Method and apparatus for controlling access to portal content from outside the portal

Abstract

To display content controlled by a portal outside of the portal itself, a user is authenticated to the portal and then permission to access the content authorized. After authentication and authorization, the requested content is returned to the requesting program. The content is returned in the user's preferred language, a using a layout information file to determine how to display the content. A layout strings file storing a layout string in a specific language is also selected, according to the user's preferred languages. The content from a content provider and the layout string are then formatted as specified by the layout information file, and presented to the user or the requesting program.

Description

FIELD OF THE INVENTION

This invention pertains to network access, and more particularly to accessing content over a network preferred by the user.

BACKGROUND OF THE INVENTION

U.S. patent application Ser. No. 10/066,465, titled “Method and Apparatus to Dynamically Provide Web Content Resources in an Internet Portal,” filed Jan. 30, 2002, and related U.S. patent application Ser. No. 10/066,368, titled “Method to Dynamically Determine a User's Language for the Internet,” filed Jan. 30, 2002, describe methods and apparatus for accessing content by a user in a preferred format. The systems of these patent applications for the most part provide indirect access to the content. The user does not directly access the content. Instead, the user access is via portal sites, which act as intermediaries between the user and the content, the types of content the user prefers. The portal site accesses the content, structures it for display to the user, and then presents the information to the user in a particular way.

In addition, these patent applications do not address the question of security. Instead, these patent applications assume that the user has already been authenticated or “checked out” by the portal site and has permission to view the content.

Sometimes, however, a user will want to access content without going through presentation of the information in a particular way coming from portal site. Unless the user has a mechanism to directly access the content, this is not possible, and limits the user's ability to use the content.

Accordingly, a need remains for a way to provide a user with access to secure content without having to go through the presentation of information in a particular way from a portal site, to address these and other problems associated with the prior art.

SUMMARY OF THE INVENTION

An embodiment of the invention is a method and apparatus for securely accessing content by a user. The user is authenticated and permission to access the content is authorized. The request to access the content is then granted.

The foregoing and other features, objects, and advantages of the invention will become more readily apparent from the following detailed description, which proceeds with reference to the accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 shows a client requesting access to content from a server according to an embodiment of the invention.

FIG. 2 shows details about the container hierarchy of FIG. 1, according to an embodiment of the invention.

FIG. 3 shows one of the gadgets of FIG. 1 with two different layouts.

FIG. 4 shows the gadget of FIG. 3 with strings in two different languages.

FIGS. 5A and 5B show the gadget of FIG. 3, the gadget combining one of the layouts of FIG. 4 with layout strings and images.

FIGS. 6A and 6B show a flowchart of the procedure for granting or denying a request for access to the content of FIG. 1, according to an embodiment of the invention.

FIG. 7 shows a flowchart of the procedure for authenticating a user to grant access to the content of FIG. 1, according to an embodiment of the invention.

FIGS. 8A-8B show a flowchart of the procedure for authorizing a user to access the content of FIG. 1, according to an embodiment of the invention.

FIGS. 9A-11 show different ways the content of FIG. 1 can be used, once the user has been authenticated and authorized to access the content, according to an embodiment of the invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT

FIG. 1 shows a client requesting access to content from a server according to an embodiment of the invention. In FIG. 1, server 105 does not contain gadget 110 or content 115. Connected to server 105 is portal server 120, which stores gadget 110 and content 115 in container hierarchy 125. Portal server 120 also includes verification means 130, which determines if the user is authorized to access content 115. Portal server 120 can also include authentication means 135 to authenticate a user before determining whether a user is authorized to access the content. But a person skilled in the art will recognize that authentication and authorization are separate from the content and distinct from each other. Authentication means 135 can be installed on an authentication server (not shown in FIG. 1) separate from either server 105 or portal server 120. Similarly, verification means 130 can be installed on an authorization server (not shown in FIG. 1) separate from either server 105 or portal server 120.

The distinction between authorization and authentication might be unclear to some. Authentication is akin to identifying who wants to enter the building and deciding to let them in or not. Authorization is akin to an additional check once they are in the building deciding whether they are allowed in a particular room within the building. Clearly, if a user is not authenticated, he cannot be authorized to access any content portal server 120.

FIG. 1 also shows client 140 connecting to server 105 via network 145. Client 140 is shown as a computer, and can include all the typical components of a computer, such as keyboard, monitor, mouse, central processing unit, memory, etc. But a person skilled in the art will recognize that client 140 can be any type of device capable of accessing the content. For example, client 140 can be a personal digital assistant (PDA), a notebook computer, a wireless Internet access device, etc. Similarly, network 145 can be any type of network, including local area network (LAN), wide area network (WAN), wireless network, the Internet, etc.

Although FIG. 1 shows the content as being part of gadget 110, a person skilled in the art will recognize that portal server 120 can store content 115 directly, without the use of gadget 110. Similarly, a person skilled in the art will recognize that server 105 can include the functionality of portal server 120, and can store container hierarchy 125 (with gadget 110 and content 115), verification means 130, and authentication means 135.

A person skilled in the art will recognize that, although the above description talks about a user being authenticated and authorized to access the content, a user does not have to be a person. Instead, a user can be a portal site, or a spider scouring the web, or a search engine collecting data for users, or any other type of electronic entity. It is true that authentication is usually thought of in terms of a person providing an identification and password, and that is the typical form authentication can take for an embodiment of the invention, but any other variety of entity can access the content, provided the entity can be authenticated and authorized.

FIG. 2 shows details about the container hierarchy of FIG. 1, according to an embodiment of the invention. Specifically, FIG. 2 shows the structure of container hierarchy 125 as used to store information about user accounts that can access content from server 105. In FIG. 2, root 205 is the root of a container hierarchy. There are three containers below root 205: container 1 (210), container 2 (215), and container 3 (220). Each of containers 1 (210), 2 (215), and 3 (220) represent a group of employees. The containers can be organized in any desired fashion and to any purpose. A person skilled in the art will recognize that there are numerous variations on FIG. 2. For example, there can be fewer or more than three containers below root 205.

Containers 1 (210) and 3 (220) are expanded, and show directory entries for three individuals. Directory entry 225 is for user 1, directory entry 230 is for user 2, and directory entry 235 is for user 3. Although FIG. 2 shows one user in container 1 (210) and two users in container 3 (220), a person skilled in the art will recognize that there can be more or fewer than three users in a container. In addition, a person skilled in the art will recognize that there can be more than three levels in container hierarchy 125 (i.e., any of containers 1 (210), 2 (215), or 3 (220) might have a container nested within).

User 3 (directory entry 235) specifies that user 3 is entitled to access content 1. Although only one content is listed in directory entry 235, a person skilled in the art will recognize that a directory entry can authorize a user to access more than one content. In contrast to user 3, users 1 and 2 (directory entries 225 and 230) do not specify that the users are permitted to access any content directly. But users 1 and 2 (directory entries 225 and 230), like all directory entries, inherit content authorizations from containers in which their directory entries are nested. For example, user 1 (directory entry 225) is nested in container 1 (210), which grants all users in container 1 (210) the authority to access content 2. Similarly, root 205 (which includes all containers and users in container hierarchy 125) specifies that all users within root 205 have the authority to access content 3. Thus, by way of inheritance, users 1 (directory entry 225), 2 (directory entry 230), and 3 (directory entry 235) all have rights to access content 3.

User 2 (directory entry 230) shows a slightly different situation. Directory entry 230 does not specify any content that user 2 is authorized to access, but it does list Spanish as a preferred language for user 2. As described in U.S. patent application Ser. No. 10/066,465, titled “Method and Apparatus to Dynamically Provide Web Content Resources in an Internet Portal,” filed Jan. 30, 2002, the user's directory entry can be used to specify a preferred language in which content is displayed. The use of a preferred language is discussed further below with reference to FIGS. 3-5.

FIG. 2 also shows group 1 (directory entry 240), which represents a group of users not controlled by container hierarchy. Group 1 (directory entry 240) contains only one member, user 2 (directory entry 230), but a person skilled in the art will recognize that a group can have more than one member. Group 1 (directory entry 240) also contains access to content 4. All members of group 1 thereby gain access to content 4. Thus, user 2 (directory entry 230) has access to content 4, while user 1 (225) and user 3 (235) do not have access to content 4.

Although FIG. 2 shows a direct membership relationship between group 1 (directory entry 240) and user 2 (directory entry 230), a person skilled in the art will recognize that membership in a group can be direct membership or indirect membership based upon some criteria. The criteria can be anything, such as “users whose first names begin with the letter 130 A,” or “users who are managers,” for example. Whether group membership is direct or indirect does not affect the users' privileges to access content assigned to the group.

FIG. 3 shows one of the gadgets of FIG. 2 with two different layouts. In FIG. 3, layout information file (LIF) 305 specifies one layout for gadget 110, and LIF 355 specifies an alternative layout for gadget 110. (A layout information file is sometimes called a skin.) For example, LIF 305 might represent the default layout for gadget 110, whereas LIF 355 might represent a layout of gadget 110 for portable devices (where space is at a premium).

In layout information file 305, title string 310 provides a title for the gadget. For example, if gadget 110 is for Stocks, title string 310 can be “Portfolio,” whereas if gadget 110 is for news, title string 310 can be “World News.” Title string 310 is one example of a layout string (sometimes called a language string). Layout strings are strings that are displayed on the gadget that are language dependent. Rather than storing the string directly on the content page, LIF 305 stores a placeholder for a layout string, which can be pulled from a layout strings file for the specific language (see below with reference to FIG. 4 for more information). In that way, LIF 305 can be generally language-independent. Text strings 1 (325), 2 (330), and 3 (335) are additional examples of layout strings in LIF 305.

A person skilled in the art will recognize that there are times when LIFs can be language dependent. For example, some languages are displayed right-to-left (such as Hebrew, or Arabic). For these languages, a LIF that has the information displayed in a different presentation can be preferable.

Because content can be displayed in color, color stripe 315 can be behind title string 310. The color of color stripe 315 can be user-specified, or it can be specified by an administrator (in which case, the color is selected according to the same rules for all users).

Graphic box 320 enables the content provider to specify graphic images that are language-specific. For example, advertisements on content pages are typically stored as images, but include text. By enabling graphic images to be language-dependent and treating graphic box 320 as a layout string, the graphic images presented to the user can also be language-dependent. In addition, graphic images can be context-dependent, as symbols can be recognized by speakers of some languages but not other languages.

Data strings 1 (340), 2 (345), and 3 (350), in contrast to text strings 1 (325), 2330, and 3 (335), are not layout strings. Instead, data strings 1 (340), 2 (345), and 3 (350) are data that can vary depending on the time the content is displayed, and are usually language independent. For example, if LIF 305 shows, in part, stock price information, data string 1 (340), 2 (345), and 3 (350) can show the values for the Dow Jones Industrial Average, the NASDAQ, and the S&P 400. Or data strings 1 (340), 2 (345), and 3 (350) can represent the values of three particular stocks of interest to the user. A person skilled in the art will recognize other information that can be displayed in data strings 1 (340), 2 (345), and 3 (350). The values for the data strings are provided by a content provider.

Although the data strings are described above as being generally language independent, a person skilled in the art will recognize that the data strings can be localized as well. For example, the fractional portion of a decimal number is separated from the whole portion of the number by a decimal point (“.”) in the United States. But in other countries, a comma (“,”) is used. The gadget that generates the data can take advantage of the selected language to localize the data accordingly. Nevertheless, such data is not stored in a layout strings file, as the data can vary with time much more readily than the text strings.

A person skilled in the art will recognize that LIF 305 is exemplary, and not a required format. Thus, there can be more or fewer than four layout strings, nor does there have to be a title string. Data does not have to be displayed, nor do graphic images. Data can be presented in any format desired by the content provider. In short, LIF 305 merely shows one possible layout information file, of which there are nearly infinite arrangements.

For example, LIF 355 shows an alternative layout information file. LIF 355 can be for a portable device, on which display area is at a premium. Thus, although LIF 355 includes title string 360 and text strings 1 (375), 2 (380), and 3 (385), color is not used to highlight title string 360, nor are data strings 1 (340), 2 (345), and 3 (350) provided for.

FIG. 4 shows the gadget of FIG. 3 with strings in two different languages. In FIG. 4, English language 405 for gadget 110 is expanded as layout strings file 410. Layout strings file 410 shows substitution strings for the title string, text strings 1, 2, and 3, and a particular graphic image to use in a graphic box. Similarly, layout strings file 420 shows substitution strings for the title string, text strings 1, 2, and 3, and a particular graphic image to use in a graphic box for Spanish language 415. (French language 425 is not expanded for reasons of space in FIG. 4, but a person skilled in the art will recognize that similar strings in French can be placed in French language 425.)

FIGS. 5A and 5B show the gadget of FIG. 3 combining one of the layouts of FIG. 3 with layout strings and images. In FIG. 5A, content page 505 shows a combination of layout 305 with English layout strings file 410. For example, title string 510 is “My Portal!”, the English language title string from layout strings file 410. Similarly, text strings 525, 530, and 535 are the layout strings from expansion box 405 substituted into layout 305. And graphic image 520 is the graphic image specified in layout strings file 405.

Data strings 1 (540), 2 (545), and 3 (550) are substituted with the actual data to be displayed on the content page. As described above with reference to FIG. 3, data strings 1 (540), 2 (545), and 3 (550) are generally (but not always) independent of language. Their placement on the content page is determined by the LIF, but the data are not drawn from the layout strings files.

In contrast, FIG. 5B shows a content page generated by combining LIF 355 with Spanish layout strings file 420. Content page 555 shows the title string as “Mi Portal!”, the Spanish language title string from layout strings file 420. Similarly, text strings 1 (575), 2 (580), and 3 (585) are drawn from layout strings file 420. Note that, although a Spanish graphic image is specified in layout strings file 420, no graphic is used in LIF 355, and so no graphic is displayed in FIG. 5B.

The content returned to the user is not the presentation of the content, as shown in FIGS. 5A and 5B, but rather files that allow the user to construct the image, if desired. For example, a HyperText Markup Language (HTML) file can be returned, so that the user can display the content on his device. Or an eXtensible Markup Language (XML) file can be returned, which the user can process as desired. Or the layout strings and data strings can be returned directly to the user, without further modification. A person skilled in the art will recognize other ways in which the content can be returned to the user.

FIGS. 6A and 6B show a flowchart of the procedure for granting or denying a request for access to the content of FIG. 1, according to an embodiment of the invention. In FIG. 6A, at step 605, the portal server receives a request for content from a user. As described above, the content can be a gadget, or it can be content of any other type. In addition, the request for content can come directly from a user, or can come indirectly from a user via a second server. At step 610, the portal server authenticates the user, as described below with reference to FIG. 7. At step 615, the portal server determines whether the user was authenticated. If the user was authenticated, then at step 620 (see FIG. 6B), the portal server determines if the user is authorized to access the particular content desired, as described below with reference to FIGS. 8A-8B. At step 625, the portal server determines whether the user was authorized to access the content. If the user was authorized to access the content, then at step 630 the request to access the content is granted, and at step 635 the user uses the content, as described below with reference to FIGS. 9A-11. On the other hand, if the user either was not authorized to access the content or was not authenticated, then at step 640 the request to access the content is denied.

FIG. 7 shows a flowchart of the procedure for an authentication server to authenticate a user to grant access to the content of FIG. 1, according to an embodiment of the invention. In FIG. 7, at step 705, the authentication information is requested. The request can be made by the authorization server using a standard dialog box, or can be made by the content itself when the user enters the address of the content. At step 710, the authentication information is provided to the authorization server. (If the authentication information is requested by the content, the authentication information can be provided to the authorization server in several ways, such as in the address of the content.) At step 715, the authorization server determines if the user is authenticated. If the user is authenticated, then at step 720 the authorization server returns the valid authentication to portal server 120. Otherwise, at step 725 the authorization server indicates that the user is not authenticated (and that portal server 120 should deny the request for access to the content).

Although FIG. 7 is explained in terms of an authentication server separate from the portal server performing the authentication of the user, a person skilled in the art will recognize how FIG. 7 can be modified to enable the portal server to authenticate the user itself. For example, steps 720 and 725 would not be needed, since the portal server is the authentication server in this case.

FIGS. 8A-8B show a flowchart of the procedure for an authorization server to authorize a user to access the content of FIG. 1, according to an embodiment of the invention. In FIG. 8A, at step 805, the authorization server accesses the user's directory entry in the container hierarchy. At step 810, the authorization server determines if the user's directory entry authorizes the user to access the content. If the user's directory entry does not indicate that the user is authorized to access the content, then at step 820 the authorization server checks the containers from which the user's directory entry can inherit, to see if the user inherits authorization to access the content. At step 825, the authorization server determines if the user inherits authorization to access the content. If the user does not inherit authorization to access the content, then at step 826 (FIG. 8B) the authorization server checks any groups of which the user is a member (directly or indirectly). At step 827, the authorization server determines if the user is a member of any group that is authorized to access the content. If the user's directory entry indicates that the user is authorized to access the content, or if the user inherits authorization to access the content, or if the user is a member of a group authorized to access the content, then at step 828 the authorization server indicates to the portal server that the user is authorized to access the content. Otherwise, at step 830 the authorization server indicates to the portal server that the user is not authorized to access the content.

As with FIG. 7, FIGS. 8A-8B are explained in terms of an authorization server separate from the portal server performing the authorization of the user. But a person skilled in the art will recognize how FIGS. 8A-8B can be modified to enable the portal server to authorize the user itself. For example, steps 828 and 830 would not be needed, since the portal server is the authorization server in this case.

FIGS. 9A-11 show different ways the content of FIG. 1 can be used, once the user has been authenticated and authorized to access the content, according to an embodiment of the invention. FIGS. 9A-9B show a flowchart of the procedure for processing the request for content independently of any other content. In FIG. 9A, at step 905, the content is displayed to the user. Processing can then terminate. But if the server receives a second request for access to (a different) content on the server, as in step 910, the server does not need to authenticate, since the user has already been authenticated. At step 912, the server verifies that the user is authorized to access the new content, as described above with reference to FIG. 8. At step 913, the server determines whether the user was authorized to access the second content. If the user was authorized to access the second content, then at step 915 (FIG. 9B), the server grants the user access to the new content, and at step 920 the user displays the new content. Otherwise, at step 925, the server denies the request for access to the second content.

Note that the user is authorized separately for the second content. Although the user has been authorized for one content from the server, that single authorization does not imply that the user is authorized for the second content. But if being authorized for one content on the server entitles the user access to all content on the server, then the server can skip the authorization step as well as the authentication step after receiving the second request for content.

FIGS. 10A-10B show a flowchart of the procedure for combining the content with a second content from the server. In FIG. 10A, at step 1005, the server receives a request for access to another content on the server. At step 1007, the server verifies that the user is authorized for access to the other content. At step 1008, the server determines whether the user was authorized to access the content. If the user was authorized to access the second content, then at step 1010 (FIG. 10B), the server grants access to the other content. At step 1015 the two contents are combined, and at step 1020 the combined content is displayed to the user. On the other hand, if the user was not authorized to access the second content, then at step 1025 the server denies the request to access the second content, and at step 1030 the one content for which the user is authorized is displayed.

FIG. 11 shows a flowchart of the procedure for combining the content with a second content from another source. In FIG. 11, at step 1105, the content is combined with the other content, and at step 1110 the combined content is displayed to the user.

A person skilled in the art will recognize that an embodiment of the invention described above can be implemented using a computer. In that case, the method is embodied as instructions that comprise a program. The program can be stored on computer-readable media, such as floppy disks, optical disks (such as compact discs), or fixed disks (such as hard drives). The program can then be executed on a computer to implement the method.

Having illustrated and described the principles of the invention in a preferred embodiment thereof, it should be readily apparent to those skilled in the art that the invention can be modified in arrangement and detail without departing from such principles. All modifications coming within the spirit and scope of the accompanying claims are claimed.

Claims

1. An apparatus for presenting content to a user, comprising: a first content;a first gadget to present the first content to the user;a second content, wherein the second content is unrelated to the first content;a second gadget independent of the first gadget to present the second content to the user;at least one server to store at least one of the first content, the second content, the first gadget, and the second gadget;a content page including the first gadget and the second gadget;a container hierarchy containing at least one container and a directory entry for the user; andan authorization server for verifying that the directory entry for the user authorizes the user to access the first content and the second content before permitting the user access to the content page,wherein each gadget includes at least one layout information file (LIF) specifying a layout for each gadget on the content page based on a combination of an identified device on which the content page is to be displayed and an identified user language in which the content gage is to be displayed and at least one layout strings file comprising strings to be displayed on each gadget, andwherein the first gadget includes a first LIF for use with a first combination of a device and a user language and a second LIF for use with a second combination of a device and a user language, where the first combination is different from the second combination.

2. The apparatus according to claim 1, further comprising software using the directory entry for the user in the container hierarchy to verify that the user is authorized to access the first content and the second content before permitting the user access to the content page.

3. The apparatus according to claim 2, wherein: the container hierarchy includes a container containing the directory entry for the user; andthe verifying comprises determining that authorization inherited in the directory entry for the user authorizes the user to access the first content.

4. The apparatus according to claim 1, wherein the authorization server stores the container hierarchy.

5. The apparatus according to claim 1, further comprising an authentication server including means for authenticating the user.

6. The apparatus according to claim 1, further comprising means for authenticating the user.

7. The apparatus according to claim 6, wherein the means for authenticating includes software to authenticate the user.

8. The apparatus according to claim 1, further comprising a client from which the user requests access to the content page and on which the content page is displayed.

9. A method for displaying content to a user, comprising: receiving a request for access to a first content and a second content in a portal by a user, wherein the second content is unrelated to the first content;accessing a directory entry for the user in a container hierarchy, the container hierarchy including at least one container;verifying that the directory entry authorizes the user as to access the first content and the second content;granting the request for access to the first content and the second content responsive to the verifying;assembling a content page including a first gadget to present the first content and a second gadget to present the second content; anddisplaying the content page including the first gadget and the second gadget to the user if the request for access is granted, comprising: identifying a device on which the content page is to be displayed;identifying a user language in which the content page is to be displayed; andselecting one of a plurality of layout information files (LIFs) for the first gadget based on a combination of the device and the user language, where each of the plurality of LIFs can be used with a different combination of a device and a user language, andwherein each gadget includes at least one layout information file (LIF) specifying a layout for each gadget on the content page and at least one layout strings file comprising strings to be displayed on each gadget.

10. The method according to claim 9, wherein: accessing a directory entry for the user in a container hierarchy includes: identifying a container in a container hierarchy in which a directory entry for the user is nested; andinheriting, at the directory entry, authorization to access the first content from the container; anddetermining that the directory entry identifies the user as authorized to access the first content includes determining that inherited authorization to access the first content authorizes the user to access the first content.

11. The method according to claim 9, further comprising denying the request for access to the first content if the user is not authorized.

12. The method according to claim 9, further comprising authenticating the user.

13. The method according to claim 12, wherein authenticating the user includes: receiving authentication information for the user; andverifying that the authentication information is for the user.

14. The method according to claim 13, wherein receiving authentication information includes the content providing the authentication information to the portal.

15. The method according to claim 13, wherein receiving authentication information includes the portal requesting the authentication information from the user.

16. The method according to claim 9, wherein displaying the content page includes: determining at least one preferred language for the user; anddisplaying the first content and the second content in the preferred language for the user.

17. A tangible, non-transitory computer-readable storage medium storing a program that, when executed by a processor, is configured to display content to a user, the program comprising: software to receive a request for access to a first content and a second content in a portal by a user, wherein the second content is unrelated to the first content;software to access a directory entry for the user in a container hierarchy, the container hierarchy including at least one container;software to verify that the directory entry authorizes the user to access the first content and the second content;software to grant the request for access to the first content and the second content if the user is authorized;software to assemble a content page including a first gadget to present the first content and a second gadget to present the second content; andsoftware to display the content page including the first gadget and the second gadget to the user if the request for access is granted, comprising: software to identify a device on which the content page is to be displayed;software to identify a user language in which the content page is to be displayed; andsoftware to select one of a plurality of layout information files (LIFs) for the first gadget based on a combination of the device and the user language, where each of the plurality of LIFs can be used with a different combination of a device and a user language, andwherein each gadget includes at least one layout information file (LIF) specifying a layout for each gadget on the content page and at least one layout strings file comprising strings to be displayed on each gadget.

18. A tangible, non-transitory computer-readable storage medium storing a program according to claim 17, wherein: the software to access includes: software to identify a container in a container hierarchy in which a directory entry is nested; andsoftware to inherit at the directory entry, authorization to access the content from the container; andthe software to determine includes software to determine that the directory entry including inherited authorization to access the first content authorizes its entries to access the first content.

19. A tangible, non-transitory computer-readable storage medium storing a program according to claim 17, further comprising software to deny the request for access to the first content and the second content if the user is not authorized.

20. A tangible, non-transitory computer-readable storage medium storing a program according to claim 17, further comprising software to authenticate the user.