Patent ID: 8479268

Claim:
A computer usable program product comprising a computer usable storage device including computer usable code for securing asynchronous client server transactions, the computer usable code comprising: computer usable code for receiving a request at a first application executing in a data processing system, the request including an application identifier and a version associated with a second application; computer usable code for generating a service identifier responsive to a session with the second application being valid; computer usable code for generating a registry at the first application, the registry including information about a set of services and data that the second application is permitted to use; computer usable code for generating a catalog based on the registry, the catalog including a transformed subset of the registry; computer usable code for sending the service identifier and the catalog to the second application; computer usable code for receiving a sub-request, the sub-request being a part of an asynchronous client server transaction, the sub-request including the service identifier; computer usable code for determining a validity of the sub-request by determining a combination of (i) whether the service identifier has expired, (ii) whether the sub-request requests a service that is permissible according to the catalog, and (iii) whether the service identifier is used in conjunction with the second application; and computer usable code for providing, responsive to the sub-request being valid, the service in response to the sub-request.