Method and system for remotely managing persistent state data

• US 20030061275A1
• Filed: 09/24/2001
• Published: 03/27/2003
• Est. Priority Date: 09/24/2001
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Schwerdtfeger, Richard Scott, Fairweather, Peter Gustav, Detweiler, Samuel R., Brown, Frances C., Tibbitts, Beth Rush, Crayne, Susan, Hanson, Vicki Lynne
• Granted Patent: US 6,961,759 B2
• Time in Patent Office: Days
• US Class Current: 709/203
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A system for removing and saving in an intermediary web server Internet cookies being transmitted from a web content server to a client device. Internet cookies, being persistent client data for a specific user and a specific content provider, typically contain sensitive data, including a history of past purchases or financial information about the user such as a credit card number. To protect the security of the cookies, and to allow an authorized user to use the cookies from multiple devices, such as different desktop computers, PDA'"'"'s or cellular telephones, the cookies are removed from the data response from the web content server and stored in an intermediary web server, where they are accessible to the user.

Claims

1. A method for managing persistent state data in a computer system, said method comprising:

connecting an intermediary proxy machine between a client device and a web content server on a computer system;

removing, at the intermediary proxy machine, at least one persistent state data from a data response being transmitted to the client device;

storing said at least one persistent state data in the intermediary proxy machine;

transmitting a remaining data response without said at least one persistent state data to the client device.

2. The method of claim 1, further comprising:

inserting the persistent data stored in the intermediary proxy machine into a data request being sent from the client device; and

sending the data request with the persistent data to a server application on the web content server.

3. The method of claim 2, further comprising:

identifying an authorized user accessing the intermediary proxy machine;

associating the authorized user with said at least one persistent state data; and

providing access to the persistent state data to the authorized user.

4. The method of claim 2, further comprising:

identifying an authorized user accessing the intermediary proxy machine;

associating the authorized user with said at least one persistent state data;

providing access to the persistent state data to the authorized user; and

denying access to the persistent state data to a non-authorized user.

5. The method of claim 1, wherein the computer system comprises an Internet.

6. The method of claim 1, wherein the connection between the intermediary proxy machine and the web content server is secure.

7. The method of claim 1, wherein the connection between the client device and the intermediary proxy machine is secure.

8. A system for managing persistent state data in a computer system, said system comprising:

means for connecting an intermediary proxy machine between a client device and a web content server on a computer system;

means for removing, at the intermediary proxy machine, at least one persistent state data from a data response being transmitted to the client device;

means for storing said at least one persistent state data in the intermediary proxy machine; and

means for transmitting a remaining data response without said at least one persistent state data to the client device.

9. The system of claim 8, further comprising:

means for inserting the persistent data stored in the intermediary proxy machine into a data request being sent from the client device; and

means for sending the data request with the persistent data to a server application on the web content server.

10. The system of claim 9, further comprising:

means for identifying an authorized user accessing the intermediary proxy machine;

means for associating the authorized user with said at least one persistent state data; and

means for providing access to the persistent state data to the authorized user.

11. The system of claim 9, further comprising:

means for identifying an authorized user accessing the intermediary proxy machine;

means for associating the authorized user with said at least one persistent state data;

means for providing access to the persistent state data to the authorized user; and

means for denying access to the persistent state data to a non-authorized user.

12. The system as in claim 8, wherein the computer system comprises an Internet.

13. The system of claim 8, wherein the connection between the intermediary proxy machine and the web content server is secure.

14. The system of claim 8, wherein the connection between the client device and the intermediary proxy machine is secure.

15. A computer program product for managing a persistent state data in a computer system, said computer program product comprising:

computer program code for connecting an intermediary proxy machine between a client device and a web content server on a computer system;

computer program code for removing, at the intermediary proxy machine, at least one persistent state data from a data response being transmitted to the client device;

computer program code for storing said at least one persistent state data in the intermediary proxy machine; and

computer program code for transmitting a remaining data response without said at least one persistent state data to the client device.

16. The computer program product of claim 15, further comprising:

computer program code for inserting the persistent data stored in the intermediary proxy machine into a data request being sent from the client device; and

computer program code for sending the data request with the persistent data to a server application on the web content server.

17. The computer program product of claim 16, further comprising:

computer program code for identifying an authorized user accessing the intermediary proxy machine;

computer program code for associating the authorized user with said at least one persistent state data; and

computer program code for providing access to the persistent state data to the authorized user.

18. The computer program product of claim 16, further comprising:

computer program code for identifying an authorized user accessing the intermediary proxy machine;

computer program code for associating the authorized user with said at least one persistent state data;

computer program code for providing access to the persistent state data to the authorized user; and

computer program code for denying access to the persistent state data to a non-authorized user.

19. The computer program as in claim 15, wherein the computer system comprises an Internet.

20. The computer program as in claim 15, wherein the connection between the intermediary proxy machine and the web content server is secure.

21. The computer program as in claim 15, wherein the connection between the client device and the intermediary proxy machine is secure.