Patent ID: 8646053

Claim:
A server system in a client server environment comprising: a web application running in a memory on the server system; a communications link to a client system; a communications link to an access protected remote resource allowing communication between said web application and said access protected remote resource; a rewriter proxy comprising logic configured to identify a reference in a response from said access protected remote resource pointing to said access protected remote resource, to generate a rewritten uniform resource identifier (URI) for said identified reference including a URI of said rewriter proxy and an original URI of said reference, and to replace said original URI in said response with said rewritten URI; and a security module executing in the memory of the server system configured to generate an authentication identifier by applying an authentication process to at least said original URI of said reference, to add said authentication identifier to said rewritten URI before said original URI has been replaced by said rewritten URI, and to validate said authentication identifier contained in said rewritten URI depending upon an authentication process applied to at least said original URI of said reference, wherein said web application provides said response including said rewritten URI and authentication identifier to the client system.