System for efficient management of invalid access tokens

A computer program comprising instructions which, when the program is executed by a computer, cause the computer to carry out the method of:

• receiving, at a client system from a user device, a first access request comprising a first instruction to access a protected resource stored at a resource system;
• transmitting, from the client system to an authorisation system, a token request for an access token to be used for accessing the protected resource, in response to the first access request;
• receiving, at the client system, an access token in response to the token request, the access token having a corresponding time to expire indicative of a time at which the access token will not be valid for obtaining the protected resource from the resource system;
• storing the access token at a token storage unit of the client system;
• receiving a rejection message, at the client system, indicating that the access token is not valid for receiving the protected resource;
• and
• storing, at the token storage unit, an invalidation flag associated with the stored access token, in response to receiving the rejection message.

A computer readable medium comprising instructions which, when executed by a computer, cause the computer to carry out the method of:

• receiving, at a client system from a user device, a first access request comprising a first instruction to access a protected resource stored at a resource system;
• transmitting, from the client system to an authorisation system, a token request for an access token to be used for accessing the protected resource, in response to the first access request;
• receiving, at the client system, an access token in response to the token request, the access token having a corresponding time to expire indicative of a time at which the access token will not be valid for obtaining the protected resource from the resource system;
• storing the access token at a token storage unit of the client system;
• receiving a rejection message, at the client system, indicating that the access token is not valid for receiving the protected resource;
• and
• storing, at the token storage unit, an invalidation flag associated with the stored access token, in response to receiving the rejection message.

A client system comprising processing circuitry configured to:

• receive, from a user device, a first access request comprising a first instruction to access a protected resource stored at a resource system;
• transmit, to an authorisation system, a token request for an access token to be used for accessing the protected resource, in response to the first access request;
• and
• receive, at the client system, an access token in response to the token request, the access token having a corresponding time to expire indicative of a time at which the access token will not be valid for obtaining the protected resource from the resource system;
• wherein the client system comprises a token storage unit configured to store the access token;
• and
• the processing circuitry is further configured to:
• receive a rejection message, at the client system, indicating that the access token is not valid for receiving the protected resource;
• and
• store, at the token storage unit, an invalidation flag associated with the stored access token, in response to receiving the rejection message.

A client system comprising:

• a receiver configured to receive, from a user device, a first access request comprising a first instruction to access a protected resource stored at a resource system;
• a transmitter configured to transmit, to an authorisation system, a token request for an access token to be used for accessing the protected resource, in response to the first access request;
• wherein the receiver is configured to receive an access token in response to the token request, the access token having a corresponding time to expire indicative of a time at which the access token will not be valid for obtaining the protected resource from the resource system;
• wherein the client system further comprises a token storage unit configured to store the access token;
• the receiver configured to receive a rejection message, at the client system, indicating that the access token is not valid for receiving the protected resource;
• and
• the token storage unit configured to store an invalidation flag associated with the stored access token, in response to receiving the rejection message.