MAINTAINING SESSIONS USING COOKIE UPDATION

• US 20070299928A1
• Filed: 06/22/2006
• Published: 12/27/2007
• Est. Priority Date: 06/22/2006
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: McMahan, Paul F., Kohli, Pooja
• Application Number:
  US11/425,738
• Publication Number:
  US 20070299928A1
• Time in Patent Office: Days
• US Class Current: 709/217
• CPC Class Codes: H04L 2463/121 Timestamp cryptographic mechanisms or cryptographic arrangements involving time stamps H04L9/3297
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/28 Timers or timing mechanisms used in protocols

Abstract

The present invention provides a methodology for maintaining user sessions using cookie updation. A method in accordance with an embodiment of the present invention includes: periodically updating a value in a session cookie using a program implemented in a source code of a web page; stopping the updating of the value when a user navigates away from the web page; and automatically logging the user out of the web page if the value is determined to be invalid by a web server.

Claims

1. A method for maintaining a session, comprising:

periodically updating a value in a session cookie using a program implemented in a source code of a web page;

stopping the updating of the value when a user navigates away from the web page; and

automatically logging the user out of the web page if the value is determined to be invalid.

2. The method of claim 1, wherein the program comprises a JavaScript.

3. The method of claim 1, further comprising:

continuing the updating of the value as long as the user does not navigate away from the web page.

4. The method of claim 1, further comprising:

examining the value at a web server; and

automatically logging the user out of the web page if the web server determines that the value is invalid.

5. The method of claim 1, wherein the value comprises a timestamp.

6. The method of claim 5, further comprising:

analyzing the timestamp to determine how long a user has been viewing the web page.

7. The method of claim 1, further comprising:

encrypting the session cookie.

8. The method of claim 6, wherein the encrypting further comprises:

receiving a key with the program from a web server; and

encrypting the session cookie using the key.

9. A method for maintaining a session, comprising:

sending source code for a web page from a web server to a web browser on a client device, the source code including a program for periodically updating a value;

examining the value at the web server; and

automatically logging a user out of the web page if the web server determines that the value is invalid.

10. A system for maintaining a session, comprising:

a system for periodically updating a value in a session cookie using a program implemented in a source code of a web page;

a system for stopping the updating of the value when a user navigates away from the web page; and

a system for automatically logging the user out of the web page if the value is determined to be invalid.

11. The system of claim 10, wherein the program comprises a JavaScript.

12. The system of claim 10, wherein the system for periodically updating continues to update the value as long as the user does not navigate away from the web page.

13. The system of claim 10, further comprising:

a system for examining the value at a web server; and

a system for automatically logging the user out of the web page if the web server determines that the value is invalid.

14. The system of claim 10, wherein the value comprises a timestamp.

15. The system of claim 14, further comprising:

a system for analyzing the timestamp to determine how long a user has been viewing the web page.

16. The system of claim 10, further comprising:

a system for encrypting the session cookie.

17. The system of claim 16, wherein the system for encrypting further comprises:

a system for receiving a key with the program from a web server; and

a system for encrypting the session cookie using the key.

18. A program product stored on a computer readable medium for maintaining a session, the computer readable medium comprising program code for:

periodically updating a value in a session cookie using a program implemented in a source code of a web page;

stopping the updating of the value when a user navigates away from the web page; and

automatically logging the user out of the web page if the value is determined to be invalid.

19. The program product of claim 18, further comprising program code for:

examining the value at a web server; and

automatically logging the user out of the web page if the web server determines that the value is invalid.

20. The program product of claim 18, wherein the value comprises a timestamp.

21. The program product of claim 18, further comprising program code for:

receiving a key with the program from a web server; and

encrypting the session cookie using the key.