Patent ID: 8595797

Claim:
A method of enforcing web security, comprising: receiving an incoming request; parsing and analyzing the incoming request in comparison with a plurality of user-specific XML schemas to the incoming request to determine whether the incoming request corresponds to a pre-determined syntax, structure and content, wherein requests that are not authorized for the user are in violation of the user-specific XML schema and wherein requests that are authorized for the user are not in violation of the user-specific XML schema, and thereby: validating the incoming request and determining whether the incoming request is authorized, wherein the validating and authenticating is carried out in a single operation by determining whether the incoming request has the proper syntax, structure and content to satisfy the applied plurality of user-specific XML schemas; processing the incoming request after determining that the incoming request is both valid and authorized, sending the incoming request to an authenticator for authorization wherein after determining that the incoming request is valid but not authorized, and terminating operation on the incoming request if the incoming request is not valid.