USER AUTHENTICATION
Embodiments of the present invention relate to a method and system in which a URI is signed using a private key (PKI), and the signed URI is sent to a second server where the signature is validated using the public key.
1 . Apparatus for delivering content to a user, the apparatus comprising:
a first server configured to
authenticate the user,
receive a request from the user for a web resource,
generate a uniform resource identifier, at least part of which is signed using a private key of a public/private key pair, and
deliver the web resource to the user, the web resource including the uniform resource identifier; and
a second server configured to
receive a request from the user for the content, the request including the uniform resource identifier,
verify using the public key of the public/private key pair that the at least part of the uniform resource identifier was signed using the private key of the public/private key pair, and
deliver the content to the user in response to the request only if the uniform resource identifier is so verified.
2 . Apparatus according to claim 1 , wherein the web resource comprises a web page and the content is delivered to the user as part of the web page.
3 . Apparatus according to claim 1 , wherein the content delivered to the user includes an additional uniform resource identifier and the second server is configured to
receive an additional request from the user for additional content, the additional request including the additional uniform resource identifier, and
deliver the additional content to the user in response to the additional request.
4 . Apparatus according to claim 1 , wherein the content delivered to the user includes an additional uniform resource identifier and the second server is configured to
receive an additional request from the user relating to a service controlled by the second server, the additional request including the additional uniform resource identifier, and
alter control of the service in response to the additional request.
5 . Apparatus according to claim 1 , additionally for delivering the content to another user, the apparatus comprising
one or more additional first servers, each additional first server being associated with a respective public/private key pair and configured to
authenticate the other user,
receive a request from the other user for a web resource,
generate a uniform resource identifier, at least part of which is signed using the private key of a public/private key pair with which the additional first server is associated, and
deliver the web resource to the other user, the web resource including the uniform resource identifier; and
a second server configured to
receive a request from the other user for the content, the request including the uniform resource identifier,
verify using the public key of the public/private key pair with which the additional first server is associated that the at least part of the uniform resource identifier was signed using the private key of the public/private key pair, and
deliver the content to the other user in response to the request only if the uniform resource identifier is so verified.
6 . Apparatus according to claim 1 , wherein the uniform resource identifier includes a unique element and the second server comprises a memory for storing unique elements included in uniform resource identifiers in previously received requests for the content, and the second server is configured to verify the uniform resource identifier only if its unique element has not been previously received.
7 . Apparatus for delivering content to a user, the apparatus comprising:
a plurality of first servers, each first server being associated with a respective public/private key pair and configured to:
authenticate the user, and
sign an item of data using a private key of a public/private key pair with which the first server is associated; and
a second server configured to:
receive the signed item of data,
verify using the public key of the public/private key pair with which the first server is associated that the item of data was signed using the private key of the public/private key pair, and
deliver the content to the user only if the item of data is so verified.
8 . Apparatus according to claim 7 , wherein the content and/or additional content relate to a mobile site building service and/or the service is a/the mobile site building service.
9 . A method of delivering content to a user, the method comprising:
at a first server
authenticating the user,
receiving a request from the user for a web resource,
generating a uniform resource identifier, at least part of which is signed using a private key of a public/private key pair, and
delivering the web resource to the user, the web resource including the uniform resource identifier; and
at a second server
receiving a request from the user for the content, the request including the uniform resource identifier,
verifying using the public key of the public/private key pair that the at least part of the uniform resource identifier was signed using the private key of the public/private key pair, and
delivering the content to the user in response to the request only if the uniform resource identifier is so verified.
10 . A method according to claim 9 , wherein the web resource comprises a web page and the content is delivered to the user as part of the web page.
11 . A method according to claim 9 , wherein the content delivered to the user includes an additional uniform resource identifier and the method comprises, at the second server
receiving an additional request from the user for additional content, the additional request including the additional uniform resource identifier, and
delivering the additional content to the user in response to the additional request.
12 . A method according to claim 9 , wherein the content delivered to the user includes an additional uniform resource identifier and the method comprises, at the second server
receiving an additional request from the user relating to a service controlled by the second server, the additional request including the additional uniform resource identifier, and
altering control the service in response to the additional request.
13 . A method according to claim 9 additionally for delivering the content to another user, comprising
at one or more additional first servers, each being associated with a respective public/private key pair,
authenticating the other user,
receiving a request from the other user for a web resource,
generating a uniform resource identifier, at least in part of which is signed using the private key of a public/private key pair with which the additional first server is associated, and
delivering the web resource to the other user, the web resource including the uniform resource identifier; and
at the second server
receiving a request from the other user for the content, the request including the uniform resource identifier,
verifying using the public key of the public/private key pair with which the additional first server is associated that the at least part of the uniform resource identifier was signed using the private key of the public/private key pair, and
delivering the content to the other user in response to the request only if the uniform resource identifier is so verified.
14 . A method according to claim 9 , wherein the uniform resource identifier includes a unique element and the method further comprises, at the second server, storing the unique element included in the uniform resource identifier, wherein the uniform resource identifier is verified only if its unique element has not been previously received.
15 . A method for delivering content to a user, the method comprising:
at a plurality of first servers, each being associated with a public/private key pair,
authenticating the user, and
signing an item of data using a private key of a public/private key pair with which the first server is associated; and
at a second server
receiving the signed item of data,
verifying using the public key of the public/private key pair with which the first server is associated that the item of data was signed using the private key of the public/private key pair, and
delivering the content to the user only if the item of data is so verified.
16 . A method according to claim 15 , wherein the content and/or additional content relate to a mobile site building service and/or the service is a/the mobile site building service.
17 . Computer software for carrying out a method according to claim 9 when processed by computer processing means.
18 . Computer software for carrying out a method according to claim 15 when processed by computer processing means.
19 . Apparatus according to claim 2 , additionally for delivering the content to another user, the apparatus comprising
one or more additional first servers, each additional first server being associated with a respective public/private key pair and configured to
authenticate the other user,
receive a request from the other user for a web resource,
generate a uniform resource identifier, at least part of which is signed using the private key of a public/private key pair with which the additional first server is associated, and
deliver the web resource to the other user, the web resource including the uniform resource identifier; and
a second server configured to
receive a request from the other user for the content, the request including the uniform resource identifier,
verify using the public key of the public/private key pair with which the additional first server is associated that the at least part of the uniform resource identifier was signed using the private key of the public/private key pair, and deliver the content to the other user in response to the request only if the uniform resource identifier is so verified.
20 . Apparatus according to claim 3 , additionally for delivering the content to another user, the apparatus comprising
one or more additional first servers, each additional first server being associated with a respective public/private key pair and configured to
authenticate the other user,
receive a request from the other user for a web resource,
generate a uniform resource identifier, at least part of which is signed using the private key of a public/private key pair with which the additional first server is associated, and
deliver the web resource to the other user, the web resource including the uniform resource identifier; and
a second server configured to
receive a request from the other user for the content, the request including the uniform resource identifier,
verify using the public key of the public/private key pair with which the additional first server is associated that the at least part of the uniform resource identifier was signed using the private key of the public/private key pair, and
deliver the content to the other user in response to the request only if the uniform resource identifier is so verified.