Secure and mediated access for e-services

Abstract

A system for providing secure access for a user to network accessible services. The system comprises a client software agent to generate a services request that is determined by a user. A services software agent is included and the service software agent is in electronic communication with the client software agent, to receive and fulfill the services request. A permissions software agent has a listing of user permissions for the network accessible services. The permission software agent is in communication with the services software agent and the services software agent requests user permissions from the permissions services agent so as to enable activation of the network accessible services selected by the user.

1 . A system for providing secure user access to network accessible services via a network, comprising:
 a services software agent, for electronic communication with a client software agent, the services software agent to receive and facilitate fulfillment of a services request generated by the client software agent that is based on input from a user; and   a permissions software agent including a listing of user permissions for the network accessible services, wherein the permission software agent is in communication with the services software agent, and the services software agent can request user permissions from the permissions services agent so as to enable activation of the network accessible services selected by the user.   
     
     
         2 . A system as in  claim 1 , wherein the permissions services agent resides on a system server. 
     
     
         3 . A system as in  claim 2 , wherein the services software agent resides on a services server. 
     
     
         4 . A system as in  claim 3 , wherein the services server and system server are separate servers. 
     
     
         5 . A system as in  claim 1 , further comprising a billing services agent to receive a billing request from the services software agent after the network accessible services have been fulfilled via the services software agent. 
     
     
         6 . A method of providing secure user access to network accessible services via a network, comprising the steps of:
 receiving, at a services software agent, a services request as defined by a user through a client software agent;   retrieving a user permissions listing for the network accessible services specified in the services request from a permissions software agent;   facilitating fulfillment of the network accessible services as enabled by the services software agent based on the user permissions listing received from the permissions software agent.   
     
     
         7 . A method as in  claim 6  further comprising the step of executing the services software agent on a service server. 
     
     
         8 . A method as in  claim 7  further comprising the step of executing the permissions software agent on a system server. 
     
     
         9 . A method as in  claim 6  further comprising the step of creating a transaction summary for completed network accessible services. 
     
     
         10 . A method as in  claim 9  further comprising the step of storing a copy of the transaction summary with the services software agent on the services server. 
     
     
         11 . A method as in  claim 10  further comprising the step of sending a copy of the transaction summary to the client software agent. 
     
     
         12 . A method as in  claim 6 , further comprising:
 generating a billing request, having a user name and service amount, from the services software agent for network accessible services that have been completed via the services software agent;   sending the billing request to the permissions software agent having group permissions and access rights for devices and services specified by a system administrator;   creating a billing reply, including a corresponding user's billing account number, using the permissions software agent; and   transmitting the billing reply to a billing software agent.   
     
     
         13 . A method as in  claim 12 , wherein the step of sending the billing request further comprises the step of sending the billing request which includes a user's name, a charge amount, and an network accessible services name. 
     
     
         14 . A method as in  claim 12 , wherein the step of creating a billing reply further comprises the step of requesting the billing account number to be charged for the user for the network accessible services received. 
     
     
         15 . A method as in  claim 12 , further comprising the step of verifying a user name from a digital signature received by the billing software agent. 
     
     
         16 . A method as in  claim 12 , further comprising the step of charging the user's billing account number with the charge amount for the network accessible services used. 
     
     
         17 . A method as in  claim 12 , wherein the step of creating a billing reply further comprises the step of retrieving the user's billing account number based on a user name and a services name looked up by the permissions software agent. 
     
     
         18 - 19 . (canceled) 
     
     
         20 . A system as in  claim 1 , wherein:
 the services software agent is programmed for generating a billing request, having a user name and service amount, for network accessible services that have been completed via the services software agent and sending the billing request to the permissions software agent having group permissions and access rights for devices and services specified by a system administrator; and   the permissions software agent is programmed for generating a billing reply, including a corresponding user's billing account number, in response to the billing request received from the services software agent.