Patent ID: 8365271

Claim:
A method for controlling access of a client system to access protected remote resources comprising: receiving a response from an access protected remote resource in response to a client request to said access protected remote resource, wherein said access protected remote resource is configured in such a way that a client system is not allowed to directly access said access protected remote resource but all client requests are rerouted via a web application which is authorized to access said access protected remote resource; identifying in said response all references that are defined by absolute URLs and point to access protected remote resources; generating a rewritten URL for each original URL of said identified reference to an access protected remote resource by: splitting the original URL into a base part and a resource part; generating an authentication identifier by applying an authentication method to said base part and a set of parameters provided by said web application; and concatenating the URL of said web application, the base part, authentication identifier, and resource part; replacing the original URL of said references contained in said response by said rewritten URL including said authentication identifier; and sending said response including rewritten URL and authentication identifier to said client system.