Patent ID: 7873661
Filing Date: 2011-01-18
Classification: H04L,Y10S

Abstract:
1. A method for controlling access from a first network component to at least one second network component, the first network component and the at least one second network component being connected via a network, the method comprising: calculating a unique user identification for a user of the first network component by the first network component; registering an order from the user to the first network component by the first network component, the order being dependent on a link to the at least one second network component via the network; transmitting a request, created by the first network component on the basis of the order, together with the unique user identification via the network to the second network component; detecting the unique user identification, attached to the request, by the second network component; creating, by the second network component, a rights checking instruction on the basis of the detected unique user identification, the rights checking instruction being an instruction for determining, by the first network component, whether the user is authorized to access the second network component; transmitting, by the second network component, the rights checking instruction via the network to the first network component; checking, by the first network component, whether the user is authorized to access the second network component on the basis of the rights checking instruction; transmitting, by the first network component, a result of the check via the network to the second network component; providing, by the second network component, access for the user to the second network component when the transmitted result of the check indicates that the user is authorized to access the second network component; processing the result of the check to generate a request result; transmitting the request result via the network to the first network component; and issuing the request result to the user; wherein the creating of the rights checking instruction by the second network component is separate from the providing of access for the user to the second network component, the registering is carried out via a first application running on the first network component, at least one of the transmitting the request to the second network component via the network and the issuing of the request result to the user are performed via a first application running on the first network component, the detecting the unique user identification attached to the request is carried out by a second application running on the second network component, at least one of the processing the request to generate a request result, and the transmitting the request result via the network to the first network component are performed by a second application running on the second network component, and the transmitting of the rights checking instruction from the second network component to the first network component delegates, to the first network component, physical checking of access rights of the user to the second network component such that the physical checking of the access rights is separate from direct access by the user to the second network component.