System and method for maintaining state between a client and server

• US 20020051541A1
• Filed: 06/13/2001
• Published: 05/02/2002
• Est. Priority Date: 10/30/2000
• Status: Abandoned Application

• Current Assignee: Geocodex LLC
• Original Assignee: Geocodex LLC
• Inventors: Karpf, Ronald S., Glick, Barry J., Seiler, Mark E.
• Application Number:
  US09/880,308
• Publication Number:
  US 20020051541A1
• Time in Patent Office: Days
• US Class Current: 380/258
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A method and apparatus for maintaining state between a client and server while protecting security and privacy allows the server to monitor and maintain a record of the client'"'"'s current transaction status via a unique identifier. Generally, the client generates a unique identifier, which it transmits to web applications on remote servers during transactions. The web applications can track a series of continuous and related requests using this identifier to better serve the client. Thus, by maintaining state with web applications, the clients can take advantage of increased services than otherwise possible operating in a stateless protocol. However, the client is able to periodically change this identifier when the user desires anonymity.

Claims

1. A method for maintaining state between a client and a server, comprising:

generating a state variable including a location value;

utilizing said state variable to maintain state between said client and said server.

2. The method of claim 1, wherein said generating step further comprises generating said location value to correspond to the location of the client.

3. The method of claim 1, wherein said generating step further comprises generating said location value to include a latitude and longitude dimension.

4. The method of claim 3, wherein said generating step further comprises generating said location value to further include an altitude dimension.

5. The method of claim 1, wherein said generating step further comprises generating said state variable to further include a temporal value.

6. The method of claim 5, wherein said generating step further comprises generating said temporal value to correspond to the creation of said state variable.

7. The method of claim 5, wherein said generating step further comprises generating said temporal value to correspond to the invocation of an Internet browser session.

8. The method of claim 1, further comprising the step of deriving an anonymous state variable from said state variable.

9. The method of claim 8, wherein said deriving step further comprises mathematically encoding said state variable into said anonymous state variable.

10. The method of claim 1, wherein said utilizing step further comprises comparing at least a portion of said state variable to a database to identify said client.

11. The method of claim 1, wherein said utilizing step further comprises comparing a portion of said state variable derived from a location value to a database to identify said client.

12. The method of claim 1, wherein said utilizing step further comprises comparing a portion of said state variable derived from a location value corresponding to the location of said client to a database to identify said client.

13. The method of claim 1, wherein said utilizing step further comprises comparing a portion of said state variable derived from a location value comprising a latitude and longitude dimension corresponding to the location of said client to a database to identify said client.

14. The method of claim 1, wherein said utilizing step further comprises comparing a portion of said state variable derived from a location value comprising a latitude, longitude, and altitude dimension corresponding to the location of said client to a database to identify said client.

16. The apparatus of claim 16, wherein said location value corresponds to the location of the client.

17. The apparatus of claim 16, wherein said location value comprises a latitude and longitude dimension.

18. The apparatus of claim 17, wherein said location value further comprises an altitude dimension.

19. The apparatus of claim 15, wherein said state variable further includes a temporal value.

20. The apparatus of claim 19, wherein said temporal value corresponds to the creation of said state variable.

21. The apparatus of claim 19, wherein said temporal value corresponds to the invocation of an Internet browser session.

22. The apparatus of claim 15, further comprising means for deriving an anonymous state variable from said state variable.

23. The apparatus of claim 22, wherein said means for deriving an anonymous state variable further comprises means for mathematically encoding said state variable.

24. The apparatus of claim 15, wherein the means for utilizing said state variable to maintain state between said client and said server further comprises means for comparing at least a portion of said state variable to a database to identify said client.

25. The apparatus of claim 24, wherein said portion of said state variable being compared derives from a location value.

26. The apparatus of claim 25, wherein said location value corresponds to the location of said client.

27. The apparatus of claim 25, wherein said location value comprises a latitude and longitude dimension.

28. The apparatus of claim 27, wherein said location value further comprises an altitude dimension.

30. The system of claim 29, wherein said computer further comprises said means for generating said state variable and said means for utilizing said state variable.

31. The system of claim 30, wherein said computer further comprises said GPS receiver.

15. An apparatus for maintaining state between a client and a server, comprising:

means for generating a state variable including a location value;

means for utilizing said state variable to maintain state between said client and said server.

29. A system for facilitating interaction between a user and a web application on a remote server, comprising:

a computer comprising a processor and memory;

a GPS receiver for generating location values corresponding to said user'"'"'s geographic location;

means for generating a state variable derived from said location values;

means for utilizing said state variable to maintain state between said user and said web application.