US6360254B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for providing secure URL-based access to private resources
Assignee: Amazon Corporate LLC
•
Filing: 1999-03-30
•
Granted: 2002-03-19
•
Expires: 2019-03-30
Abstract
Abstract In a Web site system in which different private records or other resources are personal to different users, a method is provided for allowing users to securely access a private resource without the need to enter a username, password, or other authentication information, and without the need to download special authentication software or data to the user's computer. Each resource is assigned a private uniform resource locator (URL) which includes a fixed character string and a unique token, and the URLs are conveyed by email (preferably using hyperlinks) to users that are entitled to access such resources. The tokens are generated using a method which distributes the tokens substantially randomly over the range of allowable token values (“token space”). The token space is selected to be sufficiently large relative to the expected number of valid tokens to inhibit the identification of valid tokens through trial and error. When a user attempts to access a private URL (such as to access a private account information page), a token validation program is used to determine whether the token is valid. The method may be used to provide users secure to access private account information on the Web site of merchant. Other practical applications include electronic gift certificate and coupon redemption, gift registries, order confirmation electronic voting, and electronic greeting cards.
Inventors
- 👤 Gregory D. Linden
- 👤 Michael D. McDaniel
- 👤 Ryan J. Snodgrass
- 👤 Joel R. Spiegel
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-02 22:51
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; H04L63/0807; G; G06; G06F; G06F16/00; G06F16/90; G06F16/95; G06F16/955; G06F21/00; G06F21/30; G06F21/31; G06F21/60; G06F21/62; G06F21/6218; G06F21/6245; G06F2221/00; G06F2221/21; G06F2221/2151
Claims Analysis
Total Claims: 39
Claim 1
Independent Claim
170 words
In a Web site system in which different users are provided access to different private resources, a computer-implemented method of providing a user secure access to a private resource over a publicly-accessible network without requiring the user to enter authentication information, the method comprising: obtaining an email address of the user; generating a token using a token generation method that distributes tokens substantially randomly over a token space, the token space selected to be sufficiently large to inhibit identification of a valid token by trial and error, wherein generating the token comprises generating a token value of at least 64 bits; combining the token and a predefined character string to form a uniform resource locator (URL) which corresponds to the private resource; generating an email message which includes the URL, and transmitting the email message to the email address of the user; and in response to receiving a request for the URL over the publicly-accessible network from a user, accessing the resource without requiring the user to enter authentication information.
Claim 2
Dependent Claim
170 words
In a Web site system in which different users are provided access to different private resources, a computer-implemented method of providing a user secure access to a private resource over a publicly-accessible network without requiring the user to enter authentication information, the method comprising: obtaining an email address of the user; generating a token using a token generation method that distributes tokens substantially randomly over a token space, the token space selected to be sufficiently large to inhibit identification of a valid token by trial and error, wherein generating the token comprises generating a token value of at least 64 bits; combining the token and a predefined character string to form a uniform resource locator (URL) which corresponds to the private resource; generating an email message which includes the URL, and transmitting the email message to the email address of the user; and in response to receiving a request for the URL over the publicly-accessible network from a user, accessing the resource without requiring the user to enter authentication information.
Claim 3
Dependent Claim
35 words
The method of claim 1 , wherein the resource comprises personal account information stored in a database, and accessing the resource comprises returning to the user a private Web page which includes the account information.
Claim 4
Dependent Claim
33 words
The method of claim 2 , wherein the account information includes a subscription profile for an email-based subscription service, and the private Web page includes an electronic form for modifying the subscription profile.
Claim 5
Dependent Claim
31 words
The method of claim 1 , wherein accessing the resource comprises transmitting to the user a Web page that contains an electronic greeting card created for the user by another user.
Claim 6
Dependent Claim
22 words
The method of claim 1 , wherein accessing the resource comprises updating a database to indicate that the private URL was accessed.
Claim 7
Dependent Claim
21 words
The method of claim 5 , wherein updating the database comprises crediting an account of the user with a monetary amount.
Claim 8
Dependent Claim
14 words
The method of claim 5 , wherein updating the database comprises confirming an order.
Claim 9
Dependent Claim
18 words
The method of claim 5 , wherein updating the database comprises recording a vote placed by the user.
Claim 10
Dependent Claim
18 words
The method of claim 1 , wherein accessing the resource comprises accessing a gift registry of another user.
Claim 11
Dependent Claim
25 words
The method of claim 1 , wherein generating the token comprises using at least one of an encryption algorithm and a pseudo-random number generation algorithm.
Claim 12
Dependent Claim
35 words
The method of claim 1 , generating the token comprises encoding the email address of the user within token, and accessing the resource comprises extracting the email address from the token to identify the user.
Claim 13
Dependent Claim
34 words
The method of claim 1 , further comprising storing the token in a table which maps valid tokens to user identifiers, and wherein accessing the resource comprises accessing the table to identify the user.
Claim 14
Dependent Claim
28 words
The method of claim 1 , further comprising invalidating the private URL after at least one of (a) a single use, and (b) a predetermined period of time.
Claim 15
Dependent Claim
17 words
The method of claim 1 , wherein generating the token comprises encoding a timestamp within the token.
Claim 16
Dependent Claim
23 words
The method of claim 1 , wherein generating the token is performed automatically in response to an electronic form submission by the user.
Claim 17
Dependent Claim
174 words
A computer system for providing secure Web-based access to private resources over a publicly-accessible network without requiring users to enter authentication information, comprising: a database which includes a plurality of private records, wherein different private records correspond to different users; and a server system which communicates with Web clients over the publicly-accessible network to provide restricted user access to the private records, the server system including a server application that (a) generates tokens which correspond to specific private records such that outstanding tokens are distributed substantially randomly over a token space, wherein each of said tokens comprises at least 64 bits, (b) generates private uniform resource locators (URLs) which include the tokens, (c) transmits the private URLs to corresponding users to enable the users to access corresponding private records, and (d) validates tokens received from Web clients in URL requests; wherein the server system responds to a URL request which includes a valid token by returning information contained in a private record which corresponds to the token, without requiring user entry of authentication information.
Claim 18
Dependent Claim
174 words
A computer system for providing secure Web-based access to private resources over a publicly-accessible network without requiring users to enter authentication information, comprising: a database which includes a plurality of private records, wherein different private records correspond to different users; and a server system which communicates with Web clients over the publicly-accessible network to provide restricted user access to the private records, the server system including a server application that (a) generates tokens which correspond to specific private records such that outstanding tokens are distributed substantially randomly over a token space, wherein each of said tokens comprises at least 64 bits, (b) generates private uniform resource locators (URLs) which include the tokens, (c) transmits the private URLs to corresponding users to enable the users to access corresponding private records, and (d) validates tokens received from Web clients in URL requests; wherein the server system responds to a URL request which includes a valid token by returning information contained in a private record which corresponds to the token, without requiring user entry of authentication information.
Claim 19
Dependent Claim
31 words
The computer system of claim 16 , wherein the server application distributes the tokens over a token space which is sufficiently large to inhibit the identification of valid tokens by trial-and-error.
Claim 20
Dependent Claim
28 words
The computer system of claim 16 , wherein the server application generates the tokens using at least one of an encryption algorithm and a pseudo-random number generation algorithm.
Claim 21
Dependent Claim
23 words
The computer system of claim 16 , wherein the server system conveys the URLs to the users over the publicly-accessible network by email.
Claim 22
Dependent Claim
28 words
The computer system of claim 16 , further comprising a table which maps tokens to private records, the table stored in memory and accessed by the server application.
Claim 23
Dependent Claim
32 words
The computer system of claim 16 , wherein the server application encodes email addresses within the tokens, and extracts the email addresses from received tokens to determine whether the tokens are valid.
Claim 24
Dependent Claim
30 words
The computer system of claim 16 , wherein the server application invalidates a token after at least one of (a) a single use, or (b) a predetermined period of time.
Claim 25
Dependent Claim
29 words
The computer system of claim 16 , wherein the server system responds to a private URL that includes a valid token by generating and returning a private Web page.
Claim 26
Dependent Claim
38 words
The computer system of claim 23 , wherein the server system implements an email-based subscription service in which the tokens are used to provide secure access to private Web pages that allow users to modify personal subscription profiles.
Claim 27
Dependent Claim
27 words
The computer system of claim 16 , wherein the server system implements a gift registry system in which the private URLs provide access to private gift registries.
Claim 28
Dependent Claim
28 words
The computer system of claim 16 , wherein the server system implements an electronic gift certificate system in which the tokens are used to redeem electronic gift certificates.
Claim 29
Dependent Claim
33 words
The computer system of claim 16 , wherein the server system implements an electronic greeting card system in which the tokens are used to provide secure access to private greeting card Web pages.
Claim 30
Dependent Claim
29 words
The computer system of claim 16 , wherein the server system implements an electronic voting system wherein a request for a private URL represents a vote by a user.
Claim 31
Dependent Claim
26 words
The computer system of claim 16 , wherein the server system implements an electronic coupon system in which the private URLs provide one-time-use discounts to users.
Claim 32
Dependent Claim
144 words
In a Web site system of a merchant, a computer-implemented method of providing customized information to a user about products and/or services available from the merchant, comprising: obtaining an email address and a subscription profile from the user, the subscription profile indicating product and/or service categories selected by the user; transmitting to the user at least one email document which contains descriptions of products and/or services, the descriptions selected based on the subscription profile; generating and transmitting to the user a private uniform resource locator (URL) which provides access to a private Web page for at least securely revising the subscription profile, the URL containing a token which is generated using a method which distributes tokens substantially randomly over a token space; and responding to a client request for the private URL by returning the private Web page without requiring entry of authentication information.
Claim 33
Dependent Claim
144 words
In a Web site system of a merchant, a computer-implemented method of providing customized information to a user about products and/or services available from the merchant, comprising: obtaining an email address and a subscription profile from the user, the subscription profile indicating product and/or service categories selected by the user; transmitting to the user at least one email document which contains descriptions of products and/or services, the descriptions selected based on the subscription profile; generating and transmitting to the user a private uniform resource locator (URL) which provides access to a private Web page for at least securely revising the subscription profile, the URL containing a token which is generated using a method which distributes tokens substantially randomly over a token space; and responding to a client request for the private URL by returning the private Web page without requiring entry of authentication information.
Claim 34
Dependent Claim
20 words
The method of claim 30 , wherein transmitting the private URL to the user comprises transmitting the URL by email.
Claim 35
Dependent Claim
34 words
The method of claim 30 , wherein the method is performed without requiring the user to submit or specify any information other than the email address and the selected categories of products and/or services.
Claim 36
Dependent Claim
30 words
The method of claim 30 , wherein generating the private URL comprises using at least one of an encryption algorithm and a pseudo-random number generation algorithm to generate the token.
Claim 37
Dependent Claim
36 words
The method of claim 30 , wherein generating the private URL comprises encoding the email address of the user within token, and wherein responding to the client request comprises extracting the email address from the token.
Claim 38
Dependent Claim
39 words
The method of claim 30 , wherein generating the private URL comprises encoding a time value within the token, and wherein responding to the client request comprises using the time value to determine whether the private URL has expired.
Claim 39
Dependent Claim
22 words
The method of claim 30 , wherein generating the private URL comprises generating a token value which contains at least 64 bits.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2005-03-18 | 2005-09-17 | 2006-03-19 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2009-03-18 | 2009-09-17 | 2010-03-19 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2013-03-18 | 2013-09-17 | 2014-03-19 | $7700.00 | Window Closed / Lapsed |