Method and apparatus for cryptographic stateless protocol using asymmetric encryption

• US 20020049900A1
• Filed: 01/05/2001
• Published: 04/25/2002
• Est. Priority Date: 10/06/2000
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Patrick, Kyle N.
• Application Number:
  US09/754,863
• Publication Number:
  US 20020049900A1
• Time in Patent Office: Days
• US Class Current: 713/151
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30

Abstract

Prior methods of encryption of the token or “cookie” communicated to a client by a server use a symmetric method of encryption which does not permit the client to look at the state information. The present invention permits the client to view the state information, but not modify it, by using an asymmetric encryption method.

Claims

1. A method of communicating state information between a server and a client having a memory, the method comprising the steps of:

i) providing an asymmetric encryption method having a public key provided to said client and said server and a private key provided to said server;

ii) said client communicating a client request to said server to perform a server action;

iii) said server responsive to receiving said client request, performing said server action and creating a state object containing post-action state information;

iv) encrypting said state object using said private key;

v) communicating said encrypted state object and a result of said server action to said client; and

vi) storing said encrypted state object in said client memory.

2. A method according to claim 1, further comprising the steps of:

vii) said client communicating a subsequent client request to said server to perform a server action and said server receiving from said client said encrypted state object with said subsequent client request; and

viii) said server, responsive to receiving the subsequent client request, decrypting said received encrypted state object using said public key.

3. The method according to claim 2, further comprising the step of:

ix) said server, after decrypting said received encrypted state object, verifying whether said received state object has been modified.

4. The method according to claim 1 wherein said server is stateless and said client is stateful.

5. The method according to claim 1 comprising the further step of said client decrypting said state object using said public key.

6. The method according to claim 3, said method comprising the further steps of:

x) said server, after verifying that said received state object has not been modified, using state information contained therein to perform the requested action;

xi) responsive to performing the requested action, replacing previous state information with new state information in said state object;

xii) encrypting said state object with said private key; and

xiii) sending said encrypted state object and a result of said server action to the client.

7. A data processing system for communicating state information between a server and a client having a memory, said data processing system comprising:

i) means for receiving a client request to perform a server action;

ii) means, responsive to said client request receiving means, for performing said server action and creating a state object containing post-action state information;

iii) means for encrypting said state object comprising an asymmetric encryption method having a public key provided to said client and said server and a private key provided to said server; and

iv) means for communicating said encrypted state object and a result of said server action to said client.

8. A data processing system according to claim 7, further comprising:

v) means for receiving from said client said encrypted state object with a subsequent client request to perform a server action;

vi) means, responsive to said means for receiving said subsequent client request, for decrypting said received encrypted state object using said public key; and

vii) means for verifying whether said received state object has been modified.

9. A data processing system according to claim 8, further comprising:

viii) means, responsive to said verifying means, for using state information contained in said state object to perform said requested server action;

vi) means for replacing previous state information with new state information in said state object;

vii) means for encrypting said state object using said private key; and

viii) means for sending said encrypted state object and a result of said server action to said client.

10. The data processing system according to claim 9 further comprising means for receiving said encrypted state object;

means for decrypting said state object using said public key; and

means for storing said encrypted state object.

11. A computer program product for communicating state information between a server and a client having a memory, said server provided with a public key and a private key of an asymmetric encryption method and said client provided with a public key of an asymmetric encryption method, said computer program product comprising:

a computer usable medium having computer readable program code means embodied in said medium for receiving a client request to perform a server action;

said computer usable medium having computer readable program code means embodied in said medium, responsive to said client request receiving means, for performing said server action and creating a state object containing post-action state information;

said computer usable medium having computer readable program code means embodied in said medium for encrypting the created state object with the private key of said asymmetric encryption method; and

said computer usable medium having computer readable program code

means embodied in said medium, responsive to said encrypting means, for sending said encrypted state object and a result of said server action to said client.

12. A computer program product according to claim 11, further comprising:

computer readable program code means embodied in said medium for receiving from said client said encrypted state object with a subsequent client request to perform a server action;

computer readable program code means embodied in said medium, responsive to said means for receiving the subsequent client request, for decrypting said received encrypted state object using said public key; and

computer readable program code means embodied in said medium, responsive to said decrypting means, for verifying that the received state object whether said received state object has been modified.

13. A computer program product according to claim 12, further comprising:

computer readable program code means embodied in said medium for replacing previous state information with new state information in said state object;

computer readable program code means embodied in said medium for encrypting said state object using said private key; and

computer readable program code means embodied in said medium for sending said encrypted state object with said new state information and a result of said server action resulting from said subsequent client request to said client.

14. A computer program product for communicating state information between a server and a client having a memory, said server provided with a public key and a private key of an asymmetric encryption method and said client provided with a public key of an asymmetric encryption method, said computer program product comprising:

a computer usable medium having computer readable program code means embodied in said medium for sending a client request to perform a server action;

said computer usable medium having computer readable program code means embodied in said medium for receiving the results of said server action and a state object containing post-action state information wherein said state object is encrypted with said private key of said asymmetric encryption method, and means for storing said state object; and

said computer usable medium having computer readable program code means embodied in said medium for decrypting said state object with the public key of said asymmetric encryption method.