Method and apparatuses for transferring data for multiple applications through a single communication link in response to authentication information

Abstract

A method and apparatus for transferring data in response to authentication information. Authentication information is transmitted from a client computer to a server computer to authorize access to restricted data. Invocation information is transmitted from the server computer to the client computer in response to the authentication information. A first application is invoked in the client computer using the invocation information. The restricted data is then transmitted from the server computer to the first application program in the client computer based on the access authorized by the authentication information.

1. A method comprising:
 transmitting authentication information from a client computer to a server computer to authorize access to restricted data, wherein transmitting authentication information further includes executing a web browsing application program in the client computer to transmit the authentication information to the server computer;  
 transmitting invocation information from the server computer to the client computer in response to the authentication information, the invocation information including a link identifier that defines a communications link between the server computer and the web browsing application, wherein the link identifier comprises at least one of a session identifier and a combination including a port number for the web browsing application and a network address;  
 invoking a first application program in the client computer using the invocation information, said first application program being a different application from said web browsing application program; and  
 transmitting the restricted data from the server computer to the first application program in the client computer based on the access authorized by the authentication information through the communications link defined by the invocation information.  
 
     
     
       2. The method of  claim 1  further comprising the server computer generating a  the session identifier in response to the authentication information. 
     
     
       3. The method of  claim 2  wherein the transmitting of invocation information includes transmitting the session identifier to the client computer. 
     
     
       4. The method of  claim 3  further comprising transmitting a request including the session identifier to the server computer after the first application program has been invoked, the request requesting download of the restricted data to the first application program. 
     
     
       5. The method of  claim 4  further comprising the server computer confirming the presence of the session identifier before transmitting the restricted data to the first application program. 
     
     
       6. The method of  claim 1  wherein the transmitting of authentication information includes transmitting a first message digest generated using a first key value. 
     
     
       7. The method of  claim 6  further comprising the server computer:
 generating a second message digest using a second key value;  
 comparing the first message digest and the second message digest; and  
 authorizing access to the restricted data if the first message digest and the second message digest match according to a first criteria.  
 
     
     
       8. The method of  claim 1  wherein the transmitting of invocation information includes transmitting one or more parameters that identify a portion of executable code that is dynamically linked to the web browsing application program, and wherein the invoking a first application program includes executing the portion of executable code to invoke the first application program and to send a message to the first application program to cause the first application program, when executed, to receive the restricted data from the server computer. 
     
     
       9. The method of  claim 1  further comprising automatically displaying a plurality of images included in the restricted data in predetermined regions of a display. 
     
     
       10. The method of  claim 9  wherein the predetermined regions of the display are indicated by positioning data included in the restricted data. 
     
     
       11. The method of  claim 9  wherein the predetermined regions of the display are regions of a page of a digital photo album. 
     
     
       12. The method of  claim 1  wherein the communicating of authentication information from a client computer to a server computer includes communicating the information to the server computer via communication links between a plurality of networks of computers, the plurality of networks of computers including a first network of computers that includes the server computer and a second network of computers that includes the client computer. 
     
     
       13. A method comprising:
 executing a web browsing application program in a client computer to transmit authentication information to a server computer;  
 transmitting the authentication information to the server computer to authorize the server computer to return restricted data;  
 receiving invocation information from the server computer, the invocation information including a link identifier that defines a communications link between the server computer and the web browsing application, wherein the link identifier comprises at least one of a session identifier and a combination including a port number for the web browsing application and a network address;  
 invoking a first application program in the client computer based on the invocation information, said first application program being a different application from said web browsing application program; and  
 receiving the restricted data from the server computer in the first application program through the communications link defined by the invocation information without transmitting further authentication information to the server computer.  
 
     
     
       14. An article of manufacture including one or more computer-readable media having stored thereon program code sequences, the program code sequences including program code which, when executed by a processor, causes the processor to:
 execute a web browsing application program to transmit authentication information to a server computer;  
 transmit authentication information to the server computer to authorize access to restricted data;  
 request the server computer to transmit the restricted data;  
 receive invocation information from the server computer, the invocation information including a link identifier that defines a communications link between the server computer and the web browsing application, wherein the link identifier comprises at least one of a session identifier and a combination including a port number for the web browsing application and a network address;  
 invoke a first application program based on the invocation information, said first application program being a different application from said web browsing application program; and  
 receive the restricted data from the server computer in the first application program based on the access authorized by the authentication information through the communications link defined by the invocation information.  
 
     
     
       15. The article of  claim 14  wherein the invocation information includes a  the session identifier generated by the server computer in response to the authentication information. 
     
     
       16. The article of  claim 15  wherein the program code sequences further include program code which, when executed by the processor, causes the processor to issue a request including the session identifier to the server computer after the first application program has been invoked, the request requesting download of the restricted data to the first application program. 
     
     
       17. The article of  claim 14  wherein the authentication information includes a first message digest that can be compared by the server computer to the second message digest to authenticate the identity of a computer user. 
     
     
       18. The article of  claim 14  wherein the program code sequences further include program code which, when executed by the processor, causes the processor to display a plurality of images included in the restricted data in predetermined regions of a display. 
     
     
       19. The article of  claim 18  wherein the predetermined regions of the display are indicated by positioning data included in the restricted data. 
     
     
       20. The article of  claim 18  wherein the predetermined regions of the display are regions of a page of a digital photo album.