Systems and methods for controlling sign-on to web applications
AssigneeNasdaq, Inc.
InventorVladimir MITEVSKI
Life of this patent
Estimating the term…
Abstract
The described technology provides a single sign-on capability so that a user who is already signed on to a web application from a client application may not be required to sign-on again when he/she later needs access to the web application from the same or another client application. The technology also provides a multiple login prevention capability to detect multiple sign-on events using the same credentials and disable one or more of the associated multiple sessions.
Claims18
A method for managing concurrent access to a web application, the method performed by a server system comprising at least one hardware processor, the method comprising:
- maintaining, in a session data structure, a first active session corresponding to a user accessing a server-side portion of the web application via a first client device;
- receiving, from a second client device, a request to authenticate the user for access to the web application;
- generating a second session for the user to access the web application via the second client device;
- determining whether the first active session and the generated second session belong to a same predefined realm, wherein the predefined realm comprises a specific combination of the web application and a client device type;
- and
- in the event it is determined that the first active session and the second session belong to the same predefined realm, automatically deactivating the first active session to prevent simultaneous access by the user from the first client device and the second client device.
A system for managing concurrent access to a web application, the system comprising:
- at least one hardware processor;
- and
- at least one memory storing instructions that, when executed by the at least one hardware processor, cause the system to perform operations comprising:
- maintaining, in a session data structure, a first active session corresponding to a user accessing a server-side portion of the web application via a first client device;
- receiving, from a second client device, a request to authenticate the user for access to the web application;
- generating a second session for the user to access the web application via the second client device;
- determining whether the first active session and the generated second session belong to a same predefined realm, wherein the predefined realm comprises a specific combination of the web application and a client device type;
- and
- in the event it is determined that the first active session and the second session belong to the same predefined realm, automatically deactivating the first active session to prevent simultaneous access by the user from the first client device and the second client device.
A non-transitory computer-readable storage medium storing instructions for managing concurrent access to a web application, the instructions, when executed by at least one hardware processor of a server system, causing the server system to perform operations comprising:
- maintaining, in a session data structure, a first active session corresponding to a user accessing a server-side portion of the web application via a first client device;
- receiving, from a second client device, a request to authenticate the user for access to the web application;
- generating a second session for the user to access the web application via the second client device;
- determining whether the first active session and the generated second session belong to a same predefined realm, wherein the predefined realm comprises a specific combination of the web application and a client device type;
- and
- in the event it is determined that the first active session and the second session belong to the same predefined realm, automatically deactivating the first active session to prevent simultaneous access by the user from the first client device and the second client device.
Dependencies are inferred from the claim text.