WO2006028419A1 - Procede et systeme de controle de l'acces de donnees a partir d'un site web par le web ou par acces wap - Google Patents

Procede et systeme de controle de l'acces de donnees a partir d'un site web par le web ou par acces wap Download PDF

Info

Publication number
WO2006028419A1
WO2006028419A1 PCT/SG2005/000307 SG2005000307W WO2006028419A1 WO 2006028419 A1 WO2006028419 A1 WO 2006028419A1 SG 2005000307 W SG2005000307 W SG 2005000307W WO 2006028419 A1 WO2006028419 A1 WO 2006028419A1
Authority
WO
WIPO (PCT)
Prior art keywords
access
subscriber
access control
viewer
website
Prior art date
Application number
PCT/SG2005/000307
Other languages
English (en)
Inventor
Mei Kwang Kevin Chia
Original Assignee
Mei Kwang Kevin Chia
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Mei Kwang Kevin Chia filed Critical Mei Kwang Kevin Chia
Publication of WO2006028419A1 publication Critical patent/WO2006028419A1/fr
Priority to GB0704336A priority Critical patent/GB2432442A/en

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/90Details of database functions independent of the retrieved data types
    • G06F16/95Retrieval from the web
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/10Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/102Entity profiles
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/90Details of database functions independent of the retrieved data types
    • G06F16/95Retrieval from the web
    • G06F16/957Browsing optimisation, e.g. caching or content distillation
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/50Network services
    • H04L67/56Provisioning of proxy services
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/50Network services
    • H04L67/56Provisioning of proxy services
    • H04L67/565Conversion or adaptation of application format or content

Definitions

  • the covered invention relates to a computer method and system for controlling access to personal WAP and Web (HTTP) pages over the internet.
  • HTTP personal WAP and Web
  • the Internet or "the Net” is a worldwide system of computer networks - a network of networks in which users at any one computer may, if they have the rights, view or get information from any other computer.
  • TCP/IP Transmission Control Protocol/Internet Protocol
  • WWW service enables transfer of graphical web pages to remote client machines from server identifiable via a Uniform Resource Locator (URL).
  • URL Uniform Resource Locator
  • client machines will provide a specific URL request in a browser and be able to view or get information.
  • the browser may be a client application program that provides an interface to view and interact with the millions of pages of information on the WWW.
  • HTTP Hypertext Transfer Protocol
  • HTTP runs on top of the TCP/IP suite of protocols and comprise of a set of rules for transferring files such as text, graphic images, sound, video and other multimedia files on the WWW.
  • HTTP concepts brought forward ideas that files may contain references to other files.
  • users may practically navigate through vast amounts of interlinked pages.
  • Web pages are typically defined using Hypertext Markup Language (“HTML”) which provides standard set of tags that define how the browser shall display the content.
  • HTML Hypertext Markup Language
  • Wireless and mobility have been keywords for recent technological innovations.
  • the popularity of wireless internet This gives users the ability to leverage on the ubiquity of mobile devices to access information, which is what fixed internet is already providing.
  • mobile or wireless service providers moved on to tap on the vast amount of information of the WWW via Wireless Access Protocol ("WAP").
  • WAP Wireless Access Protocol
  • WAP is a specification for a set of communication protocols to standardize the way that wireless devices such as cellular phones, PDA or other WAP- enabled devices use internet services, WWW being one of the most popular service.
  • the standardization is required as different manufacturer of devices used different technologies and potentially caused interoperability issues.
  • WAP is also intended to overcome the HTML definition language which was originally meant for fixed internet. HTML is written in such a way that require fast connections, fast processors, big screens, large memories, efficient input device and even proper audio output. These characteristics are a big challenge for mobile devices which have substantially lower specifications and lower bandwidth that hinders the operational use of HTML.
  • WAP defines a completely new markup language called Wireless Markup Language (WML) 1 with scripting language called WMLScript and bitmap format called Wireless Bitmap ("WBMP").
  • WML provides a simpler but much more strictly defined structure than HTML.
  • WAP also defines new protocol stack which has thin request and reduced protocol overhead. Due to many enhancements introduced here and for easier implementation, a WAP Gateway is established between the phones or mobile devices and servers providing the content. This concept of use of WAP gateway is shown in Figure 1. On top of protocol translations, WAP gateway will also compresses the WML into a more compact form; saving over-the-air bandwidth reduced mobile device processing requirements. Having the technologies in place, there are many mobile applications that has brought fixed internet environment to the agile mobile market, such as m-commerce (m stands for mobile), email, Instant Messaging, moblog (for mobile blog), friendster and so on.
  • m-commerce stands for mobile
  • email Instant Messaging
  • moblog for mobile blog
  • the present invention provides a computer method and system for controlling information access from a personal or enterprise website, via web or wap access.
  • the client system or a viewer might have an identifier identifying him as subscriber. Alternatively, the client may further be categorized as a default public group.
  • a server of the system When the subscriber requests for a certain page in the website, a server of the system will map the Access ID of the viewer or subscriber, and then determine an Access Control Group the subscriber belongs to. Base on the Access Control Group and origin of access, the webpage information or content will then be rendered and displayed accordingly.
  • the present embodiment provides, a system for controlling information access from an owner's website via Web or WAP access, the system comprising: a client portion having at least one means for a viewer to access the owner's website; a network means comprising means for providing internet connectivity to the owner's website; a server for hosting the owner's website, the server comprising: an Access ID database for storing Access IDs for subscribers; a Storage Database for storing content and data for websites; an Access Control Information Database for storing Access Control Groups assigned to the subscribers and Access Control Groups associated with the content and data; a Layout Template Database for storing Layout templates; and a Rendering Engine Server for rendering Web or WAP pages; wherein the subscriber or the viewer is allowed controlled access to the content and data on the owner's website depending on the Access Control Group assigned to the subscriber or the viewer.
  • the present embodiment provides, a method for controlling information access from an owner's website via Web or WAP access by a viewer or a subscriber, said method comprising the steps: checking the viewer for an Access ID; retrieving said Access ID is available; determining whether said viewer is a subscriber; mapping said Access ID to subscriber information; selecting an Access Control Group according to said subscriber information; determining whether said Access Control Group is inclusive; rendering of content of said owner's website according to a layout template assigned to said content; displaying rendered pages to said viewer or said subscriber; and allowing said viewer or said subscriber to view rendered pages and perform relevant actions in said rendered pages; wherein said relevant action are controlled by said Access Control Group of said viewer or said subscriber.
  • Figure 1 illustrates a typical network flow of WAP for mobile internet
  • Figure 2 illustrates an overview of the concept of use of the present invention
  • Figure 3 is a system diagram illustrating an embodiment of the present invention.
  • Figure 4 is a flow chart illustrating a method in accordance with an embodiment of the present invention.
  • the present invention proposes a system and method for controlling information access from a website via both fixed internet and mobile internet access.
  • a website owner can group viewers (persons who access his website either from web or wap) or subscribers into different categories and selectively display information to the viewer or subscriber based on the category of the viewer or subscriber.
  • Such a category is referred to as the Access Control Group.
  • OPS Open Profiling Standard
  • P3P Platform for Privacy Preference
  • every piece of content and data that may be input into a website for display regardless of format (text, rich text, image, audio and other multimedia), the website owner may further explicitly specify a category or an Access Control Group in which the content and data is associated with.
  • Access Control Groups There will be a set of predefined Access Control Groups for owners to categorize their pages for their subscribers to have access to. On top of default Access Control Groups, owners may further define additional Access Control Groups with their own parameters. Access Control Groups may be inclusive or exclusive. Exclusive Access Control Groups refer to categories that do not include other groups while inclusive, has the opposite effect. An Inclusive type group means that it is a group that contains many other sub groups while exclusive type is merely a group by itself.
  • Access Control List may of several versions, each having different effective dates. This thus allows the owner to have one Access Control List active at any one time, while other versions may be prepared based on new information and subscription.
  • the retrieved information is rendered into viewable pages accordingly to the format of access, either web or wap.
  • the page result shall be in form of HTML pages while for wap, it will be in WML pages.
  • the flow of activities may start from the owner inviting a viewer to be a subscriber or friend in order to have access to the website's information.
  • the invitation may be in form of a friendship linkage, newsletter invitation and so on.
  • Section 103 and 104 a response from the viewer explicitly acknowledging becoming a subscriber to the information provided by the owner is received.
  • the response can be in form of email, Short Message Service (SMS) or web page link in the browser.
  • SMS Short Message Service
  • this is an opt-in action to gain explicit agreement from the subscriber.
  • the owner may assign the subscriber to one or more of several different Access Control Groups. Each of the Access Control Groups allow different levels of access to content and data on the consumer/merchant information website.
  • the subscriber after acknowledging explicit agreement to be a subscriber may use a browser comprising either fixed internet or mobile internet to surf the consumer/merchant information website.
  • a browser comprising either fixed internet or mobile internet to surf the consumer/merchant information website.
  • the subscriber may be identified by an identifier such as an Access ID.
  • the Access ID may be the Mobile Station International ISDN Number ("MSISDN") which is the mobile phone number used to access the wap page.
  • MSISDN Mobile Station International ISDN Number
  • the Access ID may be as simple as a Usemame which needs to be accompanied by a password login process. In this scenario, the subscriber will have to be registered with the same service provider or the web community as well.
  • the Access Control Group of the subscriber is checked by cross referencing the subscriber's identifier or Access ID.
  • the pages requested shall be rendered according to the Access Control Group of the subscriber, and whether by the request was initiated via WAP or web access. This will ensure similar display between both types of access, as in section 107.
  • access control is then given to the subscriber based on the Access Control Group which also governs the type of action which may be performed by the subscriber, as in section 108.
  • the system in accordance with the present embodiment comprises at least a client portion, at least a Network portion and at least a Server 235.
  • the Client portion may comprise of at least one WAP- enabled mobile phone 220 or at least one HTTP browser enabled device 221 such as a Laptop computer having a mobile internet connection.
  • the Access ID 222 of the subscriber using the client portion to access the websites would be required.
  • WAP-enabled mobile phones 220 may connect to the internet via WAP Gateway 224 using General Packet Radio Services (“GPRS”) or High-Speed Circuit-Switch Data (“HSCSD”) connections. While other HTTP browser enabled devices 221 may also use narrow/broadband http HTTP type of connection.
  • GPRS General Packet Radio Services
  • HCSD High-Speed Circuit-Switch Data
  • the server portion 235 comprises a firewall 226 which is used to control and prevent internal system resources from unauthorized access from outside the server 235.
  • a Consumer Database 230 and a Merchant Database 231 is used for storing content belonging to owners of websites depending on whether they are Personal websites or Enterprise websites.
  • the content stored may be in text, rich text, images, audio, video or any other type of multimedia information.
  • the server 235 further comprises a rendering engine server 227 which is responsible for rendering or processing content in the Consumer database 230 and the merchant database 231 into a viewable pages in either web or wap pages 229.
  • the rendering process in the rendering engine server 227 takes relevant filtered content and merges it with layout templates stored in a Layout Template Database 234 that may have been assigned for certain relevant pages.
  • All subscribers' information, including their Access IDs 222 are stored in subscriber/Access ID database 232.
  • the Access Control Groups and Access Control Lists are stored in an Access Control Information database 233.
  • Access ID 222 is available, the system will retrieve 302 the Access ID 222 from the viewer. Next the step of determining 303 whether the viewer is a registered subscriber. The Access ID 222 retrieved is compared with the Subscriber/Access ID Database 232. Following which, the step of mapping the Access ID 222 to the subscriber is performed.
  • Access ID 222 is not available or not retrievable, then the viewer by default will be classified 305 as a subscriber belonging to "Public" Access Control Group.
  • the relevant Access Control Group for shall be selected 306 according to information stored in the Consumer Database 230 or Merchant Database 231.
  • the system performs an internal check 307 to determine whether the Access Control Group is of the inclusive type.
  • An Inclusive type group means that it is a group that contains other groups while exclusive type is merely a group by itself. Hence for an inclusive group, all other relevant Access Control Groups shall be accumulated into the Access Control List, as depicted in step 308.
  • the rendering engine server 227 will perform a rendering 309 of the content by using the Layout Template 234 assigned to the page.
  • the rendering will be also be based on format of layout, either HTML page(s) for web access or WML page(s) for WAP access.
  • the intention of having the rendering engine server 227 is to ensure similarity of displays between different formats, in devices used by subscribers.
  • the rendered pages are sent to the subscriber's device for display.
  • the subscriber may then view the content and perform relevant actions allowed by the system base on the Access Control Group in the Access Control List.
  • the present invention thus provides a computer method and system for controlling information access from a web or WAP site by a client system or the subscriber.
  • the owner of the web or WAP site will determine an Access Control List that governs information access activities based on the subscriber's Access Control Group.

Abstract

La présente invention concerne un procédé et un système informatiques permettant de contrôler l'accès de données des informations d'un site web d'une personne ou d'une entreprise, par le web ou par accès wap. Le système client ou un utilisateur peut avoir un identificateur qui l'identifie comme abonné, ou en variante le client peut être groupé comme groupe public par défaut. Lorsqu'un abonné ou un client demande une certaine page du site web, le serveur peut mettre en correspondance l'identificateur ou le numéro ID d'accès de l'utilisateur ou de l'abonné puis déterminer le Groupe de Contrôle d'Accès auquel appartient l'abonné. Sur la base de ce groupe de contrôle d'accès et de l'origine d'accès (par exemple le web ou Wap), l'information ou le contenu du site web peut être restituée et affichée en conséquence.
PCT/SG2005/000307 2004-09-07 2005-09-07 Procede et systeme de controle de l'acces de donnees a partir d'un site web par le web ou par acces wap WO2006028419A1 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
GB0704336A GB2432442A (en) 2004-09-07 2007-03-07 Method and system for controlling information access from a website via web or wap access

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US60729104P 2004-09-07 2004-09-07
US60/607,291 2004-09-07

Publications (1)

Publication Number Publication Date
WO2006028419A1 true WO2006028419A1 (fr) 2006-03-16

Family

ID=36036637

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/SG2005/000307 WO2006028419A1 (fr) 2004-09-07 2005-09-07 Procede et systeme de controle de l'acces de donnees a partir d'un site web par le web ou par acces wap

Country Status (3)

Country Link
CN (1) CN101057238A (fr)
GB (1) GB2432442A (fr)
WO (1) WO2006028419A1 (fr)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN100440806C (zh) * 2006-07-12 2008-12-03 中国移动通信集团公司 网络日志信息处理设备及处理方法
US20130013722A1 (en) * 2010-03-26 2013-01-10 Zte Corporation Method for a mobile email client to access to a server, and mobile terminal thereof
CN103379381A (zh) * 2012-04-17 2013-10-30 中兴通讯股份有限公司 基于wap网关的视频播放方法、wap网关及系统

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101551891B (zh) * 2009-04-30 2012-01-18 用友软件股份有限公司 插件订购方法及其装置
CN101635895B (zh) * 2009-07-31 2014-03-12 青岛海信移动通信技术股份有限公司 一种网站内容订阅系统、方法、移动通信终端和服务器

Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5717923A (en) * 1994-11-03 1998-02-10 Intel Corporation Method and apparatus for dynamically customizing electronic information to individual end users
US5918014A (en) * 1995-12-27 1999-06-29 Athenium, L.L.C. Automated collaborative filtering in world wide web advertising
US6466975B1 (en) * 1999-08-23 2002-10-15 Digital Connexxions Corp. Systems and methods for virtual population mutual relationship management using electronic computer driven networks
US20030200467A1 (en) * 2002-04-23 2003-10-23 Choy David Mun-Hien System and method for incremental refresh of a compiled access control table in a content management system
US6647396B2 (en) * 2000-12-28 2003-11-11 Trilogy Development Group, Inc. Classification based content management system
US20040017395A1 (en) * 2002-04-16 2004-01-29 Cook Thomas A. System and method for configuring and managing enterprise applications
US20040225652A1 (en) * 2003-05-07 2004-11-11 Microsoft Corporation Connected templates in connection with a content management server system or the like
US20040254934A1 (en) * 2003-06-11 2004-12-16 International Business Machines Corporation High run-time performance method and system for setting ACL rule for content management security

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5717923A (en) * 1994-11-03 1998-02-10 Intel Corporation Method and apparatus for dynamically customizing electronic information to individual end users
US5918014A (en) * 1995-12-27 1999-06-29 Athenium, L.L.C. Automated collaborative filtering in world wide web advertising
US6466975B1 (en) * 1999-08-23 2002-10-15 Digital Connexxions Corp. Systems and methods for virtual population mutual relationship management using electronic computer driven networks
US6647396B2 (en) * 2000-12-28 2003-11-11 Trilogy Development Group, Inc. Classification based content management system
US20040017395A1 (en) * 2002-04-16 2004-01-29 Cook Thomas A. System and method for configuring and managing enterprise applications
US20030200467A1 (en) * 2002-04-23 2003-10-23 Choy David Mun-Hien System and method for incremental refresh of a compiled access control table in a content management system
US20040225652A1 (en) * 2003-05-07 2004-11-11 Microsoft Corporation Connected templates in connection with a content management server system or the like
US20040254934A1 (en) * 2003-06-11 2004-12-16 International Business Machines Corporation High run-time performance method and system for setting ACL rule for content management security

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
PHPBB GROUP PHPBB USERGUIDE, Retrieved from the Internet <URL:http://www.phppp.com/support/guide> *

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN100440806C (zh) * 2006-07-12 2008-12-03 中国移动通信集团公司 网络日志信息处理设备及处理方法
US20130013722A1 (en) * 2010-03-26 2013-01-10 Zte Corporation Method for a mobile email client to access to a server, and mobile terminal thereof
US8812605B2 (en) * 2010-03-26 2014-08-19 Zte Corporation Method for a mobile email client to access to a server, and mobile terminal thereof
CN103379381A (zh) * 2012-04-17 2013-10-30 中兴通讯股份有限公司 基于wap网关的视频播放方法、wap网关及系统
CN103379381B (zh) * 2012-04-17 2016-12-14 中兴通讯股份有限公司 基于wap网关的视频播放方法、wap网关及系统

Also Published As

Publication number Publication date
CN101057238A (zh) 2007-10-17
GB2432442A (en) 2007-05-23
GB0704336D0 (en) 2007-04-11

Similar Documents

Publication Publication Date Title
US10212052B2 (en) Method for providing contents in a mobile communication system and apparatus thereof
US20070055775A1 (en) Method and system for controlling information access from a website via Web or WAP access
US10574771B2 (en) Methods and systems for rewriting scripts to redirect web requests
US8024400B2 (en) Method and system for transferring content from the web to mobile devices
US7716281B2 (en) Method and system for transferring content from the web to mobile devices
US8914435B2 (en) Ubiquitous notification method and system for providing 3A based push type event
CN101253757B (zh) 通信系统和通信终端
US20050015772A1 (en) Method and system for device specific application optimization via a portal server
US20090030985A1 (en) Family-based online social networking
US20080148383A1 (en) Systems and methods for injecting content
US20100036933A1 (en) Dynamic Portal Creation Based on Personal Usage
WO2006071324A2 (fr) Acces ameliore au masque de bits pour gerer le contenu de blog
CN102130952A (zh) 用于转发移动终端的http请求消息的方法及装置
CN102301678B (zh) 在电信网络中为越顶服务提供身份相关的系统和方法
WO2006028419A1 (fr) Procede et systeme de controle de l&#39;acces de donnees a partir d&#39;un site web par le web ou par acces wap
US20010056447A1 (en) Information providing system and information providing method
US20100042685A1 (en) Personalizing communications layer
CN114996621B (zh) 一种用户自选门户首页的方法、系统和存储介质
US11757956B2 (en) Internet (over the top) worldwide public chat capabilities matched to specified (“URL”) streaming content and non specified (“prenamed and hardcoded”) streaming content rooms
JP2003345827A (ja) ポータルサイト最適化システム並びに関連する装置、方法及びデータ構造
CN102355477B (zh) 一种移动通信网络数据交互的优化方法
GB2503285A (en) Processing browser sessions in a telecommunication network
KR20030033854A (ko) 사용자 개인정보를 관리하는 방법, 서버 컴퓨터 및 그시스템
KR20090073942A (ko) 메시지 전송 버튼(또는 아이콘) 운용 방법
WO2008094024A1 (fr) Procédé d&#39;obtention d&#39;une page téléphonique à fenêtre d&#39;adresse insérée automatiquement via internet sans fil

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BW BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE EG ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KM KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NA NG NI NO NZ OM PG PH PL PT RO RU SC SD SE SG SK SL SM SY TJ TM TN TR TT TZ UA UG US UZ VC VN YU ZA ZM ZW

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): BW GH GM KE LS MW MZ NA SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LT LU LV MC NL PL PT RO SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
ENP Entry into the national phase

Ref document number: 0704336

Country of ref document: GB

Kind code of ref document: A

Free format text: PCT FILING DATE = 20050907

WWE Wipo information: entry into national phase

Ref document number: 0704336.7

Country of ref document: GB

Ref document number: 1802/DELNP/2007

Country of ref document: IN

NENP Non-entry into the national phase

Ref country code: DE

WWE Wipo information: entry into national phase

Ref document number: 200580038201.X

Country of ref document: CN

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 69(1) EPC (EPOFORM 1205A DATED 17.08.07)

122 Ep: pct application non-entry in european phase

Ref document number: 05777748

Country of ref document: EP

Kind code of ref document: A1

ENPC Correction to former announcement of entry into national phase, pct application did not enter into the national phase

Ref country code: GB