C12) United States Patent (10) Patent No.: US 7,272,639 Bl Levergood Et Al
Total Page:16
File Type:pdf, Size:1020Kb
111111 1111111111111111111111111111111111111111111111111111111111111 US007272639Bl c12) United States Patent (10) Patent No.: US 7,272,639 Bl Levergood et al. (45) Date of Patent: *Sep.18,2007 (54) INTERNET SERVER ACCESS CONTROL 4,578,530 A 3/1986 Zeidler .................... 178/22.09 AND MONITORING SYSTEMS 4,734,858 A 3/1988 Schlafly 4,755,940 A 7/1988 Bracht! et a!. (75) Inventors: Thomas Mark Levergood, Hopkinton, 4,759,063 A 7/1988 Chaum MA (US); Lawrence C. Stewart, 4,759,064 A 7/1988 Chaum 4,775,935 A 10/1988 Yourick Burlington, MA (US); Stephen Jeffrey 4,795,890 A 111989 Goldman Morris, Westford, MA (US); Andrew 4,799,156 A 111989 Shavit eta!. C. Payne, Lincoln, MA (US); George 4,812,628 A 3/1989 Boston eta!. Winfield Treese, Newton, MA (US) 4,827,508 A 5/1989 Shear 4,891,503 A 111990 Jewell (73) Assignee: Soverain Software LLC, Chicago, IL (US) (Continued) FOREIGN PATENT DOCUMENTS ( *) Notice: Subject to any disclaimer, the term of this patent is extended or adjusted under 35 EP 0172670 2/1986 U.S.C. 154(b) by 0 days. (Continued) This patent is subject to a terminal dis OTHER PUBLICATIONS claimer. T. Berners-Lee et al., RFC 1738: Uniform Resource Locators (21) Appl. No.: 09/005,479 (URLs), Network Working Group, Dec. 1994, pp. 1-25.* (Continued) (22) Filed: Jan. 12, 1998 Primary Examiner-Patrice Winder Related U.S. Application Data (74) Attorney, Agent, or Firm-Jones Day (63) Continuation of application No. 08/474,096, filed on (57) ABSTRACT Jun. 7, 1995, now Pat. No. 5,708,780. This invention relates to methods for controlling and moni (51) Int. Cl. toring access to network servers. In particular, the process G06F 15116 (2006.01) described in the invention includes client-server sessions (52) U.S. Cl. ....................... 709/218; 709/203; 709/229 over the Internet. In this environment, when the user (58) Field of Classification Search ... ... ... ... .. .. 709/217, attempts to access an access-controlled file, the server sub 709/218, 219, 225, 229 jects the request to a secondary server which determines See application file for complete search history. whether the client has an authorization or valid account. (56) References Cited Upon such verification, the user is provided with a session identification which allows the user to access to the U.S. PATENT DOCUMENTS requested file as well as any other files within the present protection domain. 4,305,059 A 12/1981 Benton 4,528,643 A 7/1985 Freeny, Jr. 4,529,870 A 7/1985 Chaum 79 Claims, 7 Drawing Sheets US 7,272,639 Bl Page 2 U.S. PATENT DOCUMENTS 5,897,622 A 4/1999 Binn eta!. 5,909,492 A 6/1999 Payne eta!. 4,922,521 A 5/1990 Krikke et al. 5,920,847 A 7/1999 Kolling eta!. 4,926,480 A 5/1990 Chaum 6,006,199 A 12/1999 Berlin eta!. 4,935,870 A 6/1990 Burk, Jr. et al. 6,023,683 A 212000 Johnson et a!. 4,947,028 A 8/1990 Gorog 6,041,316 A 3/2000 Allen 4,947,430 A 8/1990 Chaum 6,049,785 A 4/2000 Gifford 4,949,380 A 8/1990 Chaum 6,134,592 A * 10/2000 Montulli ..................... 709/227 4,972,318 A 1111990 Brown eta!. 6,195,649 B1 2/2001 Gifford 4,977,595 A 12/1990 Ohta et a!. .................... 380/24 6,199,051 B1 3/2001 Gifford 4,982,346 A 111991 Girouard et a!. 6,205,437 B1 3/2001 Gifford 4,987,593 A 111991 Chaum 6,449,599 B1 9/2002 Payne eta!. 4,991,210 A 2/1991 Chaum 6,708,157 B2 3/2004 Stefik et al. 4,992,940 A 2/1991 Dworkin 4,996,711 A 2/1991 Chaum FOREIGN PATENT DOCUMENTS 5,025,373 A 6/1991 Keyser, Jr. et a!. 5,060,153 A 10/1991 Nakagawa EP 0 456 920 1111991 5,077,607 A 12/1991 Johnson et a!. EP 0542298 B1 5/1993 5,105,184 A 4/1992 Pirani et al. EP 0 645 688 3/1995 5,220,501 A 6/1993 Lawlor eta!. GB 2102606 2/1983 5,247,575 A 9/1993 Sprague et a!. JP 3278230 12/1991 5,276,736 A 111994 Chaum JP 410191 111992 5,305,195 A 4/1994 Murphy JP 05-158983 6/1993 5,311,594 A 5/1994 Penzias JP 5274275 10/1993 5,319,542 A 6/1994 King, Jr. et al. JP 6162059 6/1994 5,321,751 A 6/1994 Ray eta!. JP 6291776 10/1994 5,336,870 A 8/1994 Hughes eta!. wo wo 91116691 10/1991 5,341,429 A 8/1994 Stringer et a!. wo wo 93/10503 5/1993 5,347,632 A * 9/1994 Filepp eta!. ............... 709/202 wo wo 94/03859 2/1994 5,351,186 A 9/1994 Bullock et al. 5,351,293 A 9/1994 Michener et al. OTHER PUBLICATIONS 5,383,113 A 111995 Kight eta!. 5,414,833 A 5/1995 Hershey et a!. Jose Kahan, A distributed Authorization Model for WWW, http:// 5,475,585 A 12/1995 Bush www.isoc.org/, May 1995, 16 pages.* 5,521,631 A 5/1996 Budow eta!. Jose Kahan, A capability-based authorization model for the World 5,530,852 A 6/1996 Meske, Jr. et a!. Wide Web, Apr. 1995, 14 pages.* 5,535,229 A 7/1996 Hain, Jr. et a!. Scott Anderson et a!., Sessioneer: Flexible Session Level Authen 5,544,322 A * 8/1996 Cheng et a!. ............... 709/229 tication with Off the Shelf Servers and Clients, The Third Intern'! 5,557,516 A 9/1996 Hogan WWW Conf., Apr. 1995, 7 pages.* 5,557,518 A 9/1996 Rosen Bjorn N. Freeman-Benson, Using the Web to Provide Private 5,557,798 A 9/1996 Skeen et al. Information, First international Conference on the World Wide Web, 5,560,008 A * 9/1996 Johnson et a!. ............. 709/300 WWW94, May 1994, 5 pages.* 5,577,209 A 1111996 Boyle et al. Trip eta!., "Cookies" (Client-side persistent information) and their 5,590,197 A 12/1996 Chen eta!. use, Netscape Technical Note 20019, Netscape Communications 5,592,378 A 111997 Cameron et a!. Corp, Oct. 1995.* 5,594,910 A 111997 Filepp eta!. Jose Kahan, A Distributed Authorization Model for WWW, May 5,596,642 A 111997 Davis eta!. 199 5, http://www.isoc .org/HMP/PAPER/1 07 /htrnl/paper. * 5,596,643 A 111997 Davis eta!. N etscape Products, "Open and Secure Internet Software" 5,604,802 A 2/1997 Holloway INTERNET, Sep. 18, 1995, pp. 1-2. 5,621,797 A 4/1997 Rosen Merchant System: Overview, "Netscape Merchant System Data 5,623,547 A 4/1997 Jones eta!. Sheet" INTERNET, Sep. 18, 1995, pp. 1-3. 5,623,656 A 4/1997 Lyons Internet Applications Customer Showcase, "Customer Showcase" 5,642,419 A 6/1997 Rosen INTERNET, Sep. 18, 1995., pp. 1-2. 5,664,110 A 9/1997 Green et al. The Server-Application Function and Netscape Server API, "The 5,664,111 A 9/1997 Nahan eta!. Netscape Server API" Netscape Products INTERNET, Sep. 18, 5,694,551 A 12/1997 Doyle et al. 1995, pp. 1-11. 5,708,780 A 111998 Levergood et a!. The Object-Oriented Paradigm of Server Configuration, "The 5,710,884 A * 111998 Dedrick ...................... 709/217 Object-Oriented Paradigm of Server Configuration" INTERNET, 5,715,314 A 2/1998 Payne et al. .................. 380/24 Sep. 18, 1995, pp. 102. 5,724,424 A 3/1998 Gifford Verisign Redirection Information, "Important Announcement" 5,727,164 A 3/1998 Kaye eta!. INTERNET, Sep. 18, 1995, p. 1. 5,734,719 A 3/1998 Tsevdos et a!. Lou Montulli, Electronic Mail to multiple recipients of the www 5,761,662 A * 6/1998 Dasan ......................... 707/10 talk list ([email protected]) on "Session Tracking" (omi. 5,768,521 A * 6/1998 Dedrick ...................... 709/224 mail.www-talk, Apr. 18, 1995). 5,774,670 A * 6/1998 Montulli ..................... 709/227 PR: Digital IDs for Open Market's Secure WebServer, "Press 5,784,565 A 7/1998 Lewine Release, VeriSign, Inc. to Provide Digital IDs for Open Market's 5,806,077 A 9/1998 Wecker Secure WebServer" INTERNET, Sep. 18, 1995, pp. 1-2. 5,812,776 A 9/1998 Gifford PR: Online Security Solutions, "VeriSign, Inc. Adds the Missing 5,819,092 A 10/1998 Ferguson et a!. Component to' Online Security Solutions" INTERNET, Sep. 18, 5,826,241 A 10/1998 Stein et al. 1995, pp. 1-2. 5,826,242 A * 10/1998 Montulli ...................... 705/27 The SSL Protocol, INTERNET, Sep. 18, 1995, pp. 1-18. 5,848,399 A 12/1998 Burke !Store, "Netscape !store Data Sheet" INTERNET, Sep. 18, 1995, pp. 5,895,454 A 4/1999 Harrington ................... 705/26 1-2. US 7,272,639 Bl Page 3 Ramanathan, Srinivas, eta!., "Architectures for Personalized Mul Jared Rhine, "Statelessness" Posting to www-talk discussion list timedia," IEEE Multimedia, vol. 1, No. 1, Computer Society, pp. (May 16, 1994) available at: http://1997.webhistory.org/www.lists/ 37-46, 1994. www-talk.1994q2/0 563 .htrnl. Choudhury, Abhijit K., eta!., "Copyright Protection for Electronic Simon Sper, "Statelessness" posting to www-talk discussion list Publishing Over Computer Networks," IEEE Network, The Maga (May 17, 1994) available at: http://1997.webhistory.org/www.lists/ zine of Computer Communications, vol.