You can check out this blog post for how to get it to open in a new window, but the real challenge is that because you are using URL Access to call the report you have build the whole URL string including parameters. It can be done, it is just a bit of a pain.