Patent ID: 7769845

Claim:
A method for terminating an authentication session following a user's indication that the user intends to terminate the user's interaction with an application comprising: monitoring, by a computer, transactions between the user and the application to detect a request which serves as a predefined termination indication, wherein the monitoring is performed by an authentication component which receives requests from the user and relays them to the application; detecting the request which serves as the termination indication in one of the monitored transactions; marking an authentication session as termination pending in a session table; communicating the request which serves as the termination indication to the application; presenting in response to receiving the termination indication a preconfigured logoff page provided by the authentication component to the user that includes additional options for the user; intercepting one or more transactions from the user after presenting the preconfigured logoff page; responding to the one or more transactions before terminating the authentication session; continuing to monitor the transactions between the user and the application until the application replies with a response to the termination indication; terminating the authentication session in response to detecting the termination indication, the terminating is performed by the authentication component, and wherein only predetermined transactions are permitted between the detecting and the terminating; after detecting the response which serves as the termination indication, blocking, by the authentication component, any further response from the application; and relaying to the application any request made between the detecting and the terminating which is in a pre-defined set of requests.