Isolation of objects representng server resources in browser using iframes

1. A method for web-based management of user resources on a cloud, the method comprising:

from a user's computer, accessing a control procedure of one subgroup of commonly managed subgroups of the user resources, wherein the control procedure resides on the cloud, and is visible with a unique domain ID for the subgroup,

starting isolated windows for each domain ID, the isolated windows containing a graphical representation of local applications, and wherein applications of one window share data and are connected to the control procedure using the same domain ID; and

managing the user resources through the control procedures,

wherein only one of the isolated windows is activated at any one time, and

wherein when the control procedure is controlled by multiple applications corresponding to separate windows, a separate communication channel with a separate domain ID is established for each window.

2. The method of claim 1 , further comprising issuing security tokens, wherein objects grouped in the isolated window share the same token delivered separately to each object.

3. The method of claim 2 , further comprising:

generating the security token on the cloud;

assigning the rights to the security token to control application resources for an associated account; and

establishing trusted relationships between the applications.

4. The method of claim 1 , wherein the control panel enables purchase and setup of virtual environments for other users, including purchase and setup of server resources and services.

5. The method of claim 4 , wherein the virtual environments are purchased through a unified interface and utilizes a common Application Provisioning Standard object model for purchase and activation.

6. The method of claim 4 , wherein any server applications running in any of the virtual environments utilize a common Application Provisioning Standard object model.

7. The method of claim 1 , wherein the control procedures run in a virtual environment on the cloud.

8. The method of claim 1 , wherein the accessing is performed using a dedicated communication channel.

9. The method of claim 1 , wherein multiple domain IDs are used in one communication session between the cloud and the user's computer.

10. A system for managing web-based services, the system comprising:

a client computer configured to interface to a plurality of groups of user resources on a cloud, the groups divided into subgroups of commonly managed resources and their settings, each subgroup having a control procedure and each subgroup using a unique domain ID,

wherein multiple domain IDs are used in one communication session between the server and the user computer;

on the client computer, opening a plurality of isolated windows for each domain ID, the isolated windows containing a graphical representation of local applications, and where the local applications share data and some of the local applications exchange commands with the control procedure; and

wherein the user resources are controlled by the local applications, and

wherein:

only one of the isolated windows is activated at any one time; and

when a control procedure is controlled by several local applications belonging to separate windows, a separate communication channel with a separate domain ID is established for each local application.

11. The system of claim 10 , further comprising downloading a webpage to a browser on the client computer, the webpage including the isolated windows, each window managing browser objects and interfacing to the control procedures through a unified interface for managing server resources.

12. The system of claim 11 , wherein one of the browser objects is a local computer application for managing the server resources, the server resources including server applications.

13. The system of claim 12 , wherein the browser objects include a mail server interface and an antivirus interface.

14. The system of claim 10 , wherein all web-based services from the cloud that are available to the user are controlled from a control panel in a browser, the control panel interfacing to the cloud through a dedicated communication channel.

15. The system of claim 10 , wherein iframes corresponding to the isolated windows are isolated from each other with the domain name used as an ID for group of objects.

16. The system of claim 15 , further comprising implementing data exchange between the iframes using communication interface implemented on a provider's server.

17. The system of claim 15 , wherein a displayed size of the iframes is adjusted automatically based on content of the iframes without hiding any content of the iframe from a window corresponding to the iframe.

18. The system of claim 15 , wherein each iframe has its own session with its own set of security rules that are defined by the control procedures.

19. The system of claim 15 , wherein navigation between menu items in a webpage displayed in a browser is isolated from contents displayed in the iframes.

20. The method of claim 10 , wherein a webpage displayed in a browser includes a plurality of iframes corresponding to the isolated windows, such that each iframe is associated with an applications running on a server, the applications having a corresponding browser object inside the iframe.