words
A method according to claim 3, wherein said step of executing the CGI application user authentication routine to create an authentication token comprises the steps of: requesting the client to send user identification information to the web server; receiving user identification information from the client; and verifying the user identification information received from the client.
Claim 8
Dependent Claim
14 words
A method according to claim 3, wherein the authentication token is an HTTP cookie.
Claim 9
Dependent Claim
158 words
A data processing system for authorizing a client request to a web server to execute any one of a plurality of CGI applications within a set hosted by a web server having an application programming interface (API), wherein each CGI application within the set comprises a user authentication routine that executes independently from the web server API, said data processing system comprising: means for receiving a client request to execute a first CGI application within the set from the client; means, responsive to said client request receiving means, for executing a CGI application user authentication routine for the first CGI application to create an authentication token that authorizes execution of any one of the CGI applications within the set for a predetermined duration of time; means for executing the first CGI application; and means for sending the authentication token created by the CGI application user authentication routine to the client with results of the first CGI application execution.
Claim 10
Dependent Claim
158 words
A data processing system for authorizing a client request to a web server to execute any one of a plurality of CGI applications within a set hosted by a web server having an application programming interface (API), wherein each CGI application within the set comprises a user authentication routine that executes independently from the web server API, said data processing system comprising: means for receiving a client request to execute a first CGI application within the set from the client; means, responsive to said client request receiving means, for executing a CGI application user authentication routine for the first CGI application to create an authentication token that authorizes execution of any one of the CGI applications within the set for a predetermined duration of time; means for executing the first CGI application; and means for sending the authentication token created by the CGI application user authentication routine to the client with results of the first CGI application execution.
Claim 11
Dependent Claim
83 words
A data processing system according to claim 7, further comprising: means for receiving from the client the authentication token created by the CGI application user authentication routine with a subsequent client request to execute a second CGI application with the set; means, responsive to said authentication token receiving means, for verifying via a CGI application user authentication routine for the second CGI application that the received authentication token is valid; and means, responsive to said verifying means, for executing the second CGI application.
Claim 12
Dependent Claim
77 words
A data processing system according to claim 7, wherein said means for executing the CGI application user authentication routine to create an authentication token comprises: means for requesting the client to send user identification information to the web server; means, responsive to said means for requesting user identification information, for receiving user identification information from the client; and means, responsive to said user identification information receiving means, for verifying the user identification information received from the client.
Claim 13
Dependent Claim
16 words
A data processing system according to claim 7, wherein the authentication token is an HTTP cookie.
Claim 14
Dependent Claim
222 words
A computer program product for authorizing a client request to a web server to execute any one of a plurality of CGI applications within a set hosted by a web server having an application programming interface (API), wherein each CGI application within the set comprises a user authentication routine that executes independently from the web server API, said computer program product comprising: a computer usable medium having computer readable program code means embodied in said medium for receiving a client request to execute a first CGI application within the set from the client; the computer usable medium having computer readable program code means embodied in said medium, responsive to said client request receiving means, for executing a CGI application user authentication routine for the first CGI application to create an authentication token containing information verifiable by any of the CGI applications within the set and that authorizes execution of any of the CGI applications in the set within a predetermined duration of time; the computer usable medium having computer readable program code means embodied in said medium for executing the first CGI application; and the computer usable medium having computer readable program code means embodied in said medium for sending the authentication token created by the CGI application user authentication routine to the client with results of the first CGI application execution.
Claim 15
Dependent Claim
222 words
A computer program product for authorizing a client request to a web server to execute any one of a plurality of CGI applications within a set hosted by a web server having an application programming interface (API), wherein each CGI application within the set comprises a user authentication routine that executes independently from the web server API, said computer program product comprising: a computer usable medium having computer readable program code means embodied in said medium for receiving a client request to execute a first CGI application within the set from the client; the computer usable medium having computer readable program code means embodied in said medium, responsive to said client request receiving means, for executing a CGI application user authentication routine for the first CGI application to create an authentication token containing information verifiable by any of the CGI applications within the set and that authorizes execution of any of the CGI applications in the set within a predetermined duration of time; the computer usable medium having computer readable program code means embodied in said medium for executing the first CGI application; and the computer usable medium having computer readable program code means embodied in said medium for sending the authentication token created by the CGI application user authentication routine to the client with results of the first CGI application execution.
Claim 16
Dependent Claim
104 words
A computer program product according to claim 11, further comprising: computer readable program code means embodied in said medium for receiving from the client the authentication token created by the CGI application user authentication routine with a subsequent client request to execute a second CGI application; computer readable program code means embodied in said medium, responsive to said authentication token receiving means, for verifying via a CGI application user authentication routine for the second CGI application that the received authentication token is valid; and computer readable program code means embodied in said medium, responsive to said verifying means, for executing the second CGI application.
Claim 17
Dependent Claim
108 words
A computer program product according to claim 11, wherein said computer readable program code means embodied in said medium for executing the CGI application user authentication routine to create an authentication token comprises: computer readable program code means embodied in said medium for requesting the client to send user identification information to the web server; computer readable program code means embodied in said medium, responsive to said user identification information requesting means, for receiving user identification information from the client; and computer readable program code means embodied in said medium, responsive to said user identification information receiving means, for verifying the user identification information received from the client.
Claim 18
Dependent Claim
16 words
A computer program product according to claim 11, wherein the authentication token is an HTTP cookie.
References Cited (Backward Citations)
US5774670A
Cited
US5802518A
Cited
US5961601A
Cited
US5892905A
Cited
US5908469A
Cited
US5884312A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-04-11 | 2003-10-11 | 2004-04-11 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-04-11 | 2007-10-11 | 2008-04-11 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-04-11 | 2011-10-11 | 2012-04-11 | $7700.00 | Window Closed / Lapsed |