Patent US6357010B1 successfully refreshed from Google Patents.
US6357010B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for controlling access to documents stored on an internal network
Assignee: McAfee LLC
•
Filing: 1998-02-17
•
Granted: 2002-03-12
•
Expires: 2018-02-17
Abstract
Abstract A system and method of limiting access from an external network to documents stored on an internal network. A client list is built in which each client is assigned to one or more roles. Each role has access to one or more documents as defined on a document list. A request from an external network is reviewed and, if possible, the request is associated with a client on the client list. The requested document is then compared to the document list associated with the client's role and, if the requested document is in the list of documents available to a client in the client's role, the requested document is fetched, cleaned and sent to the client.
Inventors
- 👤 Richard R. Viets
- 👤 David G. Motes
- 👤 Paula Budig Greve
- 👤 Wayne W. Herberg
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 14:49
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; H04L63/0227; H04L63/04; H04L63/0428; H04L63/08; H04L63/10; H04L63/105; H04L9/00; H04L9/40
Claims Analysis
Total Claims: 45
Claim 1
Independent Claim
103 words
A method of limiting access from an external network to documents stored on an internal network, the method comprising: building a client list, wherein building a client list includes assigning each client to a role; building a document list naming documents available to clients assigned to the client's role; receiving a request for a document stored on the internal network; associating the request with a client; determining if the requested document is on the list of documents; and if the requested document is on the list of documents, fetching the requested document as a proxy and sending the requested document to the client.
Claim 2
Independent Claim
103 words
A method of limiting access from an external network to documents stored on an internal network, the method comprising: building a client list, wherein building a client list includes assigning each client to a role; building a document list naming documents available to clients assigned to the client's role; receiving a request for a document stored on the internal network; associating the request with a client; determining if the requested document is on the list of documents; and if the requested document is on the list of documents, fetching the requested document as a proxy and sending the requested document to the client.
Claim 3
Dependent Claim
49 words
The method according to claim 1 , wherein each document has a unique URL and wherein the document list includes the URL of each available document, wherein the step of determining includes the step of determining if the URL of the requested document is included in the document list.
Claim 4
Dependent Claim
42 words
The method according to claim 2 , wherein building the document list includes displaying available documents in a tree structure within a graphical user interface, wherein displaying includes querying a document control server to obtain a current version of the document list.
Claim 5
Dependent Claim
21 words
The method according to claim 1 , wherein associating the request with a client includes the step of authenticating the client.
Claim 6
Dependent Claim
49 words
The method according to claim 4 , wherein each document has a unique URL and wherein the document list includes the URL of each available document, wherein the step of determining includes the step of determining if the URL of the requested document is included in the document list.
Claim 7
Dependent Claim
45 words
The method according to claim 5 , wherein building the document list includes displaying available documents in a tree structure within a graphical user interface, wherein displaying includes the step of querying a document control server to obtain a current version of the document list.
Claim 8
Dependent Claim
115 words
A document control system, including: an internal network; an external interface; a document server connected to the internal network, wherein the document server controls access to a plurality of documents, including a first document; and a document control server, wherein the document control server receives a document request for the first document, determines a user associated with the document request and authenticates the user, wherein the document control server includes a go list processor for determining if the user has authorization to access said first document and a document processor for reading the first document from the document server, cleaning the first document and forwarding a clean version of said first document to the user.
Claim 9
Dependent Claim
115 words
A document control system, including: an internal network; an external interface; a document server connected to the internal network, wherein the document server controls access to a plurality of documents, including a first document; and a document control server, wherein the document control server receives a document request for the first document, determines a user associated with the document request and authenticates the user, wherein the document control server includes a go list processor for determining if the user has authorization to access said first document and a document processor for reading the first document from the document server, cleaning the first document and forwarding a clean version of said first document to the user.
Claim 10
Dependent Claim
34 words
The document control system according to claim 7 , wherein the external interface includes a firewall connected to an external network, wherein the document control server communicates to the document server through the firewall.
Claim 11
Dependent Claim
24 words
The document control system according to claim 7 , wherein the document processor acts as a proxy to hide access to the first document.
Claim 12
Dependent Claim
32 words
The document control system according to claim 7 , wherein the external interface includes a telephone interface into which a business partner can dial to gain access to the document control server.
Claim 13
Dependent Claim
108 words
A document control system, including: an internal network; an external interface; a document server connected to the internal network, wherein the document server controls access to a plurality of documents, including a first document; a document control server; and a data owner interface for building a document list of available documents; wherein the document control server receives a document request from the external interface for the first document, determines a user associated with the document request and authenticates the user; and wherein the document control server includes a go list processor for determining, based on the document list, if the user has authorization to access said first document.
Claim 14
Dependent Claim
108 words
A document control system, including: an internal network; an external interface; a document server connected to the internal network, wherein the document server controls access to a plurality of documents, including a first document; a document control server; and a data owner interface for building a document list of available documents; wherein the document control server receives a document request from the external interface for the first document, determines a user associated with the document request and authenticates the user; and wherein the document control server includes a go list processor for determining, based on the document list, if the user has authorization to access said first document.
Claim 15
Dependent Claim
47 words
The document control system according to claim 11 , wherein the data owner interface includes a graphical user interface which displays the document list in a tree structure, wherein the graphical user interface queries the document control server to obtain a current version of the document list.
Claim 16
Dependent Claim
44 words
The document control system according to claim 11 , wherein the document control server further includes a document processor for reading the first document from the document server, cleaning the first document and forwarding a clean version of said first document to the user.
Claim 17
Dependent Claim
24 words
The document control system according to claim 13 , wherein the document processor acts as a proxy to hide access to the first document.
Claim 18
Dependent Claim
47 words
The document control system according to claim 14 , wherein the data owner interface includes a graphical user interface which displays the document list in a tree structure, wherein the graphical user interface queries the document control server to obtain a current version of the document list.
Claim 19
Dependent Claim
21 words
The document control system according to claim 11 , wherein the external interface includes a firewall connected to an external network.
Claim 20
Dependent Claim
32 words
The document control system according to claim 11 , wherein the external interface includes a telephone interface into which a business partner can dial to gain access to the document control server.
Claim 21
Dependent Claim
29 words
The document control system according to claim 8 , wherein the document control server is connected to the external network and communicates to the firewall through the external network.
Claim 22
Dependent Claim
29 words
The document control system according to claim 8 , wherein the document control server is connected to a third network and communicates to the firewall through the third network.
Claim 23
Dependent Claim
54 words
The document control system according to claim 7 , wherein the document control server is connected to the internal network and wherein the external interface includes a firewall connected to an external network, wherein the firewall is configured to receive the document request and to route the document request to the document control server.
Claim 24
Dependent Claim
24 words
The document control system according to claim 7 , wherein the document control server includes means for translating links embedded in the first document.
Claim 25
Dependent Claim
42 words
The document control system according to claim 7 , wherein each user is assigned one or more roles and wherein the go list processor restricts access to documents as function of the role under which the user attempts to access the document.
Claim 26
Dependent Claim
126 words
In a system having an internal network and an interface to an external network, a method of handling requests from the external network for documents stored on the internal network, the method comprising: defining one or more users; defining documents accessible to the users; receiving a document request from the external network; determining a user associated with the document request; authenticating the user associated with the document request; determining if the user associated with the document request has permission to access the document requested; and if the user associated with the document request has permission to access the document requested, retrieving the document requested from the internal network, cleaning the document of embedded links and delivering the document to the user associated with the document request.
Claim 27
Dependent Claim
126 words
In a system having an internal network and an interface to an external network, a method of handling requests from the external network for documents stored on the internal network, the method comprising: defining one or more users; defining documents accessible to the users; receiving a document request from the external network; determining a user associated with the document request; authenticating the user associated with the document request; determining if the user associated with the document request has permission to access the document requested; and if the user associated with the document request has permission to access the document requested, retrieving the document requested from the internal network, cleaning the document of embedded links and delivering the document to the user associated with the document request.
Claim 28
Dependent Claim
59 words
The method according to claim 23 , wherein each document has a unique URL and wherein determining if the user associated with the document request has permission to access the document requested includes: accessing a document list listing the URL of each available document; and generating an error message if the document requested is not on the document list.
Claim 29
Dependent Claim
70 words
The method according to claim 23 , wherein defining documents accessible to the users includes assigning each user to one or more roles and limiting access to documents as a function of role and wherein determining if the user associated with the document request has permission to access the document requested includes determining if users in the role associated with the document request have permission to access the document requested.
Claim 30
Dependent Claim
70 words
The method according to claim 24 , wherein defining documents accessible to the users includes assigning each user to one or more roles and limiting access to documents as a function of role and wherein determining if the user associated with the document request has permission to access the document requested includes determining if users in the role associated with the document request have permission to access the document requested.
Claim 31
Dependent Claim
33 words
The method according to claim 23 , wherein each document request includes an HTTP header and wherein authenticating the user associated with the document request includes retrieving authentication information from the HTTP header.
Claim 32
Dependent Claim
33 words
The method according to claim 23 , wherein cleaning the document of embedded links includes looking for a server path link and replacing the server path link with a link to an alias.
Claim 33
Dependent Claim
56 words
The method according to claim 23 , wherein cleaning the document of embedded links includes looking for an absolute path link, determining if the absolute path link is a link which should be hidden and, if the absolute path link is a link which should be hidden, replacing the absolute path link with a different link.
Claim 34
Dependent Claim
178 words
In a system having an internal network and an interface to an external network, a method of handling requests from the external network for documents stored on the internal network, the method comprising: defining a plurality of users, including a first and a second user; assigning each user to one or more roles, wherein assigning includes assigning the first user to a first role and the second user to a second role; defining documents accessible to the users, wherein defining includes limiting access to documents as a function of the roles assigned to the user; receiving a document request from the external network; determining a user and a role associated with the document request; authenticating the user associated with the document request; determining if users in the role associated with the document request have permission to access the document requested; and if users in the role associated with the document request have permission to access the document requested, retrieving the document requested from the internal network and delivering the document to the user associated with the document request.
Claim 35
Dependent Claim
178 words
In a system having an internal network and an interface to an external network, a method of handling requests from the external network for documents stored on the internal network, the method comprising: defining a plurality of users, including a first and a second user; assigning each user to one or more roles, wherein assigning includes assigning the first user to a first role and the second user to a second role; defining documents accessible to the users, wherein defining includes limiting access to documents as a function of the roles assigned to the user; receiving a document request from the external network; determining a user and a role associated with the document request; authenticating the user associated with the document request; determining if users in the role associated with the document request have permission to access the document requested; and if users in the role associated with the document request have permission to access the document requested, retrieving the document requested from the internal network and delivering the document to the user associated with the document request.
Claim 36
Dependent Claim
59 words
The method according to claim 30 , wherein each document has a unique URL and wherein determining if the user associated with the document request has permission to access the document requested includes: accessing a document list listing the URL of each available document; and generating an error message if the document requested is not on the document list.
Claim 37
Dependent Claim
19 words
The method according to claim 30 , wherein retrieving the document requested includes cleaning the document of embedded links.
Claim 38
Dependent Claim
33 words
The method according to claim 32 , wherein cleaning the document of embedded links includes looking for a server path link and replacing the server path link with a link to an alias.
Claim 39
Dependent Claim
56 words
The method according to claim 32 , wherein cleaning the document of embedded links includes looking for an absolute path link, determining if the absolute path link is a link which should be hidden and, if the absolute path link is a link which should be hidden, replacing the absolute path link with a different link.
Claim 40
Dependent Claim
131 words
A computer-readable medium having program code for limiting access from an external network to documents stored on an internal network, the program code comprising: program code for building a client list, wherein program code for building a client list includes program code for assigning each client to a role; program code for building a document list naming documents available to clients assigned to the client'role; program code for receiving a request for a document stored on the internal network; program code for associating the request with a client; program code for determining if the requested document is on the list of documents; and program code for, if the requested document is on the list of documents, fetching the requested document as a proxy and sending the requested document to the client.
Claim 41
Dependent Claim
131 words
A computer-readable medium having program code for limiting access from an external network to documents stored on an internal network, the program code comprising: program code for building a client list, wherein program code for building a client list includes program code for assigning each client to a role; program code for building a document list naming documents available to clients assigned to the client'role; program code for receiving a request for a document stored on the internal network; program code for associating the request with a client; program code for determining if the requested document is on the list of documents; and program code for, if the requested document is on the list of documents, fetching the requested document as a proxy and sending the requested document to the client.
Claim 42
Dependent Claim
152 words
A computer-readable medium comprising program code, in a system having an internal network and an interface to an external network, for handling requests from the external network for documents stored on the internal network, the program code comprising: program code for defining one or more users; program code for defining documents accessible to the users; program code for receiving a document request from the external network; program code for determining a user associated with the document request; program code for authenticating the user associated with the document request; program code for determining if the user associated with the document request has permission to access the document requested; and program code for, if the user associated with the document request has permission to access the document requested, retrieving the document requested from the internal network, cleaning the document of embedded links and delivering the document to the user associated with the document request.
Claim 43
Dependent Claim
152 words
A computer-readable medium comprising program code, in a system having an internal network and an interface to an external network, for handling requests from the external network for documents stored on the internal network, the program code comprising: program code for defining one or more users; program code for defining documents accessible to the users; program code for receiving a document request from the external network; program code for determining a user associated with the document request; program code for authenticating the user associated with the document request; program code for determining if the user associated with the document request has permission to access the document requested; and program code for, if the user associated with the document request has permission to access the document requested, retrieving the document requested from the internal network, cleaning the document of embedded links and delivering the document to the user associated with the document request.
Claim 44
Dependent Claim
207 words
A computer-readable medium comprising program code, in a system having an internal network and an interface to an external network, for handling requests from the external network for documents stored on the internal network, the program code comprising: program code for defining a plurality of users, including a first and a second user; program code for assigning each user to one or more roles, wherein assigning includes assigning the first user to a first role and the second user to a second role; program code for defining documents accessible to the users, wherein defining includes limiting access to documents as a function of the roles assigned to the user; program code for receiving a document request from the external network; program code for determining a user and a role associated with the document request; program code for authenticating the user associated with the document request; program code for determining if users in the role associated with the document request have permission to access the document requested; and program code for, if users in the role associated with the document request have permission to access the document requested, retrieving the document requested from the internal network and delivering the document to the user associated with the document request.
Claim 45
Dependent Claim
207 words
A computer-readable medium comprising program code, in a system having an internal network and an interface to an external network, for handling requests from the external network for documents stored on the internal network, the program code comprising: program code for defining a plurality of users, including a first and a second user; program code for assigning each user to one or more roles, wherein assigning includes assigning the first user to a first role and the second user to a second role; program code for defining documents accessible to the users, wherein defining includes limiting access to documents as a function of the roles assigned to the user; program code for receiving a document request from the external network; program code for determining a user and a role associated with the document request; program code for authenticating the user associated with the document request; program code for determining if users in the role associated with the document request have permission to access the document requested; and program code for, if users in the role associated with the document request have permission to access the document requested, retrieving the document requested from the internal network and delivering the document to the user associated with the document request.
References Cited (Backward Citations)
US4177510A
Cited
US3956615A
Cited
US4584639A
Cited
US4621321A
Cited
US4701840A
Cited
US4713753A
Cited
US4914568A
Cited
US5179658A
Cited
US5204812A
Cited
US5124984A
Cited
US5272754A
Cited
US5276735A
Cited
US5311593A
Cited
US5329623A
Cited
US5586260A
Cited
US5455953A
Cited
US5544321A
Cited
US5606668A
Cited
EP0697662A1
Cited
US5911143A
Cited
US5864683A
Cited
US5623601A
Cited
US5619648A
Cited
US5566170A
Cited
EP0743777A2
Cited
US5701137A
Cited
US5636371A
Cited
US5708780A
Cited
WO1997013340A1
Cited
US5689566A
Cited
WO1997016911A1
Cited
US5826029A
Cited
US5784566A
Cited
WO1997026731A1
Cited
US5913024A
Cited
US5802299A
Cited
US5684951A
Cited
US5673322A
Cited
US5884033A
Cited
EP0811939A2
Cited
US5918013A
Cited
US5819271A
Cited
US5864871A
Cited
US5961601A
Cited
US5903732A
Cited
US5950195A
Cited
US6055637A
Cited
US6023765A
Cited
US5933600A
Cited
US5915087A
Cited
US5892905A
Cited
US5987611A
Cited
US5884312A
Cited
US5870544A
Cited
US6088679A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2005-03-11 | 2005-09-10 | 2006-03-12 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2009-03-11 | 2009-09-10 | 2010-03-12 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2013-03-11 | 2013-09-10 | 2014-03-12 | $7700.00 | Window Closed / Lapsed |