Title:
AUTHORIZATION SERVICES WITH EXTERNAL AUTHENTICATION
Document Type and Number:
WIPO Patent Application WO2003001324
Kind Code:
A3
Abstract:
A method for authenticating, authorizing, and logging comprises: intercepting (752) requests from a user's browser to a web-enabled resource, which request is sent, if the user has been previously authenticated for a protected resource, with a valid authentication cookie; determining (753) whether the resource is protected by an authentication and/or authorization rule; otherwise, granting (795) access to the resource; and if the resource is protected, determining (754) whether the cookie is received. If a cookie is received, attempting (756) to authorize the user; otherwise: attempting (760) to authenticate the user for the resource. If the user is unsuccessfully authenticated as determined at (762), then: logging (764) the unsuccessful authentication, and performing (766) to do authentication failure actions and deny the user access to the resource; otherwise: logging (774) the successful authentication, performing (766) authentication success actions, passing (780) a valid authentication cookie to browser 12 to be stored by browser 12, and attempting (756) to authorize the user to determine whether the user is authorized to access the resource. If the user is successfully authorized as determined at (790), then: logging (792) the successful authorization of the user performing (794) authorization success actions, and granting (795) the user access to the resource; otherwise: logging (796) the unsuccessful authorization, and performing (798) authorization failure actions and denying the user access to the resource.
More Like This:
Inventors:
VILLAVICENCIO FRANCISCO J
KNOUSE CHARLES W
KNOUSE CHARLES W
Application Number:
PCT/US2002/019476
Publication Date:
April 24, 2003
Filing Date:
June 20, 2002
Export Citation:
Assignee:
OBLIX INC (US)
International Classes:
G06F21/00; H04L29/06; (IPC1-7): G06F11/00
Foreign References:
| US6158010A | 2000-12-05 |
Download PDF: