Host agnostic integration and interoperation system

摘要

A host agnostic integration and interoperation system. The host agnostic integration and interoperation system includes an open platform interface and the associated conventions that define the roles of and direct operations between a host and a service application running on an external application server and allow the host to discover and integrate the functionality provided by the service application. The open platform interface employs a limited number of easily implemented semantic methods allowing a host to expose and integrate the ability to view, edit, or otherwise manipulate a document using the host supported functionality of the service application from a standard user agent. The host agnostic integration and interoperation system handles user authentication at the host using an access token and establishes a trust relationship between the host and the external application server using a lightweight but secure proof key system.

主权项

1. A method for securely communicating between a host and a service application running on a selected external application server to allow a service application running on the external application server to access a document maintained by the host, said method comprising the steps of:
initiating a transaction, by the host, with the selected external application server by transmitting an action request from the host to the service application running on the selected external application server, the action request being against an entry point address associated with the service application; initiating a communication with the selected external application server to obtain a proof key adapted to validate a proof signature; receiving said proof key in response to said communication; providing the selected external application server with an access token and a document identifier for use in fulfilling said action request; receiving a metadata request comprising said access token and said document identifier; validating said access token prior to responding to said metadata request; sending a metadata response comprising selected metadata based on said action request when said access token is valid; receiving a content request comprising said access token and said document identifier; validating said access token prior to responding to said content request; and sending a content response comprising content from the document identified by said document identifier when said access token is valid.