Method and architecture to provide a secured remote access to private resources

A method for allowing a user remote from a digital data processing system protected by a firewall to gain a secured access to private resources of the digital data processing system, comprising at least the following steps:

• an initial implementation step comprising the stages of:
• a. implementing in said digital data processing system a security storing means for storing security data, said security data including at least data to authenticate said user, security profiles indicating which private resources each user may use and security data associated with said private resources;
• b. implementing in said firewall a centralized security means able to filter remote access requests to said private resources according to rules derived from said security data;
• and
• subsequent operational steps comprising at least the following stages:
• a. at the user's side of the firewall, a first stage including the opening of a session, a second stage including the entering of security data, including at least said remote user's authentication data, and a third stage of requesting an access to a first private resource;
• and
• b. at the digital data processing system's side of the firewall, a first stage, under control of said centralized security means, including a comparison between received security data from said remote user and said authentication data stored in said security means, in order to authenticate said remote user;
• if said authentication succeeds, a second stage providing said centralized security means with a security profile associated with said remote user;
• and a third stage providing said requested first private resource with security data allowing said remote user access to said first private resource.