Whitelist construction

Patent metadata

Field	Value
Publication number	US-2017118167-A1
Application number	US-201615249232-A
Country	US
Kind code	A1
Filing date	Aug 26, 2016
Priority date	Oct 22, 2015
Publication date	Apr 27, 2017
Grant date	—

Abstract

Techniques are provided for of constructing a whitelist of redirection uniform resource locators (URLs). A method can include receiving, by a computing system executing an access manager application, a request to log out a user from an application executing on a device; determining, by the access manager application, a redirection address for the application; validating, by the access manager application, the redirection address; and based on the validation, causing, by the access manager application, the application to perform one of redirecting the user to the redirection address and determining addition of the redirection address to a list of valid redirection addresses.

First claim

What is claimed is:

1 . A method comprising:
receiving, by a computing system executing an access manager application, a request to log out a user from an application executing on a device; determining, by the access manager application, a redirection address for the application; validating, by the access manager application, the redirection address; and based on the validation, causing, by the access manager application, the application to perform one of redirecting the user to the redirection address and determining whether to add the redirection address to a list of valid redirection addresses.

2 . The method according to claim 1 , wherein the application redirects the user to the redirection address in response to the redirection address being on the list of valid redirection addresses.

3 . The method according to claim 2 , wherein the list of valid redirection addresses comprises one or more approved redirection addresses.

4 . The method according to claim 2 , wherein the list of valid redirection addresses comprises one of a machine-learned address based on learned previous activity and a user-based address that is based on a user activity.

5 . The method according to claim 1 , wherein the determining the addition of the redirection address to the list of valid redirection addresses comprises:
determining that the redirection address corresponds to a predetermined event; and in response to the determining that the redirection address corresponds to the predetermined event, adding the redirection address to the list of valid redirection addresses.

6 . The method according to claim 5 , wherein the predetermined event comprises one of application registration during which the application is registered with the access manager application, product integration during which one or more products are added to operate with the access manager application, and log-in page addition in which a new log-in page for the application is added.

7 . The method according to claim 1 , wherein the determining the addition of the redirection address to the list of valid redirection addresses comprises:
determining that the redirection address corresponds to a predetermined user action; and in response to the determining that the redirection address corresponds to the predetermined user action, adding the redirection address to the list of valid redirected addresses.

8 . The method according to claim 7 , wherein the predetermined user action comprises user confirmation of the redirection address.

9 . The method according to claim 1 , wherein the list of valid redirection addresses comprises at least one of a system-level list that applies to users of the access management system and a user-level list that applies to particular users of the access management system.

10 . The method according to claim 9 , wherein the system-level list comprises end URLs that are applicable to all access management system users.

11 . The method according to claim 9 , wherein the user-level list comprises one or more end URLs that are applicable to a particular access management system user.

12 . The method according to claim 1 , wherein the redirection address is a Uniform Resource Locator (URL).

13 . The method according to claim 1 , wherein the redirection address comprises a logout Uniform Resource Locator (URL) and an end URL.

14 . A non-transitory computer-readable storage medium storing a plurality of instructions executable by one or more processors to cause the one or more processors to perform operations, comprising:
receiving, by a computing system executing an access manager application, a request to log out a user from an application executing on a device; determining, by the access manager application, a redirection address for the application; validating, by the access manager application, the redirection address; and based on the validation, causing, by the access manager application, the application to perform one of redirecting the user to the redirection address, and determining addition of the redirection address to a list of valid redirection addresses.

15 . The computer-readable storage medium according to claim 14 , wherein the application redirects the user to the redirection address in response to the redirection address being on the list of valid redirection addresses.

16 . The computer-readable storage medium according to claim 15 , wherein the list of valid redirection addresses comprises one or more approved redirection addresses.

17 . The method according to claim 15 , wherein the list of valid redirection addresses comprises one of a machine-learned address based on learned previous activity and a user-based address that is based on a user activity.

18 . A system comprising:
a memory; and one or more processors coupled to the memory and configured to:
receive, by a computing system executing an access manager application, a request to log out a user from an application executing on a device;
determine, by the access manager application, a redirection address from the application;
determine, by the access manager application, validity of the redirection address; and
based on the validation, cause, by the access manager application, the application to perform one of redirecting the user to the redirection address, and determining addition of the redirection address to a list of valid redirection addresses.

19 . The computer-readable storage medium according to claim 18 , wherein the application redirects the user to the redirection address in response to the redirection address being on the list of valid redirection addresses.

20 . The computer-readable storage medium according to claim 18 , wherein the list of valid redirection addresses comprises at least one of a system-level list that applies to users of the access management system and a user-level list that applies to particular users of the access management system.

Assignees

• Oracle Int Corp

Inventors

• Subramanya Ramya
• Martin Madhu
• Uppalapati Venkatesh

Classifications

• H04L41/0806

  for initial configuration or provisioning, e.g. plug-and-play · CPC title

• G06F16/958

  Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking · CPC title

• H04L63/0815

  providing single-sign-on or federations · CPC title

• H04L43/0876

  Network utilisation, e.g. volume of load or congestion level · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title