Method and system for restricting access to user resources

摘要

A user's set top box (STB), or other client, executes a shell and has an application program interface (API) by which certain features of the client can be controlled. The client is in communication with a walled garden proxy server (WGPS). The client sends a request to the WGPS to access a service provided by a site in the garden. The site sends the client a message containing code calling a function in the API. The WGPS traps the message from the site and looks up the site in a table to determine the access control list (ACL) for the site. The WGPS includes the ACL in the header of the hypertext transport protocol (HTTP) message to the client. The shell receives the message and extracts the ACL. If the code lacks permission, the shell stops execution.

主权项

1. A computer program product comprising:
a non-transitory computer usable storage medium having computer executable instructions embodied therein for managing access to an application program interface (API) comprising a plurality of functions, the computer executable instructions comprising instructions for:
receiving a message containing code calling a function in the API and data indicating API function execution rights for the message;determining whether the data indicate that the message has a right to execute the called function;executing the called function responsive to the data indicating that the message has the right to execute the called function; andsending a response to an originator of the message indicating whether the code successfully executed the function in the API.