Computer apparatus and method for providing security checking for software applications accessed via the World-Wide Web

A computer-implemented method for securely interfacing between a web browser and a software application over the World-Wide Web, the method comprising the steps of

• providing an input from said web browser to a web server, said input including a user ID, a password and a key;
• authenticating a user of said web browser by comparing said user ID and said password to stored user IDs and stored passwords;
• delivering said user ID and said key to a gateway mechanism coupled to said web server;
• comparing said user ID and said key to a plurality of user ID's and a plurality of keys stored in a library of software application users;
• retrieving authentication parameters from said stored library for accesses to said software application corresponding to said user ID and said key;
• and
• providing access to said software application using said retrieved authentication parameters.

A system for communicating between a web browser and at least one computer resource over the World-Wide Web comprising:

• a client workstation running the web browser;
• a web server computer running a web server application, said web server application in communication with said web browser, said web server application including a first authentication mechanism, said first authentication mechanism receiving a password and user ID from said web browser to authenticate a user of said web browser, said web server application also receiving a key from said web browser;
• a first computer running a gateway mechanism, said gateway mechanism coupled to and providing an interface between said at least one computer resource and said web server application, said gateway mechanism including a second authentication mechanism, said second authentication mechanism receiving said user ID and said key from said web server application;
• a second computer providing access to said at least one computer resource;
• and
• a library of computer resource users, said library of computer resource users storing authentication parameters for said at least one computer resource, wherein said gateway mechanism retrieves said authentication parameters for said at least one computer resource corresponding to said received user ID and key and delivers said authentication parameters to said at least one computer resource.

A program product for providing secure communication between a plurality of web browsers and at least one FlowMark software application running a plurality of FlowMark processes through a web server application over the World-Wide Web, wherein the web server application includes a first authentication mechanism receiving a password and user ID from said plurality of web browsers to authenticate a user of said web browsers for access to the web server application, said web server application also receiving a key from said web browsers, the program product comprising:

• (1) a gateway mechanism, the gateway mechanism in communication with a web server application and the FlowMark software application, the gateway mechanism receiving FlowMark output data from the FlowMark software application and receiving FlowMark input data from the web server application, the gateway mechanism including:
• an identifier mechanism generating the identifier for each conversation between one of the plurality of web browsers and a FlowMark process, said identifier used to match the FlowMark output data to one of the plurality of web browsers;
• a second authenticator, said second authenticator receiving said user ID and said key from said web server;
• wherein said gateway mechanism retrieves authentication parameters for the FlowMark software application corresponding to said received user ID and key from a library of computer resource users and delivers said authentication parameters to the FlowMark software application;
• (2) signal bearing media bearing the gateway mechanism.

A method of communicating between a web browser and a FlowMark application over the World-Wide Web, the method comprising the steps of:

• providing a client workstation running the web browser;
• providing a web server computer running a web server application, said web server application including a authenticator;
• providing a first computer system running an gateway mechanism, the gateway mechanism in communication with a library of FlowMark users, said library of FlowMark users storing authentication parameters for the FlowMark application for a plurality of FlowMark users;
• providing a second computer system running the FlowMark application;
• providing a first communication mechanism between the web browser and the web server application which allows data to be transmitted between the web browser and the web server application;
• providing a second communication mechanism between the web server application and the gateway mechanism which allows data to be transmitted between the web server application and the gateway mechanism;
• providing a third communication mechanism between the gateway mechanism and the FlowMark application which allows data to be transmitted between the gateway mechanism and the FlowMark application;
• the web browser initiating an access to the FlowMark application by sending authentication data and environment data to the web server application via the first communication mechanism, wherein the authentication data includes a password, a user ID and a key;
• the web server application determining whether the password and user ID authorizes the selected web browser to access the web server application;
• the web server application processing the environment data if the password and user ID authorize the selected web browser to access the web server application;
• the web server application outputting the processed environment data, the user ID and key to the gateway mechanism via the second communication mechanism;
• the gateway mechanism retrieving said authentication parameters for the FlowMark application corresponding to the user ID and key;
• the gateway mechanism generating an identifier corresponding to the selected web browser and a desired process to be executed by the FlowMark application;
• the gateway mechanism outputting the authentication parameters, the identifier and the desired process to the FlowMark application via the third communication mechanism;
• the FlowMark application executing the desired process;
• the FlowMark application returning the results of executing the desired process to the gateway mechanism with the identifier via the third communication mechanism;
• the gateway mechanism determining which of the plurality of browsers should be sent the results based on the identifier;
• the gateway mechanism sending the results to the web server application via the second communication mechanism;
• the web server application sending the results to the selected one web browser corresponding to the identifier via the first communication mechanism.