Last I knew with web technology there's no way for the server to force a postback on the client, it's always the client that needs to postback to the server, which means you'll need something on the client that'll know when to get new data from the server. With Ajax it's easy to make the small request and update only a part of the page (instead of the whole thing) like how Facebook and Gmail works.
You could have it set up so that after so long of inactivity the client (again Ajax) makes a request to the server that logs them out.