Securing asynchronous client server transactions

A computer implemented method for securing an asynchronous client server transaction, the computer implemented method comprising:

• receiving a request at a first application executing in a data processing system, the request including an application identifier and a version associated with a second application;
• generating a service identifier responsive to a session with the second application being valid, the session comprising the asynchronous client server transaction, and wherein the service identifier is uniquely associated with the asynchronous client server transaction;
• generating a registry at the first application, the registry including information about a set of services available to execute on the data processing system and data available at the data processing system, wherein the second application is permitted to use the set of services and the data;
• sending the service identifier and the information about the set of services and the data from the registry to the second application;
• receiving a sub-request, the sub-request being a part of the asynchronous client server transaction, the sub-request including the service identifier;
• determining a validity of the sub-request by determining whether the service identifier is used in conjunction with the second application and whether the sub-request requests a service identified in the information;
• and
• providing, responsive to the sub-request being valid, the service in response to the sub-request.