Web page security system

Abstract

A security application for granting different access rights to web pages and objects on each web page is disclosed. A data table assigns one or more function identifiers (FIDs) to users. A second data table assigns a different object identifier (OID) to each web page, and to assign a different OID for each object on each web page. A third data table assigns an FID to each OID. When a user attempts to access a web page or an object on the web page, a web server compares each of the user's FIDs to the FID assigned to the web page or object. The web server grants access to the web page or object if one of the user's FIDs matches the FID assigned to the web page or object, the user is granted access to the web page or object according to the function of the matched FID.

1 . A computer including a multi-tiered security application, comprising:
 a server configured to operate web pages and a plurality of objects, wherein one of said plurality of objects is on each of said web pages;   a first data table configured to assign a user function identifier (FID) to each of a plurality of users; and   a second data table configured to assign an object identifier (OID) to each of said web pages, assign an OID to each object on each of said web pages, and assign an FID to each OID, wherein said user FIDs and said FIDs assigned to each OID are part of a plurality of FIDs.   
   
   
       2 . The computer of  claim 1 , wherein said server is configured to:
 compare said user FID to a first FID when a user attempts to access a web page; and   grant function access to said web page when said user FID substantially matches said first FID, said function access corresponding to a function of said substantially matched user FID and first FID.   
   
   
       3 . The computer of  claim 2 , wherein said server is further configured to:
 enable said user to view said web page when said user FID and said first FID are both a display FID.   
   
   
       4 . The computer of  claim 2 , wherein said server is further configured to:
 enable said user to input information into said web page when said user FID and said first FID are both an input FID.   
   
   
       5 . The computer of  claim 2 , wherein said server is further configured to:
 enable said user to edit said web page when said user FID and said first FID are both an edit FID.   
   
   
       6 . The computer of  claim 1 , wherein said server is configured to:
 compare said user FID to a first FID when a user attempts to access a web page;   grant a first function access to said web page when said user FID substantially matches said first FID, said first function access corresponding to a first function of said substantially matched user FID and first FID;   compare said user FID to a second FID when said user attempts to access an object on said web page; and   grant a second function access to said object when said user FID substantially matches said second FID, said second function access corresponding to a second function of said substantially matched user FID and second FID.   
   
   
       7 . The computer of  claim 6 , wherein said server is further configured to:
 enable said user to view said object when said user FID is said display FID and said first FID are both a display FID;   enable said user to input information into said object when said user FID and said first FID are both an input FID; and   enable said user to edit said object when said user FID and said first FID are both an edit FID.