Session Management By Analysis Of Requests And Responses

A method comprising:

• receiving a plurality of requests from a client system for access to at least one protected resource;
• forwarding the requests to the protected resource;
• receiving, from the protected resource, responses corresponding to the requests, wherein the responses are labeled by the protected resource to indicate whether the corresponding requests are automatically-initiated requests;
• and
• maintaining at least one session timer based on the labeled responses.

A system comprising:

• a gateway for receiving requests from a client system;
• wherein the gateway includes a session management module that manages an authenticated session between the client system and a protected resource, wherein the session management module is operative to detect at least one periodic pattern exhibited by at least some of the requests, to identify requests that exhibit a periodic pattern as automatically-initiated requests, and to identify requests that do not exhibit a periodic pattern as user-initiated requests;
• and
• wherein the session management module maintains a timer applicable to the session, and wherein the session management module is operative to reset the timer when at least one user-initiated request is identified.

A system comprising:

• a gateway for receiving requests from a client system;
• wherein the gateway includes a session management module that manages an authenticated session between the client system and a protected resource, wherein the session management module is operative to forward requests from the client system to the protected resource, and to receive responses to the requests from the protected resource, wherein the responses are labeled to indicate whether the requests corresponding to the responses are user-initiated or automatically-initiated;
• and
• wherein the session management module maintains a timer applicable to the session, and wherein the session management module is operative to reset the timer when at least one user-initiated request is identified.