Host agnostic integration and interoperation system

A computer storage device containing computer executable instructions which when executed by a computer perform a method for communicating between a host and a service application running on a selected external application server to allow a service application running on the external application server to access a document maintained by the host, said method comprising the steps of:

• providing a host with a proof key uniquely identifying an external application server in response to a discovery request from the host;
• receiving at the service application running on the external application server an action, an access token, a metadata address, and a document identifier transmitted by the host to the service application running on the external application server;
• invoking said service application on said external application server in response to receipt of said action;
• sending a metadata request comprising a proof signature generated using said proof key, said access token, and said document identifier to said metadata address;
• receiving a metadata response comprising information related to a document identified by said document identifier, said information selected based on said action;
• sending a document content request comprising said proof signature, said access token, and said document identifier to a document access address;
• and
• receiving a content response comprising the content of the document.

A method for securely communicating between a host and a service application running on an external application server to allow a service application running on the external application server to access a document maintained by the host, said method comprising the steps of:

• initiating a communication with a selected external application server to obtain a proof key uniquely identifying a selected external application server, said proof key adapted for validating a proof signature generated by the selected external application server;
• receiving said proof key from the selected external application server;
• initiating, by the host, a transaction between the host and the external application server by transmitting an action request from the host to the service application running on the selected external application server, the action request being against an entry point associated with the service application;
• providing, by the host, the selected external application server with an access token and a document identifier for use in fulfilling said action request;
• generating said access token prior to said step of providing the selected external application server with said access token and a document identifier;
• receiving a metadata request comprising a proof signature, said access token, and said document identifier, said proof signature designed to be validated using said proof key;
• validating said proof signature using said proof key prior to responding to said metadata request;
• validating said access token prior to responding to said metadata request;
• sending a metadata response comprising selected metadata based on said action request when said proof signature and said access are valid;
• receiving a content request comprising said proof signature, said access token, and said document identifier;
• validating said proof signature prior to responding to said content request;
• validating said access token prior to responding to said content request;
• and
• sending a content response comprising content from the document identified by said document identifier when said proof signature and said access token are valid.