Granted Patent B2

US 9,432,355 · App. 14/622,304 · Granted Aug 30, 2016

Abstract

Claims (16)

1. In a client-server architecture, a method comprising:

receiving at a framework server device a request from a browser via a load balancer, said load balancer decrypting said request and including digital sign-on credentials;

sending an encrypted response from said framework server device configured to generate a number of application Iframes and a connection between said framework server device and a browser;

providing a proxy server device and one or more application server devices comprising a plurality of non-interfaced, independent web-based applications;

receiving at the proxy server device, a request from a URL within one or more of said Iframes via said load balancer;

storing on the proxy server device a pointer associating first sign-on credentials, for a first of the plurality of web-based applications on at least one application server device, with second sign-on credentials, for one or more second of the plurality of web-based applications on said at least one application server device, in a single framework;

receiving at the proxy server device the second sign-on credentials in a single response;

automatically causing, via the second sign-on credentials added in a single request from the proxy server device, sign-on to the first of the plurality of web-based applications through the proxy server device, and immediate tandem display of corresponding secure application information as a consequence of the single request from the proxy server device comprising the first sign-on credentials, and the authenticating of the second sign-on credentials of at least one of the one or more second of the web-based applications, using the pointer;

causing an indirect communicative connection between the browser and said appropriate application devices through said proxy server device; and

causing content from said appropriate application server devices to be supplied to said proxy server device, wherein said content is further supplied to said browser.

2. The method of claim 1 wherein the sign-on credentials for the first of the web-based applications are different from the sign-on credentials for the one or more second of the plurality of web-based applications.

3. The method of claim 2 wherein the sign-on credentials for the first of the web-based applications is more detailed than the sign-on credentials for the one or more second of the plurality of web-based applications.

4. The method of claim 3 wherein the sign-on credentials for the first of the web-based applications requires more authenticating data than the sign-on credentials for the one or more second of the plurality of web-based applications.

5. The method of claim 1 further comprising, after the step of receiving at the proxy server device the second sign-on credentials in a single response, the steps of: receiving at the proxy server device the first sign-on credentials for the first of the plurality of web-based applications; forming of the single request comprising the first sign-on credentials; and upon transmitting the single request, allowing sign-on to the first of the plurality of web-based applications.

6. The method of claim 1 wherein said proxy server device is a reverse proxy server device.

7. The method of claim 6 wherein said reverse proxy server device communicates with a framework server device to determine whether the credentials supplied are authentic.

Assignments (8)