User session management for web applications

• US 20070169185A1
• Filed: 01/17/2006
• Published: 07/19/2007
• Est. Priority Date: 01/17/2006
• Status: Active Grant

• Current Assignee: Finjan Blue, Inc. (SoftBank Group Corp.)
• Original Assignee: International Business Machines Corporation
• Inventors: Readshaw, Neil
• Granted Patent: US 8,955,094 B2
• Time in Patent Office: Days
• US Class Current: 726/12
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066

Abstract

Methods, systems, and products are provided for user session management for web applications. Embodiments include identifying, by a web application, a user session directive and sending, from the web application to a proxy web security component, an instruction to implement the user session directive. Typical embodiments also include receiving, by the proxy web security component, the instruction to implement the user session directive and implementing, by the proxy web security component, the user session directive.

Claims

1. A method for user session management for web applications, the method comprising:

identifying, by a web application, a user session directive; and

sending, from the web application to a proxy web security component, an instruction to implement the user session directive.

2. The method of claim 1 further comprising:

receiving, by the proxy web security component, the instruction to implement the user session directive; and

implementing, by the proxy web security component, the user session directive.

3. The method of claim 1 wherein the user session directive comprises a directive to re-authenticate the user.

4. The method of claim 2 wherein implementing the user session directive further comprises re-authenticating the user.

5. The method of claim 2 wherein the user session directive comprises a directive to re-authenticate the user using a different authentication method than previously implemented in the same user session.

6. The method of claim 5 wherein implementing the user session directive further comprises re-authenticating the user using a different authentication method than previously implemented in the same user session.

7. The method of claim 2 wherein the user session directive comprises a directive to terminate the user session.

8. The method of claim 7 wherein implementing the user session directive further comprises terminating the user session.

9. The method of claim 1 wherein sending, from the web application to a proxy web security component, an instruction to implement the user session directive further comprises sending an HTTP response message containing a value instructing a proxy web security component to implement the user session directive.

10. The method of claim 9 wherein sending an HTTP response message containing a value instructing a proxy web security component to implement the user session directive further comprises inserting the value instructing the proxy web security component to implement the user session directive in a Pragma header field.

11. A system for user session management for web applications, the system comprising:

a computer processor;

a computer memory operatively coupled to the computer processor, the computer memory having disposed within it a web application including computer program instructions capable of;

identifying a user session directive; and

sending, to a proxy web security component, an instruction to implement the user session directive.

12. The system of claim 11 further comprising:

another computer processor;

a computer memory operatively coupled to the other computer processor, the computer memory having disposed within it a proxy web security component including computer program instructions capable of;

receiving the instruction to implement the user session directive; and

implementing the user session directive.

13. The system of claim 12 wherein computer program instructions capable of identifying a user session directive further comprise computer program instructions capable of identifying a directive to re-authenticate the user.

14. The system of claim 13 wherein computer program instructions capable of implementing the user session directive further comprise computer program instructions capable of re-authenticating the user.

15. The system of claim 12 wherein computer program instructions capable of identifying a user session directive further comprise computer program instructions capable of identifying a directive to re-authenticate the user using a different authentication system than previously implemented in the same user session.

16. The system of claim 15 wherein computer program instructions capable of implementing the user session directive further comprise computer program instructions capable of re-authenticating the user using a different authentication method than previously implemented in the same user session.

17. The system of claim 12 wherein computer program instructions capable of identifying a required user session directive further comprise computer program instructions capable of identifying a directive to terminate the user session.

18. The system of claim 17 wherein computer program instructions capable of implementing the user session directive further comprise computer program instructions capable of terminating the user session.

19. The system of claim 11 wherein computer program instructions capable of sending an instruction to implement the user session directive further comprise computer program instructions capable of sending an HTTP response message containing a value instructing a proxy web security component to implement the user session directive.

20. The system of claim 19 wherein computer program instructions capable of sending an HTTP response message containing a value instructing a proxy web security component to implement the user session directive further comprise computer program instructions capable of inserting the value instructing the proxy web security component to implement the user session directive in a Pragma header field.

21. A computer program product for user session management for web applications, the computer program product disposed upon a signal bearing medium, the computer program product comprising:

computer program instructions for identifying a user session directive; and

computer program instructions for sending, to a proxy web security component, an instruction to implement the user session directive.

22. The computer program product of claim 21 further comprising:

computer program instructions for receiving the instruction to implement the user session directive; and

computer program instructions for implementing the user session directive.

23. The computer program product of claim 22 wherein computer program instructions for identifying a user session directive further comprise computer program instructions for identifying a directive to re-authenticate the user.

24. The computer program product of claim 23 wherein computer program instructions for implementing the user session directive further comprise computer program instructions for re-authenticating the user.

25. The computer program product of claim 22 wherein computer program instructions for identifying a user session directive further comprise computer program instructions for identifying a directive to re-authenticate the user using a different authentication computer program product than previously implemented in the same user session.

26. The computer program product of claim 25 wherein computer program instructions for implementing the user session directive further comprise computer program instructions for re-authenticating the user using a different authentication computer program product than previously implemented in the same user session.

27. The computer program product of claim 22 wherein computer program instructions for identifying a required user session directive further comprise computer program instructions for identifying a directive to terminate the user session.

28. The computer program product of claim 27 wherein computer program instructions for implementing the user session directive further comprise computer program instructions for terminating the user session.

29. The computer program product of claim 21 wherein computer program instructions for sending, from the web application to a proxy web security component, an instruction to implement the user session directive further comprise computer program instructions for sending an HTTP response message containing a value instructing a proxy web security component to implement the user session directive.

30. The computer program product of claim 29 wherein computer program instructions for sending an HTTP response message containing a value instructing a proxy web security component to implement the user session directive further comprise computer program instructions for inserting the value instructing the proxy web security component to implement the user session directive in a Pragma header field.

31. The computer program product of claim 21 wherein the signal bearing medium comprises a recording medium.

32. The computer program product of claim 21 wherein the signal bearing medium comprises a transmission medium.