Resource server proxy method and system

A computing system comprising a computer processor coupled to a computer-readable memory unit, said memory unit comprising a resource server software application and instructions that when executed by the computer processor implements a resource request method, said method comprising:

• initializing, by said computing system, said resource server software application, wherein said resource server software application comprises an internal session cache, and wherein said internal session cache comprises an internal data structure within said resource server software application;
• receiving, by said resource server software application, first configuration data, wherein said configuration data comprises session key life data comprising a session key life variable;
• receiving, by said resource server software application from a first requestor, a first authentication request, first credentials data associated with said first requestor, and a first address associated with said first requestor, wherein said first credentials data comprises a first session ID;
• transmitting, by said resource server software application to a user directory, said first credentials data and a first request for groups associated with said first requestor;
• receiving, by said resource server software application from said user directory, first group IDs identifying a first group associated with said first requestor;
• generating, by said resource server software application, a first session key associated with said first requestor, wherein said first session key comprises a randomly generated sequence of characters;
• calculating, by said computer processor executing said resource server software application, a first specified lifetime associated with said first session key, wherein said calculating said first specified lifetime comprises adding said session key life data to a first current time;
• storing within said internal session cache, by said resource server software application, said first session key, said first session ID, said first address, said first group IDs, and said first specified lifetime;
• periodically determining, by said resource server software application, if said first session key and said session key life data should be updated, wherein said periodically determining is associated with a master cleanup period comprising a specified period of time that said resource server software application will wait between scans of said internal session cache for expired sessions;
• establishing, by said resource server software application, a secure communication channel between said first requestor, said resource server software application, and a backend resource server;
• transmitting, by said resource server software application to said first requestor based on said results of said periodically determining, said first session key.

A computer program product, comprising a computer readable storage device having a computer readable program code embodied therein, said computer readable program code including a resource server software application comprising an algorithm that when executed by a computer processor of a computing system implements a method comprising:

• initializing, by said computing system, said resource server software application, wherein said resource server software application comprises an internal session cache, and wherein said internal session cache comprises an internal data structure within said resource server software application;
• receiving, by said resource server software application, first configuration data, wherein said configuration data comprises session key life data comprising a session key life variable;
• receiving, by said resource server software application from a first requestor, a first authentication request, first credentials data associated with said first requestor, and a first address associated with said first requestor, wherein said first credentials data comprises a first session ID;
• transmitting, by said resource server software application to a user directory, said first credentials data and a first request for groups associated with said first requestor;
• receiving, by said resource server software application from said user directory, first group IDs identifying a first group associated with said first requestor;
• generating, by said resource server software application, a first session key associated with said first requestor, wherein said first session key comprises a randomly generated sequence of characters;
• calculating, by said computer processor executing said resource server software application, a first specified lifetime associated with said first session key, wherein said calculating said first specified lifetime comprises adding said session key life data to a first current time;
• storing within said internal session cache, by said resource server software application, said first session key, said first session ID, said first address, said first group IDs, and said first specified lifetime;
• periodically determining, by said resource server software application, if said first session key and said session key life data should be updated, wherein said periodically determining is associated with a master cleanup period comprising a specified period of time that said resource server software application will wait between scans of said internal session cache for expired sessions;
• establishing, by said resource server software application, a secure communication channel between said first requestor, said resource server software application, and a backend resource server;
• transmitting, by said resource server software application to said first requestor based on said results of said periodically determining, said first session key.