System, method, and apparatuses for dynamic authorization
AssigneeOracle International Corporation
InventorsDarrel Laursen, Yang Liu, Antonia M. Garcia, Xia Rao
Life of this patent
Estimating the term…
Abstract
Systems and methods are provided for dynamically authorizing access to content stored on a front-end system by one or more applications hosted on a remote back-end system. The content stored on the front-end system may be static files. The front-end system may store content in distinct content storage locations. Each content storage location may correspond to a respective application hosted by the back-end system. In one embodiment, there may be multiple back-end systems each hosting one or more applications. Each application on the back-end system may employ operation logic to determine authorization to a content storage location associated with the application.
Claims20
A computer-implemented method for dynamic access control comprising:
- receiving, at a thin server system, a request for content, the request comprising a user identifier and a content identifier;
- identifying, based on configuration information, a first storage location for the requested content, the first storage location being internal to the thin server system and the configuration information indicating one or more storage locations associated with the content identifier;
- identifying, based on the content identifier, a back-end system hosting one or more applications associated with the requested content;
- transmitting, by the thin server system, an authorization request to the one or more applications associated with the requested content, the authorization request comprising the content identifier and the user identifier;
- receiving, by the thin server system, an authorization response comprising an authorization indicator associated with the user identifier indicating authorization for content within the first storage location;
- storing, in non-transitory memory internal to the thin server system, the authorization response;
- and
- transmitting, by the thin server system, the requested content to a user device associated with the user identifier.
A system for dynamic access control comprising:
- one or more processors;
- and
- a memory coupled with the one or more processors, the memory configured to
- store instructions, that when executed by the one or more processors, cause the one or more processors to:
- receive a request for content, the request comprising a user identifier and a content identifier;
- identify, based on configuration information, a first storage location for the requested content, the first storage location being internal to a thin server system and the configuration information indicating one or more storage locations associated with the content identifier;
- identify, based on the content identifier, a back-end system hosting one or more applications associated with the requested content;
- transmit an authorization request to the one or more applications associated with the requested content, the authorization request comprising the content identifier and the user identifier;
- receive an authorization response comprising an authorization indicator associated with the user identifier indicating authorization for content within the first storage location;
- storing, in non-transitory memory, the authorization response;
- and
- transmit the requested content to a user device associated with the user identifier.
A non-transitory computer-readable storage medium having stored thereon instructions for causing at least one computer system to perform the method of:
- receiving a request for content, the request comprising a user identifier and a content identifier;
- identifying, based on configuration information, a first storage location for the requested content, the first storage location being internal to a thin server system and the configuration information indicating one or more storage locations associated with the content identifier;
- identifying, based on the content identifier, a back-end system hosting one or more applications associated with the requested content;
- transmitting an authorization request to the one or more applications associated with the requested content, the authorization request comprising the content identifier and the user identifier;
- receiving, an authorization response comprising an authorization indicator associated with the user identifier indicating authorization for content within the first storage location;
- storing, in non-transitory memory, the authorization response;
- and
- transmitting, the requested content to a user device associated with the user identifier.
Dependencies are inferred from the claim text.