WO2000048110B1

WO2000048110B1 - Personalized access to web sites

Info

Publication number: WO2000048110B1
Application number: PCT/US2000/003790
Authority: WO
Inventors: Jean-Noel Lebrun; Francois Kruta
Original assignee: Ezlogin com Inc
Current assignee: Ezlogin com Inc
Priority date: 1999-02-11
Filing date: 2000-02-11
Publication date: 2002-01-24
Anticipated expiration: 2001-08-11
Also published as: EP1188134A2; WO2000048110A3; CA2364297A1; KR20020004948A; AU3699600A; JP2003520361A; WO2000048110A2

Abstract

The invention provides a method and system for access to personalized web sites. A user can maintain a single set of authentication information for access to multiple restricted web sites. The invention provides an improved technique for group access to web sites. Multiple related users can simultaneously access a sequence of web sites, such that each of the related users has substantially the same content presented at the same times. The invention provides a technique for summarization and aggregation of presonalized information. A personal data server obtains information for users, on their behalf, from one or more web sites having that information and presents that information to those users in a convenient format. The invention provides a method and system for automated and intelligent structured data input.

Claims

AMENDED CLAIMS

[received by the International Bureau on 4 September 2001 (04.09.01); original claims 1-96 replaced by amended claims 1-95 (15 pages)]

1. A method for access to a plurality of network services, said method including steps of recording a set of authentication information received from a web client, wherein said authentication information concerns a user; receiving a request to access at least one of said plurality of network services, wherein said request includes an identifier for a requested page; determining whether to (1) send said set of authentication information to said web client or (2) route said set of authentication information to said at least one network service without routing said information through said web client; and sending said set of authentication to said at least one of said plurality of network service in response to said step of determining, wherein said user can maintain a single set of authentication information for said plurality of network services.

4. A method as in claim 1 , said method including steps of providing a plurality of profiles of information for one said user, wherein said profiles include personalization information; selecting one said profile; and sending said personalization information to at least one of said network servers in response to said steps for selecting one said profile.

5. A method as in claim 1 , said method including steps of providing a corresponding plurality of identifiers for said network services, in response to a request; receiving a selection of one said identifier; and making a request to access an associated network service in response to said selection.

6. A method as in claim 5, wherein said plurality of identifiers includes a page for presentation to said user, and said step of selecting includes picking one or more of said plurality of identifiers from said page.

92

7. A method as in claim 1 , wherein said database is maintained at a server; said request is sent from a web client to said server, in response to a request by a user at said web client; wherein said server maintains said set of authentication information on behalf of said user.

8. A method as in claim 7, wherein said server is logically remote from said web client.

9. A method as in claim 7, wherein said web client includes a web server device acting on behalf of said user.

10. A method as in claim 1 , including steps of receiving a request to newly access at least one network service not in said plurality; and sending, in response to said request to newly access, a set of personalization information to said at least one network service not in said plurality; whereby said user is registered at said at least one of network service not in said plurality without said user having to directly enter said set of personalization information.

1 1. A method as in claim 1 , including steps of receiving a request to again access at least one network service in said plurality; and sending, in response to said request to again access, said set of authentication information to said at least one network service in said plurality; wherein access for said at least one network service is granted to said user without said user having to directly access said set of authentication information.

12. A method for enforcing restricted access to a network service, said method including steps of identifying a network service having access thereto restricted to a first set of users;

93 identifying, for one of said first set of users, a second set of users to have access to said network service; identifying a set of restrictions on said access to said one second user, said set of restrictions including restrictions on information or services at the web sites or information pertaining to said one first user; restricting said access to said one second user in response to said set of restrictions; receiving, from one of said second users, a request for access to said network service; and providing access to said network service to said one second user in response to said steps for identifying a second set, and in response to access permitted to said one first user identified therewith.

14. A method as in claim 12, including steps of altering said set of restrictions in response to a selection by said one first user.

15. A method as in claim 12, including steps of providing access to said one second user in response to access permitted by any one of a plurality of said first users.

16. A method as in claim 12, including steps of providing access to said one second user in response to whether said one second user has access permitted by said one first user, or in response to whether said one second user is a member of said set of first users.

17. A method as in claim 12, wherein said network service includes at least one web site.

18. A method as in claim 12, wherein said set of restrictions include at least one time parameter.

19. A method as in claim 12, wherein said set of restrictions includes at least one type of access permitted to said one first user and denied to said one second user.

94

20. Apparatus for access to a plurality of network services, said apparatus including a personalization server disposed for receiving a first message requesting access to one of said network services, wherein said personalization server is disposed for (1) routing said set of authentication information to a web client or (2) routing said set of authentication information directly to said at least one network service without routing said information through said web client; a database coupled to said personalization server, wherein said database includes information regarding a plurality of network services, said information regarding a set of authentication information associated therewith, wherein a user can maintain a single set of authentication information for said plurality of network services; and a means for determining where to route said set of information coupled to said personalization server.

23. Apparatus as in claim 20, including a plurality of profiles of information for one said user, wherein said plurality of profiles are accessible by said personalization server; wherein said personalization server is disposed for receiving a selection message selecting one said profile, and for selecting said set of authentication information or a set of personalization information in response to said selection message.

24. Apparatus as in claim 20, including a page for presentation to said user including a corresponding plurality of identifiers for said network services; wherein said personalization server is disposed for making a request to access an associated network service in response to receiving a selection of one said identifier.

25. Apparatus for enforcing restricted access to a network service, said apparatus including a database associating a set of network services with a first set of users having access to said network services, said database associating one of said first set of users with a second set of users to have access to said network service; and

95 a personalization server disposed for providing access to one said network service in response to one said second user and in response to said database, wherein said network service includes at least one web site and said set of restrictions include at least one time parameter.

26. Apparatus as in claim 25, wherein said database includes a set of restrictions on said access to said one second user.

29. Apparatus as in claim 26, wherein said set of restrictions includes at least one type of access permitted to said one first user and denied to said one second user.

30. A method of doing business, including steps of obtaining a single registration for a set of primary users, wherein said single registration is applicable to a group of related services provided by one or more processors coupled to a network; enforcing a set of restrictions to said single registration for a set of secondary users associated with said primary users, wherein said set of restrictions includes restrictions on information or services at the web sites or information pertaining to said primary users; and providing said restricted access to said secondary users in response to registrations by said secondary users for said restricted access to said services.

33. A method including steps of designating a group of web clients for group access to web sites; designating one or more web controllers, wherein said selection of said web page is received from said controlling web clients; receiving a selection of a restricted-access web page from said controlling web client, said restricted-access web page including access control disallowing access to at least one web client in said group; obtaining access to said restricted-access web page on behalf of said controlling web client; and retrieving and presenting said restricted-access web page to said web clients in said group.

96

34. A method as in claims 33, wherein said step of retrieving and presenting includes sending at least part of said web page directly from a web server to at least one web client in said group.

35. A method as in claim 33, including steps of receiving a selection of a web page for presentation to said controlling web client without presentation to all said web clients; and retrieving and presenting said web page to said one or more controlling web client.

37. A method as in claim 33, including steps of sending information relating to web sites between at least two of said web clients in said group, wherein said information includes web page bookmarks or web site registrations.

38. A method as in claim 33, wherein said group of web clients includes a plurality of differing types of web clients; said steps for receiving and presenting include receiving a plurality of variants of said web page, and steps for presenting one of said variants to each said web client.

39. Apparatus including a set of web clients; a group-surfing server disposed for receiving a selection of a web page at a web server, and for retrieving and presenting said web page to said web clients, wherein said selection of a web page includes a restricted-access web page, said restricted-access web page requiring access control information disallowing access to at least one web client in said group; an access message from said group-surfing server to said web site including said access control information; a distribution message from said group-surfing server to said web clients in said group including at least some information from said restricted-access web page; an access message from said group-surfing server to said web site including said access control information; and

97 a distribution message from said group-surfing server to said web clients in said group including at least some information from said restricted-access web page.

40. Apparatus as in claim 39, wherein said set of web clients includes at least one controlling web client and at least one non-controlling web client; said group-surfing server is responsive only to said selection of a web page from one or more controlling web clients.

41. Apparatus as in claim 39, wherein said selection message indicates a restricted-access web page, said restricted- access web page requiring access control information disallowing access to at least one web client in said group; an access message from said group-surfing server to said web site including said access control information; and a distribution message from said group-surfing server to said web clients in said group including at least some information from said restricted-access web page.

42. Apparatus as in claim 39, wherein each of said web clients includes a program fragment disposed for recognizing a selection of a web link at said web server, and for sending a selection message to said group-surfing server in response thereto; said group-surfing server retrieves at least part of said web page from said web server in response to said selection message.

43. Apparatus as in claim 42, wherein said program fragment is disposed for recognizing a post command from said web client, and for sending a message to said group-surfing server in response thereto.

44. Apparatus as in claim 42, wherein said program fragment is disposed for recognizing a post command from said web client, and for sending a posting message to said group-surfing server in response thereto; and said group-surfing server is disposed for receiving a plurality of said posting messages from a corresponding plurality of said web clients, and for sending a post command to said web server in response thereto.

45. An apparatus as in claim 39, including a data structure including identity or session information relating to a group-surfing server acting on behalf of said plurality of web sites.

46. A data structure as in claim 45, including a plurality of cookies received from web sites.

47. A data structure as in claim 45, including access control information not available to at least one of said plurality of web sites.

48. A method of doing business, including steps of designating a group of web clients for group access to web sites, said group of web clients being charged for said group access; designating at least one controlling web client, wherein said selection of said web page is received from said controlling web client; receiving a selection of a restricted-access web page from said at least one controlling web client, said restricted-access web page including access control disallowing access to at least one web client in said group; obtaining access to said restricted-access web page on behalf of said controlling web client; retrieving and presenting said restricted-access web page to said web clients in said group; and charging said group of web clients for said access to said restricted-access web page.

50. A method as in claim 48, including steps of sending information relating to web sites between at least two of said web clients in said group, wherein said information includes web page bookmarks or web site registrations; and

99 charging said group of web clients for access to information related to web sites.

51. A method including steps of receiving a request for personalized information from an individual user, wherein said request includes a digital identifier; obtaining personalized information from at least one web site for which access is restricted on behalf of said individual user, wherein said personalized information includes said personalized information pertaining to said individual user; generating dynamically a web page for presentation of an aggregate of said personalized information; and presenting said web page to said individual user in a format other than available at said web sites.

52. A method as in claim 51 , wherein said format includes at least one of: aggregation or summarization of said personalized information, modification of said personalized information without direct interaction between said individual user and any of said web sites.

53. A method as in claim 51 , including steps of maintaining access information for said individual user for at least one of said web sites, said access information including sufficient information to perform said steps of obtaining; and wherein said steps of presenting include steps of dynamically generating a presentation including (1) at least some of said personalized information and (2) interaction information for said individual user to communicate directly with at least one said web site.

54. A method as in claim 53, wherein said interaction information includes at least one hyperlink to a web object at said web site.

55. A method as in claim 53, wherein said interaction information includes at least one hyperlink to a web object at said web site, said web object being an object requiring authentication or identification information for access from said web site, and said authentication or identification information being included in conjunction with said hyperlink.

100

56. A method as in claim 51 , wherein said steps of presenting include steps of dynamically generating a presentation including information responsive to an aggregate of said personalized information from said web sites.

57. A method as in claim 56, wherein said aggregate includes at least one of: a sum of account cash balances, a sum of account securities values.

58. A method as in claim 51 , including steps of maintaining access information for said individual user for at least one of said web sites, said access information including sufficient information to perform said steps of obtaining; and presenting said personalized information to an entity other than said individual in a format other than available at said web sites.

59. A method as in claim 58, wherein said steps of obtaining personalized information include steps of presenting said access information to said web site without delivering said access information to said entity.

60. A method as in claim 58, including steps of obtaining authorization from said individual user to present said personalized information to said entity.

61. A method as in claim 60, wherein said authorization is limited to at least one of: aggregations of said personalized information, selected portions of said personalized information.

62. A method as in claim 58, including steps of performing said steps of maintaining and obtaining for a plurality of said individual users; aggregating a set of results of said steps of performing said steps of obtaining for said plurality; and presenting an aggregate result of said steps of aggregating to said entity.

.01

63. A method as in claim 62, wherein said aggregate result includes at least one of: account cash balance data, account securities values data, census data, polling data, market survey data.

64. A method of doing business, including steps of receiving a request for personalized information from an individual user, wherein said request includes a digital identifier; obtaining personalized information from at least one web site for which access is restricted on behalf of said individual user, wherein said personalized information includes said personalized information pertaining to said individual user; generating dynamically a web page for presentation of an aggregate of said personalized information; presenting said web page to said individual user in a format other than available at said web sites and in such a way that said individual user is not required to make direct contact with said at least one web site; and charging a fee for said step of presenting.

65. A method as in claim 64, wherein said format includes wherein said format includes at least one of: aggregation or summarization of said personalized information, modification of said personalized information without direct interaction between said individual user and any of said web sites.

66. A method as in claim 64, including steps of maintaining access information for said individual user for at least one of said web sites, said access information including sufficient information to perform said steps of obtaining; and presenting said personalized information to an entity other than said individual in a transaction not requiring direct contact with those web sites.

67. A method as in claim 66, wherein said steps of obtaining personalized information include steps of presenting said access information to said web site without delivering said access information to said entity.

102

68. A method as in claim 66, including steps of obtaining authorization from said individual user to present said personalized information to said entity, wherein said authorization is limited to at least one of: aggregations of said personalized information, selected portions of said personalized information.

69. A method as in claim 66, including steps of performing said steps of maintaining and obtaining for a plurality of said individual users; aggregating a set of results of said steps of performing said steps of obtaining for said plurality; presenting an aggregate result of said steps of aggregating to said entity.

70. A method as in claim 69, wherein said aggregate result includes at least one of: account cash balance data, account securities values data, census data, polling data, market survey data.

71. Apparatus including a personal data server including a set of personalized information for an individual user, said personalized information having been obtained from a set of web sites having said personalized information; and a data structure including said personalized information in a format other than available at said web sites, wherein said data structure includes at least one of: an aggregation or summarization of said personalized information, a hyperlink to a device for modification of said personalized information without direct interaction between said individual user and any of said web sites.

73. Apparatus as in claim 71, including a data structure for said individual user, said data structure including access information for at least one of said web sites, said access information including sufficient information to perform said steps of obtaining; and interaction information for said individual user to communicate directly with at least one said web site.

103

74. Apparatus as in claim 73, wherein said interaction information includes at least one hyperlink to a web object at said web site.

75. Apparatus as in claim 73, wherein said interaction information includes at least one hyperlink to a web object at said web site, said web object being an object requiring authentication or identification information for access from said web site, and said authentication or identification information being included in conjunction with said hyperlink.

76. Apparatus as in claim 71, including a data structure for said individual user, said data structure including access information for said individual user for at least one of said web sites, said access information including sufficient information to perform said steps of obtaining; and a data structure including said personalized information in a format other than available at said web sites.

77. Apparatus as in claim 76, wherein said personal data server is disposed for presenting said data structure to said entity without delivering said access information.

78. Apparatus as in claim 76, including authorization information for an entity other than said individual.

79. Apparatus as in claim 78, wherein said authorization information describes a limitation to at least one of: aggregations of said personalized information, selected portions of said personalized information.

80. Apparatus as in claim 76, including a data structure including an aggregate of said personalized information for a plurality of said individual users, for presentation to said entity.

81. Apparatus as in claim 80, wherein said aggregate includes at least one of: account cash balance data, account securities values data, census data, polling data, market survey data.

104

82. A method, including steps of accessing a web site from a web client device, wherein said web site includes a web page for confirming an e-commerce transaction. executing a software module to identify a form at said web site for structured data input; recognizing a type of said form for structured data input; and executing said software module to enter at least some data for said form without substantial user intervention in response to a result of said step of recognizing.

83. A method as in claim 82, including steps of automatic registration of a user at a new web site, automatic login using the login page of a web site, or automatic form filling for checking out purchases from multiple web sites.

84. A method as in claim 82, wherein said software module includes at least a portion executed at a server device other than said web site.

85. A method as in claim 82, wherein said software module includes at least a portion executed at said web client device.

86. A method as in claim 82, wherein said web site includes a personalized web page only visible to a selected user after a login process at said web site.

87. A method as in claim 82, including steps of executing said software module to enter at least some said data at a plurality of distinct web sites.

89. A method as in claim 87, wherein said distinct web sites each include a web page for new-user registration.

90. A method as in claim 82, wherein said software module attempts to perform at least one of: associating at least one set of descriptive text for said form with a logical field value for said form;

105 associating at least one screen location for said form with a logical field value for said form; associating at least one logical field value with a set of multiple data values or partial data values for said form.

91. A method as in claim 90, wherein said data values include a name, address, telephone number, credit card information, demographic information, preferred login name or password for said user.

92. A method as in claim 90, wherein said data values include pre-recorded personal information about the user.

93. A method as in claim 82, wherein said steps of accessing include recognizing a type of said form for structured data input; performing said step of executing said software module to enter at least some data in response to a result of said step of recognizing.

94. A method as in claim 93, wherein said steps of recognizing include determining a difference between a web page for new-user registration, a web page for user login, and a web page for confirming an e-commerce transaction.

95. In apparatus for entering data in a form without substantial user intervention, a data structure including an identifier of a web page; an association of said web page with a script or program fragment to be executed for said web page; and a means for completing or confirming an e-commerce transaction at a web site associated with said web page, wherein execution of said script or program fragment sends information to a server for entering data into said form.

106 STATEMENT UNDER ARTICLE 19

Claim 1 is an independent method claim. As amended, it includes the step of "determining whether to (1) send said set of authentication information to said web client or (2) route said set of authentication information to said at least one network service without routing said information to said web client". Each of the four cited references disclosed a system wherein the authentication information was stored relatively local to the user. In the instant invention, this information is stored at server or at the web client. The limitations of claims 2 and 3 (now canceled) are included in amended claim 1.

Claim 12 is an independent method claim. As amended, it includes (1) further limitations as to the set of restrictions and (2) the limitations of claim 13 (now canceled).

Claim 20 is an independent apparatus claim. As amended, it includes the limitations of claims 21 and 22 (now canceled).

Claim 25 is an independent apparatus claim. As amended, it includes the limitations of claims 27 and 28. These limitations further describe the network service and the set of restrictions.

Claim 33 is directed to a method of providing group access to a number of web clients at the same time (group web surfing). As amended, claim 33 describes a technique in which group surfing can be controlled by more than one controlling web client. By contrast, the cited art provides for control by a single web client only.

Claim 39 is an independent apparatus claim directed toward the apparatus for web surfing. As amended, claim 39 includes most of the limitations of claim 41 with regard to obtaining access to restricted access web pages and presenting such pages to a group. Claim 48, as amended, also includes similar limitations.

Claim 45 was an independent claim describing a data structure. As amended, this claim is now depends from claim 39.

10 7 Claim 51 is an independent method claim directed toward generating and presenting a web page that includes personalized information. As amended, claim 51 now includes the further limitations of (1) obtaining the personalized information from at least one web site, and generating dynamically a web page for presentation. Unlike the cited art, which involves "cutting and pasting" of other web sites and presenting it to a user. Claim 51 involves obtaining personalized information and dynamically generating a web page that includes that personalized information. Claim 64, as amended, includes similar limitations.

Claim 71 is an independent apparatus claim directed toward a personal data server and a data structure. As amended, claim 71 includes new limitations that further define the data structure.

Claim 82 is an independent method claim directed toward automated form fill-in. As amended, claim 82 includes the limitations of claim 88 (now canceled), as well as the additional step of "recognizing a type of said form for structured data input".

Claim 95 is an independent apparatus claim that has been amended to include the limitations of dependent claim 96 (now canceled).

108