Patent ID: 9172709
Filing Date: 2015-10-27
Classification: H04L

Abstract:
1. A secure portal system comprising: a plurality of application servers each operable to provide a plurality of secure services over a network; a plurality of client computers each operable to display a graphical user interface; and a portal server communicatively connected between the plurality of application servers and the plurality of client computers, the portal server including a first firewall and a proxy server, the first firewall communicatively connected between the plurality of client computers and the proxy server, the proxy server communicatively connected between the first firewall and the plurality of application servers, the first firewall operable to restrict packet access to the at least one application server according to a set of rules, the proxy server operable to provide a level of indirection for the plurality of application servers from the graphical user interface, wherein the client computers communicate to the application server by communicating to the first firewall and then communicating with the proxy server; an administrative server operable to store authorization level information associated with each of a plurality of users of the client computers; a second firewall communicatively connected between the administrative server and the proxy server, the second firewall to restrict access to the authorization level information; the portal server further operable to: wherein one of the plurality of secure services comprises a storage device that stores a plurality of files, each of the plurality of files having a metadata tag indicating a file confidentiality level and sub-confidentiality level of its respective file, the portal server operable to restrict access to the storage device by comparing the authorization level of the login session with the file authorization level of each of the plurality of files.