METHODS AND SYSTEMS FOR COORDINATING SESSIONS ON ONE OR MORE SYSTEMS

• US 20070067444A1
• Filed: 06/16/2006
• Published: 03/22/2007
• Est. Priority Date: 06/29/2000
• Status: Active Grant

• Current Assignee: JFD Ltd. (James Fisher and Sons PLC)
• Original Assignee: Campus Pipeline, Inc. (Fidelity National Information Services Incorporated)
• Inventors: Hammock, Jeanette, McCarty, Scott
• Granted Patent: US 7,493,402 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms

Abstract

The present invention extends to methods and systems for providing a seamless user interface to one or more web-based external systems and applications that monitor and control access to information, products, and/or services provided by such web-based external systems. Accordingly, the methods and systems enable a user to utilize a single web-based graphical user interface to access external systems with minimal input from the user. Further, the invention coordinates the log-on, log-off, and time-out of the user from the external systems so that user has a seamless on-line experience. The user remains logged into each of the external systems so long as the user is logged into a main system and can log-out of all the external systems by logging out of the main system. In addition, the user is not timed out of any external system unless the user is timed out of the main system.

Claims

1-14. -14. (canceled)

15. In a system comprising a plurality of external systems upon which a user module can create active sessions and an integration module that stores a time-out period and facilitates communication to a plurality of external systems, a method for coordinating maintenance of active sessions on the integration module and one or more of the plurality of external systems, the method comprising:

upon a user module transmitting data to an integration module following the expiration of a time-out period associated with the integration module, identifying upon which of a plurality of external systems the user module has an active session;

transmitting to each of the plurality of external systems upon which the user module has the active session a request to specify a last active time of the user module on the respective external systems of the plurality of external systems, the request having an associated request time;

receiving from the plurality of external systems a response identifying the last active time of the user module on each of the plurality of external systems; and

defining a last activity attribute for the integration module, the last activity attributed comprising a value equal to the last active time received from the plurality of external systems that is closest to the request time, wherein the active session is maintained upon the integration module and at least one of the plurality of external systems.

16. The method as recited in claim 15, wherein the integration module acts as an interface between the user and the plurality of external systems.

17. The method as recited in claim 15, wherein the system comprises at least one administrator, the administrator defining the time-out period.

18. The method as recited in claim 15, wherein the integration module controls access to the plurality of external systems.

19. The method as recited in claim 15, wherein the user module comprises a browser.

20. The method as recited in claim 15, wherein identifying upon which of the plurality of external systems the user module has the active session comprises searching a list of status information stored at the integration module.

21. The method as recited in claim 15, wherein identifying upon which of the plurality of external systems the user module has the active session comprises external session attributes.

22. The method as recited in claim 15, wherein transmitting a request to the plurality of external systems comprises identifying a last activity uniform resource locator associated with each of the plurality of external systems and delivering a request to the last activity uniform resource locator.

23. The method as recited in claim 15, where the last active attribute is the same for both the user module and the integration module.

24. The method as recited in claim 15, further comprising terminating the active session upon the integration module and de-authenticating the user from each of the plurality of external systems in the event that the last active time stored at the integration module exceeds the time-out period.

25. In a system comprising an external system and an integration module for facilitating communication between a user module and the external system, a method for re-authenticating a user with an external system, the method comprising:

transmitting to an integration module, from a user module through which an user accesses the at least one external system, a request to re-authenticate the user with the at least one external system upon the user module being denied access to the at least one external system;

receiving, at the at least one external system from the integration module, a request to reauthenticate the user, the request comprising at least one access credential; and

upon matching the access credential with a stored access credential at the at least one external system, delivering access information to the integration module, wherein the integration module delivers the access information to the user module to enable the user module to gain access to the at least one external system.

26. The method as recited in claim 25, wherein the access information comprises a session identifier and a destination uniform resource locator.

27. The method as recited in claim 25, wherein the access information comprises a one-time use uniform resource locator.

28. The method as recited in claim 25, further comprising displaying a graphical user interface to the user, the graphical user interface facilitating access to the integration module and the at least one external system.

29. The method as recited in claim 25, further comprising delivering, from the integration module to the at least one external system, to a request uniform resource locator the request to reauthenticate the user.

30-52. -52. (canceled)

53. A computer product for implementing, in a system comprising one or more external systems and an integration module for facilitating communication between a user module and the one or more external systems, a method for controlling access to the one or more external systems, the computer program product comprising:

a computer readable medium carrying computer-executable instructions for implementing the method, wherein the computer-executable instructions, when executed by the integration module, cause the system to perform;

upon a user module requesting or transmitting data to an integration module after a time-out period, identify upon which of a plurality of external systems a user module has an active session;

transmitting to the one or more external systems to which the user module has an active session a request to specify a last active time of the user module on the one or more external systems, the request having an associated request time;

receiving from the one or more external systems a response identifying the last active time of the user module on each of one or more external systems; and

defining a last activity attribute for the integration module, the last activity attributed comprising a value equal to the last active time received from the one or more external systems that is closest to the request time, wherein an active session is maintained upon the integration module and at least one of the one or more external systems.