Data access control
AssigneeBritish Telecommunications public limited company
InventorNiall G McGee
Life of this patent
Estimating the term…
Abstract
A modified Web server comprises a session manager which intercepts all incoming requests from clients for Web pages. Each request incorporates a token which the session manager compares with tokens which are stored in a session store. On finding a matching token, a URL associated with the matching token is used by the Web server to return a Web page indicated by the URL to the requester. Any URLs embedded in the Web page to be returned are tokenised by the session manager before the page is returned, and the resulting token/URL pair is stored in the session store.
Claims18
An information server comprising:
- means for establishing a session between a client and an information server;
- means for receiving at said information server a first request from the client for an item of information, said item of information including a plurality of references to a plurality of further items of information;
- means for modifying the item of information by replacing at least one reference by a token;
- means for storing data that relates each token to its corresponding reference in storage means for the duration of said session;
- means for returning to the client the modified item of information in which at least one reference has been replaced by a token;
- means for receiving at said information server a second request from the client for an item of information, the second request including a token indicative of the item of information requested;
- means for comparing the token with the tokens which have been stored in said storage means during said session to find a matching stored token;
- and
- means for returning to the client, in dependence upon finding a matching stored token, the respective corresponding item of information.
An information server for providing information in response to requests, comprising:
- a session manager for allocating a session to a client requesting information;
- and
- a session store, wherein
- if the client-requested information includes references to further information, said session manager, before providing the client-requested information to the client, replaces at least some of the references with tokens and stores data in said session store that relates each token to the reference it replaced, and
- if a request from the client for information includes one of the tokens, said session manager compares the token in the request with the tokens in the session store to find a matching stored token and returns information corresponding to the matching stored token to the client.
A method for providing information in response to requests comprising:
- allocating a session to a client requesting information from an information server;
- before providing to the client client-requested information containing references to further information, replacing at least some of the references with tokens and storing in a session store data that relates each token to the reference it replaced;
- and
- if a request from the client for information includes one of the tokens, comparing the token in the request with the tokens in the session store to find a matching stored token and returning information corresponding to the matching stored token to the client.
A method of controlling an information server, comprising the steps of:
- establishing a session between a client and the information server;
- receiving a first request from the client for an item of information, said item of information including a plurality of references to a plurality of further items of information;
- modifying the item of information by replacing at least one reference by a token;
- storing data that relates each token to its corresponding reference in a store for the duration of said session;
- and
- returning to the client the modified item of information in which at least one reference has been replaced by a token;
- receiving a second request from the client for an item of information, the second request including a token indicative of the item of information requested;
- comparing the token with the tokens which have been stored in said store during said session to find a matching stored token;
- and
- returning to the client, in dependence upon finding a matching stored token, the respective corresponding item of information.
Dependencies are inferred from the claim text.