Patent ID: 7774455

Claim:
A method for accessing resources on a private network via an intermediary server, said method comprising: receiving a login request from a user for access to the intermediary server, the intermediary server storing an authentication identifier for each of a plurality of users, the authentication identifier identifying an authentication server; accessing, based on the authentication identifier, an authentication server, where the authentication server is separate and distinct from the intermediary server, to authenticate the user in response to the login request; receiving a resource request from the authenticated user at the intermediary server, the resource request requesting a particular operation with respect to a resource from the private network; obtaining access privileges for the authenticated user in response to the resource request; determining whether the access privileges for the authenticated user permit the authenticated user to perform the particular operation at the private network; and preventing, by the intermediary server, performance of the particular operation at the private network if the access privileges for the authenticated user do not permit the authenticated user to perform the particular operation at the private network.