AUTHENTICATION IN A SMART THIN CLIENT SERVER

• US 20130042312A1
• Filed: 05/11/2012
• Published: 02/14/2013
• Est. Priority Date: 08/09/2011
• Status: Abandoned Application

• Current Assignee: MobileFrame LLC
• Original Assignee: MobileFrame LLC
• Inventors: WICKMAN, Glenn W.
• Application Number:
  US13/470,152
• Publication Number:
  US 20130042312A1
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms

Abstract

In a first embodiment of the present invention, a method for starting a session between a user and a smart thin client server is provided, wherein the smart thin client server permits users to create, manage, and deploy enterprise applications, the method comprising: receiving a request to initiate a session from a user, wherein the request does not include log-in credentials; selecting an anonymous account from a pool of anonymous accounts; obtaining credentials from the anonymous account; and establishing a session for the user using the credentials from the anonymous account.

Claims

1. A method for starting a session between a user and a smart thin client server, wherein the smart thin client server permits users to create, manage, and deploy enterprise applications, the method comprising:

receiving a request to initiate a session from a user, wherein the request does not include log-in credentials;

selecting an anonymous account from a pool of anonymous accounts;

obtaining credentials from the anonymous account; and

establishing a session for the user using the credentials from the anonymous account.

2. The method of claim 1, wherein the pool of anonymous accounts is limited in number in order to aid in limiting the number of simultaneous anonymous connections to the smart thin client server.

3. The method of claim 1, wherein the request does not include log-in credentials because the user is unwilling to provide log-in credentials.

4. The method of claim 1, wherein the request does not include log-in credentials because the user is unable to provide log-in credentials.

5. A method for maintaining a session between a smart thin client and a smart thin client server, wherein the smart thin client server permits a user to create, manage, and deploy enterprise applications via the smart thin client, the method comprising:

detecting a log-off event for the session between the smart thin client and the smart thin client server; and

saving, by the smart thin client server, state information for the session, in a record containing a user identification corresponding to a user of the smart thin client.

6. The method of claim 5, wherein the log-off event is a user explicitly logging off of the session.

7. The method of claim 5, wherein the log-of event is inferred from a lack of activity of a user of the smart thin client.

8. The method of claim 5, wherein the log-off event is inferred from detection of a shut-down notice from an operating system of the client.

9. The method of claim 5, wherein the log-off event includes an explicit request to log-off from an enterprise application managed by the smart thin client server.

10. The method of claim 5, wherein the state information saved by the smart thin client server is configurable by a user of the smart thin client.

11. The method of claim 5, wherein the state information includes application authoring state and state of variable for data collected by applications managed by the smart thin client server on behalf of the smart thin client.

12. The method of claim 5, wherein the smart thin client is unable to store state information for the session.

13. The method of claim 12, wherein the smart thin client is unable to store cookies.

14. The method of claim 5, further comprising:

receiving a command to resume the session;

prompting the user for credentials;

sending the credentials and a transaction identification to a resume handler;

receiving an affirmative response from the resume handler; and

updating an internal client session identification with a new session identification.

15. The method of claim 14, resume handler performs the following:

creating as session for the user based on credentials provided;

determining if the last transaction identification on the session is the same as a transaction identification of a requester; and

returning an affirmative if the last transaction identification on the session is the same as a transaction identification of the requester.

16. A smart thin client server for communication with one or more smart thin clients, the smart thin client server comprising:

a login/authentication handler configured to generate a login page;

an anonymous account pool containing a plurality of anonymous accounts; and

a session manager configured to, when a user does not enter log-in information in the login page but still requests a session, obtain credential information from an anonymous account in the anonymous account pool and create a session using the obtained credential information.

17. A smart thin client server for communication with one or more smart thin clients, the smart thin client server comprising:

a login/authentication handler configured to generate a login page;

a session manager configured to generate a session for a user;

a memory storing a web session for the session;

a session rendering engine;

a value distribution handler;

an image distribution handler;

a dynamic value distribution handler; and

a server management handler;

wherein the session manager is further configured to;

detect a log-off event for the session; and

save state information for the session, in a record containing a user identification corresponding to the user.

18. The smart thin client server of claim 17, wherein the web session includes:

an application/logic definition;

one or more presentation definitions;

application data; and

web session properties.

19. An apparatus for starting a session between a user and a smart thin client server, wherein the smart thin client server permits users to create, manage, and deploy enterprise applications, the apparatus comprising:

means for receiving a request to initiate a session from a user, wherein the request does not include log-in credentials;

means for selecting an anonymous account from a pool of anonymous accounts;

means for obtaining credentials from the anonymous account; and

means for establishing a session for the user using the credentials from the anonymous account.

20. An apparatus for maintaining a session between a smart thin client and a smart thin client server, wherein the smart thin client server permits a user to create, manage, and deploy enterprise applications via the smart thin client, the apparatus comprising:

means for detecting a log-off event for the session between the smart thin client and the smart thin client server; and

means for saving, by the smart thin client server, state information for the session, in a record containing a user identification corresponding to a user of the smart thin client.