US5991810A
Expired / Lapsed
US
⏱️ 0.0 years remaining
User name authentication for gateway clients accessing a proxy cache server
Assignee: RPX Corp
•
Filing: 1997-08-01
•
Granted: 1999-11-23
•
Expires: 2017-08-01
Abstract
Abstract A system and method for regulating access to a proxy cache server residing on an institutional intranet or local network provides a directory for storing user names that are appended to client requests for remote web site information. The proxy cache server reads the appended requests and either accepts or denies access to the requested information based upon predetermined access control guidelines relative to the specific user name. The access control guidelines can be stored on the directory, and down-loaded to the proxy cache server's memory as needed. The proxy cache server stores and retrieves requested site information via the Internet, but only retrieves and delivers requested site information to clients if authorization is approved.
Inventors
- 👤 Mark L. Shapiro
- 👤 Anand Subramaniam
- 👤 Muthukumar Muthumavadi
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-07 01:52
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/10; H04L63/101; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; H04L61/00; H04L61/35; H04L61/45; H04L9/00; H04L9/40; H04L69/00; H04L69/22; Y; Y10; Y10S; Y10S707/00; Y10S707/99931; Y10S707/99939
Claims Analysis
Total Claims: 19
Claim 1
Independent Claim
211 words
A method for controlling access by clients to information stored in a proxy cache server linked with a remote site comprising the steps of: establishing at the client a request for transfer of information from the remote site to the client, wherein the transfer request is in a format recognized by the remote site; intercepting the request at a gateway and generating a modified request data structure from the transfer request including appending a header to the transfer request, the header having a predetermined user name associated with the client, the step of intercepting further including accessing a directory service server and transmitting to the proxy cache server the modified transfer request, the header being obtained by accessing the directory service server and being formatted according to a directory service user name hierarchy that is arranged to comprise a character string including a plurality of identifiers that define a context of the client within a client organizational structure having a plurality of levels of clients; reading the modified request at the proxy cache server and determining whether access to the requested information is permitted or denied based upon predetermined access parameters; and retrieving permitted information from a memory location in the proxy cache server and transmitting the information to the client.
Claim 2
Independent Claim
211 words
A method for controlling access by clients to information stored in a proxy cache server linked with a remote site comprising the steps of: establishing at the client a request for transfer of information from the remote site to the client, wherein the transfer request is in a format recognized by the remote site; intercepting the request at a gateway and generating a modified request data structure from the transfer request including appending a header to the transfer request, the header having a predetermined user name associated with the client, the step of intercepting further including accessing a directory service server and transmitting to the proxy cache server the modified transfer request, the header being obtained by accessing the directory service server and being formatted according to a directory service user name hierarchy that is arranged to comprise a character string including a plurality of identifiers that define a context of the client within a client organizational structure having a plurality of levels of clients; reading the modified request at the proxy cache server and determining whether access to the requested information is permitted or denied based upon predetermined access parameters; and retrieving permitted information from a memory location in the proxy cache server and transmitting the information to the client.
Claim 3
Dependent Claim
41 words
The method as set forth in claim 1 wherein the step of retrieving includes establishing a communication link with the remote site, retrieving information from the remote site and storing the information in the memory location of the proxy cache server.
Claim 4
Dependent Claim
48 words
The method as set forth in claim 1 further comprising retrieving, at predetermined times, access control information from the directory service server, the access control information including access parameters associated with predetermined remote sites and allowed access to predetermined remote sites based upon the context of the client.
Claim 5
Dependent Claim
40 words
The method as set forth in claim 1 wherein the step of accessing the network directory service server further comprises providing the directory service server with an initial request for identity of the client, and retrieving therefrom the user name.
Claim 6
Dependent Claim
26 words
The method as set forth in claim 4 wherein the step of appending includes inserting a separating character set between the header and the transfer request.
Claim 7
Dependent Claim
30 words
The method as set forth in claim 5 wherein the step of inserting further includes providing a carriage return character and a line feed character in the separating character set.
Claim 8
Dependent Claim
27 words
The method as set forth in claim 1 wherein the step of establishing a request includes establishing a transfer request that defines a hypertext transfer protocol request.
Claim 9
Independent Claim
241 words
A system for controlling access by clients to information stored in a proxy cache server linked with a remote site comprising: a proxy cache server that caches predetermined information received from remote sites in a cache memory; a gateway client for routing an application transfer request for information from the remote site, the transfer request being in a format recognized by the remote site, the gateway including a means for intercepting the transfer request, prior to routing, and a means for generating a modified transfer request by appending a predetermined user name header associated with the gateway client to the transfer request, the means for intercepting further including means for accessing a directory service server and for transmitting to the proxy cache server the modified transfer request, the header of the modified transfer request residing in the directory service server and being formatted according to a directory service user name hierarchy that is arranged to comprise a character string including a plurality of identifiers that define a context of the client within a client organizational structure having a plurality of levels of clients; means, in the proxy cache server, for determining whether access to the requested information is permitted or denied based upon predetermined access parameters associated with the remote site and the context of the client; and means, in the proxy cache server, for transmitting information from the cache memory to the gateway client based upon the means for determining.
Claim 10
Independent Claim
241 words
A system for controlling access by clients to information stored in a proxy cache server linked with a remote site comprising: a proxy cache server that caches predetermined information received from remote sites in a cache memory; a gateway client for routing an application transfer request for information from the remote site, the transfer request being in a format recognized by the remote site, the gateway including a means for intercepting the transfer request, prior to routing, and a means for generating a modified transfer request by appending a predetermined user name header associated with the gateway client to the transfer request, the means for intercepting further including means for accessing a directory service server and for transmitting to the proxy cache server the modified transfer request, the header of the modified transfer request residing in the directory service server and being formatted according to a directory service user name hierarchy that is arranged to comprise a character string including a plurality of identifiers that define a context of the client within a client organizational structure having a plurality of levels of clients; means, in the proxy cache server, for determining whether access to the requested information is permitted or denied based upon predetermined access parameters associated with the remote site and the context of the client; and means, in the proxy cache server, for transmitting information from the cache memory to the gateway client based upon the means for determining.
Claim 11
Dependent Claim
38 words
The system as set forth in claim 8 wherein the proxy cache server further comprises means for retrieving and for caching the requested information from the remote site when the requested information is absent from the cache memory.
Claim 12
Dependent Claim
47 words
The system as set forth in claim 9 further comprising a remote directory node that stores a predetermined user name associated with the gateway client, and wherein the means for generating the modified request includes a means for retrieving the predetermined user name from the directory node.
Claim 13
Dependent Claim
20 words
The system as set forth in claim 8 wherein the remote site comprises a web server linked with the Internet.
Claim 14
Dependent Claim
34 words
The system as set forth in claim 8 wherein the predetermined access parameters are located at the directory node and the means for determining includes means for accessing the directory node at predetermined times.
Claim 15
Dependent Claim
50 words
The system as set forth in claim 8 further comprising means for retrieving, at predetermined times, access control information from the directory service server, the access control information including access parameters associated with predetermined remote sites and allowed access to predetermined remote sites based upon the context of the client.
Claim 16
Dependent Claim
42 words
The system as set forth in claim 8 wherein the means for accessing the network directory service server further comprises means for providing the directory service server with an initial request for identity of the client, and retrieving therefrom the user name.
Claim 17
Dependent Claim
25 words
The system as set forth in claim 14 wherein the modified transfer request includes a separating character set between the header and the transfer request.
Claim 18
Dependent Claim
23 words
The system as set forth in claim 15 wherein the separating character set includes a carriage return character and a line feed character.
Claim 19
Dependent Claim
18 words
The system as set forth in claim 8 wherein the transfer request defmes a hypertext transfer protocol request.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-11-22 | 2003-05-24 | 2003-11-23 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-11-22 | 2007-05-24 | 2007-11-23 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-11-22 | 2011-05-24 | 2011-11-23 | $7700.00 | Window Closed / Lapsed |