Patent ID: 7275264
Filing Date: 2007-09-25
Classification: H04L

Abstract:
1. A process to restrict, to a benefit of authorized users, access to at least one resource belonging to at least one interactive service of at least one cluster of services, each said authorized user having a client machine capable of executing a client program adapted to exchange, using a transmission network, data with a server program associated to each said interactive service, each said interactive service being identified by a service identifier and said interactive service being provided by requests sent by said client program to said server program which processes each of said reguests and returns to said client program a response for each said requests, characterized in that the process includes the following steps: (a) for each said cluster, putting at a disposal of each of said authorized users, a processing and memorizing unit designed to be linked up to said client machine of said authorized user when requesting to access at least one said restricted access resource, said processing and memorizing unit including: (b) enabling each said client program, to read inside said processing and memorizing unit which is linked up to it: (c) sending inside a first response, by said server program for said service, at least once to any said client program which has submitted a first request for said service, a list of clusters identifiers determining to which cluster(s) the service to which said first request was submitted belongs, (d) memorizing by each said client program which receives said list of clusters identifiers in response to said first request for said service having a service identifier, a relation between each said cluster identifier and said service identifier, (e) determining, prior to the sending of a second request to said service having said service identifier, if said client program has memorized at least one relation between any cluster identifier and said service identifier and in the case where: (f) when said server program receives said second request for said service, containing said processing and memorizing unit identifier and which requests to access said restricted access resource, determining by using at least said service identifier and said processing and memorizing unit identifier, if said user who owns said processing and memorizing unit is entitled to access said resource, and if said user: (g) and when said client program receives said encrypted second response: