SYSTEM AND METHOD FOR SINGLE LOGOUT OF APPLICATIONS

• US 20150350338A1
• Filed: 05/30/2014
• Published: 12/03/2015
• Est. Priority Date: 05/30/2014
• Status: Active Grant

• Current Assignee: Genesys Telecommunications Laboratories Incorporated (Genesys Cloud Services Incorporated)
• Original Assignee: Genesys Telecommunications Laboratories Incorporated (Genesys Cloud Services Incorporated)
• Inventors: Barnett, Jim H., Leonard, Colin M., Mandel, Zak, Strigachov, Maxim, Lyubinin, Michael J.
• Granted Patent: US 10,057,354 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 67/143 Termination or inactivation of sessions, e.g. event-controlled end of session
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34

Abstract

A system includes an activity manager connected with a device, an application server and an identity provider. The activity manager clears a device session with both the identity provider and the application server to logout applications provided by the application server to the device.

Claims

1. A system, comprising:

an activity manager connected with a device, an application server and an identity provider, the activity manager configured to clear a device session with both the identity provider and the application server to terminate applications provided by the application server to the device.

2. The system of claim 1, where the device is configured to provide credentials to the identity provider, the identity provider configured to provide the credentials of the device to the application server to authorize the device to use the applications without the device presenting credentials again.

3. The system of claim 1, further including an identity provider login filter and an application server login filter to send login data to the activity manager.

4. The system of claim 3, where the login data is sent by redirecting a browser login of the device to the activity manager.

5. The system of claim 3, where the activity manager acts as the device to the identity provider.

6. The system of claim 1, where the activity manager maintains a record of application sessions.

7. The system of claim 1, where the application server includes a logout filter to redirect the device to the activity manager to make a logout request with the activity manager.

8. The system of claim 1, where the activity manager is configured to monitor user-interface interactions with the application and the additional applications and upon a determined period of no user-interface activity with the application and the additional applications the activity manager is configured to clear a session with the identity provider and terminate sessions of the application and the additional applications.

9. A system, comprising:

an application server, the application server including a login filter executed by a processor, the login filter configured to intercept and store a device session identification for an application session of a client device; and

a logout filter, the logout filter configured to intercept a logout request of the application session, the logout filter to redirect the client device to an activity manager to make a logout request with the activity manager.

10. The system of claim 9, where the activity manager acts as the client device to the application server.

11. The system of claim 9, where the logout filter is further configured to pass control to a security protection filter to clear a single-sign-in session.

12. The system of claim 11, where the security protection filter comprises a security assertion markup language (SAML) filter.

13. The system of claim 9, where the application session comprises multiple application sessions.

14. A method, comprising:

maintaining a record of open applications and device session identifications; and

clearing the device session identifications with an application server and an identity provider for the open applications.

15. The method of claim 14, wherein clearing device session identifications comprises clearing cookies.

16. The method of claim 14, where the open applications comprise service provider applications.

17. The method of claim 14, further comprising monitoring the open applications for a logout request.

18. The method of claim 14, further comprising receiving a request by an administrator to terminate the applications.

19. The method of claim 14, further comprising receiving by a client device a request to logout the client device from the applications.

20. The method of claim 14, further comprising sending a logout request after a determined period of no user-interface activity of the open applications.