Patent ID: 7243369
Filing Date: 2007-07-10
Classification: H04L

Abstract:
1. A uniform resource locator (URL) access enforcement system comprising: a server having a centrally controlled URL access enforcement system; a plurality of web-based applications that are accessed via said centrally controlled URL access enforcement system; and a single sign-on access system coupled to said server for providing single sign-on access authentication and authorization to said plurality of web-based applications for a user, wherein said server comprises a URL access control logic for controlling user access requests to URLs in said server comprising an identification token for uniquely identifying each authenticated user that successfully connects to said server, wherein said URL access control logic further comprises a URL access list comprising a list of URLs that an authenticated user connected to said server accesses, wherein the URL access list comprises an access allow list that comprises a respective list of URLs that each authenticated user is permitted to access, and an access deny list that contains a respective list of URLs that each authenticated user is not permitted to access, wherein said access deny list takes precedence over said access allow list, and wherein a user URL request is compared to said access allow list and said access deny list to determine which URLs an authenticated user is permitted to access, wherein said identification token comprises information indicating whether a user request is subject to URL policy enforcement, and wherein said single sign-on system comprises token listening logic configured to notify each of said plurality web-based applications when said identification token that is assigned to said user expires.