System and method for protecting user logoff from web business transactions

A computer program product for assisting a user conducting a transaction on a secure site of a server to implicitly logoff from the secure site, comprising:

• the server including:
• a secure transaction protection module that tracks a user's access state to the server;
• a database in communication with the secure transaction protection module, for storing data to be accessed by the user;
• an identification module for validating the user's access to the database;
• and
• a notification module for notifying the secure transaction protection module of a user's request to initiate a session on the server;
• wherein if the user selects an insecure site while logged on to the secure site of the server, the notification module sends a warning notice to the user to alert the user of an impending logoff from the secure site, and further sends a termination command to the secure transaction protection module for implicitly logging off the user from the secure site;
• and
• wherein the secure transaction Protection module causes the session to be terminated in response to the termination command, absent an instruction from the user to maintain a connection with the secure site.

A method for implicitly logging off a user conducting a transaction on a secure site of a server from the secure site, comprising:

• tracking a user's access state to the server;
• storing data to be accessed by the user;
• validating the user's access to the database;
• notifying the secure transaction protection module of a user's request to initiate a session on the server;
• wherein if the user selects an insecure site while logged on to the secure site of the server, sending a warning notice to the user to alert the user of an impending logoff from the secure site, and further issuing a termination command to the secure transaction protection module for implicitly logging off the user from the secure site;
• and
• causing the session to be terminated in response to the termination command, absent an instruction from the user to maintain a connection with the secure site.