US6205480B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for web server user authentication
Assignee: Google LLC
•
Filing: 1998-08-19
•
Granted: 2001-03-20
•
Expires: 2018-08-19
Abstract
Abstract A method and system for automatically authenticating a user to applications in a network environment. After an initial authentication procedure, the user's identity is mapped into a network credential which includes the user's role, and which is formed into a cookie. To gain access to an application requiring authentication, the cookie is provided to a script, and the information contained in the cookie is used to obtain authentication data required by the desired application.
Inventors
- 👤 Christopher John Creighton Broadhurst
- 👤 Barry Anthony Byrne
- 👤 Clive John White
- 👤 James Press
- 👤 Piers McMahon
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 22:29
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/10; H04L63/102; H04L63/08; H04L63/0815; Y; Y10; Y10S; Y10S707/00; Y10S707/99931; Y10S707/99939
Claims Analysis
Total Claims: 35
Claim 1
Independent Claim
102 words
A method for accessing protected applications on a network, comprising: performing an initial authentication of a user via a web server; creating a network credential for the user, the network credential including at least a role of the user; receiving a user request to access a protected application via the web server; automatically accessing a script configured to determine at least one script access value based on the network credential and a script access value name, the at least one script access value providing user access authentication information for the protected application; and presenting the user access authentication to the protected application.
Claim 2
Independent Claim
102 words
A method for accessing protected applications on a network, comprising: performing an initial authentication of a user via a web server; creating a network credential for the user, the network credential including at least a role of the user; receiving a user request to access a protected application via the web server; automatically accessing a script configured to determine at least one script access value based on the network credential and a script access value name, the at least one script access value providing user access authentication information for the protected application; and presenting the user access authentication to the protected application.
Claim 3
Dependent Claim
38 words
The method of claim 1 , wherein the step of creating a network credential comprises selecting a user role from a plurality of roles, and wherein the number of roles is less than a number of network users.
Claim 4
Dependent Claim
18 words
The method of claim 1 , further comprising the step of forming a cookie from the network credential.
Claim 5
Dependent Claim
20 words
The method of claim 3 , wherein the step of transferring the network credential is performed by transferring the cookie.
Claim 6
Dependent Claim
28 words
The method of claim 1 , wherein the step of creating is performed by mapping user initial authentication data to the network credential by consulting an X.500 directory.
Claim 7
Dependent Claim
12 words
The method of claim 1 , wherein the network is an intranet.
Claim 8
Dependent Claim
22 words
The method of claim 1 , wherein the step of performing the initial authentication comprises mapping the user to a user role.
Claim 9
Independent Claim
118 words
A system for providing user access to protected applications, comprising: a plurality of servers for managing network resources including one or more protected applications, each configured to grant access to a protected application upon user authentication; a browser communicating between the user and the plurality of servers, the browser being capable of accessing initial user authentication information; and computer memory for storing data defining mapping between initial user authentication information, network credentials including a user role, and script access values; wherein the browser provides user access to the one or more protected applications via a web server based on the initial authentication information, and by consulting the stored script access values transparently to the user via a script.
Claim 10
Independent Claim
118 words
A system for providing user access to protected applications, comprising: a plurality of servers for managing network resources including one or more protected applications, each configured to grant access to a protected application upon user authentication; a browser communicating between the user and the plurality of servers, the browser being capable of accessing initial user authentication information; and computer memory for storing data defining mapping between initial user authentication information, network credentials including a user role, and script access values; wherein the browser provides user access to the one or more protected applications via a web server based on the initial authentication information, and by consulting the stored script access values transparently to the user via a script.
Claim 11
Dependent Claim
13 words
The system of claim 8 , wherein the servers are intranet network servers.
Claim 12
Dependent Claim
20 words
The system of claim 8 , wherein the number of user roles is less than a number of system users.
Claim 13
Dependent Claim
20 words
The system of claim 8 , wherein the browser communicates with the servers according to a hypertext transfer protocol format.
Claim 14
Dependent Claim
39 words
The system of claim 8 , wherein the first server creates a cookie including the user role, and the browser provides access to a second application by providing the cookie to a script which is stored on the network.
Claim 15
Dependent Claim
26 words
The system of claim 12 , wherein the first server accesses script access values stored in a database for the second application based on the cookie.
Claim 16
Dependent Claim
38 words
The system of claim 8 , wherein said computer memory comprises a first directory for storing data defining mapping between said initial user authentication information and network credentials, and a second directory for storing the script access values.
Claim 17
Dependent Claim
31 words
The system of claim 8 , wherein said computer memory comprises a single directory for storing said data defining mapping between said initial user authentication information and said script access values.
Claim 18
Dependent Claim
126 words
A computer readable storage medium including machine-readable instructions comprising: one or more instructions for performing an initial authentication of a user via a web server; one or more instructions for determining a network credential for the user, the network credential including at least a role of the user; one or more instructions for receiving a user request to access a protected application via the web server; one or more instructions for automatically accessing a script configured to retrieve at least one script access value based on the network credential and a script access value name, the at least one script access value providing user access authentication information for the protected application; and one or more instructions for presenting the user access authentication to the protected application.
Claim 19
Dependent Claim
126 words
A computer readable storage medium including machine-readable instructions comprising: one or more instructions for performing an initial authentication of a user via a web server; one or more instructions for determining a network credential for the user, the network credential including at least a role of the user; one or more instructions for receiving a user request to access a protected application via the web server; one or more instructions for automatically accessing a script configured to retrieve at least one script access value based on the network credential and a script access value name, the at least one script access value providing user access authentication information for the protected application; and one or more instructions for presenting the user access authentication to the protected application.
Claim 20
Dependent Claim
38 words
The medium of claim 16 , wherein the step of creating a network credential comprises selecting a user role from a plurality of roles, and wherein the number of roles is less than a number of network users.
Claim 21
Dependent Claim
21 words
The medium of claim 16 , further comprising one or more instructions for forming a cookie that includes the network credential.
Claim 22
Dependent Claim
20 words
The medium of claim 16 , further comprising one or more instructions for mapping the user to a user role.
Claim 23
Dependent Claim
35 words
The medium of claim 16 , further comprising one or more instructions for selecting a user role from a plurality of roles wherein the number of roles is less than the number of network users.
Claim 24
Dependent Claim
164 words
A computer readable medium including machine-readable instructions comprising: one or more instructions for performing an initial authentication of a user via a web server; one or more instructions for determining a network credential for the user, the network credential including at least a role of the user; one or more instructions for receiving a user request to access at least one protected application via the web server; one or more instructions for automatically accessing a script; one or more instructions for transferring the network credential to the script; one or more instructions for determining a script access value name based upon said user role; one or more instructions for retrieving script access values based on said script access value name; one or more instructions for determining a user identification and password based on the script access values; and one or more instructions for presenting the determined user identification and password for user access to one or more of the at least one protected application.
Claim 25
Dependent Claim
164 words
A computer readable medium including machine-readable instructions comprising: one or more instructions for performing an initial authentication of a user via a web server; one or more instructions for determining a network credential for the user, the network credential including at least a role of the user; one or more instructions for receiving a user request to access at least one protected application via the web server; one or more instructions for automatically accessing a script; one or more instructions for transferring the network credential to the script; one or more instructions for determining a script access value name based upon said user role; one or more instructions for retrieving script access values based on said script access value name; one or more instructions for determining a user identification and password based on the script access values; and one or more instructions for presenting the determined user identification and password for user access to one or more of the at least one protected application.
Claim 26
Dependent Claim
20 words
The medium of claim 21 , further comprising one or more instructions for mapping the user to a user role.
Claim 27
Dependent Claim
35 words
The medium of claim 21 , further comprising one or more instructions for selecting a user role from a plurality of roles wherein the number of roles is less than the number of network users.
Claim 28
Dependent Claim
21 words
The medium of claim 21 , further comprising one or more instructions for forming a cookie that includes the network credential.
Claim 29
Dependent Claim
17 words
The medium of claim 21 , further comprising one or more instructions for consulting an X.500 directory.
Claim 30
Dependent Claim
142 words
Computer readable data transmission between a web server and a browser for authenticating user access to at least one protected application on a network comprising: at least one data structure for performing an initial authentication of a user; at least one data structure for determining a network credential for the user, the network credential including at least a role of the user; at least one data structure transferring a user request to access a protected application on the network; at least one data structure for automatically accessing a script configured to retrieve at least one script access value based on the network credential and a script access value name, the at least one script access value providing user access authentication information for the protected application; and at least one data structure for presenting the user access authentication information to the protected application.
Claim 31
Dependent Claim
142 words
Computer readable data transmission between a web server and a browser for authenticating user access to at least one protected application on a network comprising: at least one data structure for performing an initial authentication of a user; at least one data structure for determining a network credential for the user, the network credential including at least a role of the user; at least one data structure transferring a user request to access a protected application on the network; at least one data structure for automatically accessing a script configured to retrieve at least one script access value based on the network credential and a script access value name, the at least one script access value providing user access authentication information for the protected application; and at least one data structure for presenting the user access authentication information to the protected application.
Claim 32
Dependent Claim
100 words
Computer readable data transmission between a web server and a browser for authenticating user access to at least one protected application on a network comprising: at least one data structure that automatically accesses a script configured to determine at least one script access value based on a network credential and a script access value name, the at least one script access value providing user access authentication information for a protected application, and the network credential including at least a role of the user; and at least one data structure that presents the user access authentication information to the protected application.
Claim 33
Dependent Claim
100 words
Computer readable data transmission between a web server and a browser for authenticating user access to at least one protected application on a network comprising: at least one data structure that automatically accesses a script configured to determine at least one script access value based on a network credential and a script access value name, the at least one script access value providing user access authentication information for a protected application, and the network credential including at least a role of the user; and at least one data structure that presents the user access authentication information to the protected application.
Claim 34
Independent Claim
123 words
A method for accessing information on a network, comprising: performing an initial authentication of a user via a web server; creating a network credential for the user, the network credential including at least a role of the user; receiving a user request to access at least one of an application, a file or a document via the web server; automatically accessing a script configured to determine at least one script access value based on the network credential and a script access value name, the at least one script access value providing user access authentication information for at least one of the at least one application, file or document; and presenting the user access authentication to the at least one application, file or document.
Claim 35
Independent Claim
123 words
A method for accessing information on a network, comprising: performing an initial authentication of a user via a web server; creating a network credential for the user, the network credential including at least a role of the user; receiving a user request to access at least one of an application, a file or a document via the web server; automatically accessing a script configured to determine at least one script access value based on the network credential and a script access value name, the at least one script access value providing user access authentication information for at least one of the at least one application, file or document; and presenting the user access authentication to the at least one application, file or document.
References Cited (Backward Citations)
US5586260A
Cited
US5684957A
Cited
US5604490A
Cited
US5655077A
Cited
US5689638A
Cited
US5682478A
Cited
US5678041A
Cited
US5768504A
Cited
US5742759A
Cited
US5734831A
Cited
US5684950A
Cited
US5987611A
Cited
US5875296A
Cited
US5918228A
Cited
US5881225A
Cited
US5999978A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-03-19 | 2004-09-18 | 2005-03-20 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-03-19 | 2008-09-18 | 2009-03-20 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-03-19 | 2012-09-18 | 2013-03-20 | $7700.00 | Window Closed / Lapsed |