MAINTAINING SESSION ACROSS PLURAL PROVIDING DEVICES

• US 20170195426A1
• Filed: 12/31/2015
• Published: 07/06/2017
• Est. Priority Date: 12/31/2015
• Status: Abandoned Application

• Current Assignee: Ricoh Company Limited
• Original Assignee: Ricoh Company Limited
• Inventors: Tanaka, Shun
• Application Number:
  US14/985,597
• Publication Number:
  US 20170195426A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/145 avoiding end of session, e.g. keep-alive, heartbeats, resumption message or wake-up for inactive or interrupted session
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04W 12/086 using security domains

Abstract

Systems, apparatuses and methodologies can be provided to facilitate resumption of a session that was commenced by a client device with a session issuing device, on another service (or content) providing device, under any of various different circumstances. Thus, the client device can obtain the requested service, even if the session issuing device cannot complete the session.

Claims

1. A system configured to maintain a content or service access session across any of multiple content or service devices connected to a network, the system comprising:

plural providing devices, each providing device providing access to assigned services to client devices;

a central device that tracks devices and sessions in the system; and

a client device that communicates with a first providing device amongst the plural providing devices, to request access to a requested service,

wherein the first providing device communicates the service request of the client device to the central device and receives from the central device, (a) a service list specifying service providing devices available to provide the requested service and (b) a service client mapping associating the client device with the service list, and the first providing device creates, and registers in local cache, a session including a client identifier identifying the client device, issuer information identifying the first providing device as session issuer, a delegation list specifying the service providing devices available to provide the requested service, and a session time-to-live (TTL), and communicates the session to the client device, and

wherein when the client device communicates with an other providing device to request the other providing device to resume the session for the client device to obtain the requested service, the other providing device verifies the session and communicates with the session issuer to determine whether the session has been revoked, and if the session has not been revoked and the other providing device validates the session, the other providing device permits the session to resume with the other providing device providing the requested service associated with the session to the client device.

2. The system as claimed in claim 1, wherein the service list specifies for each specific service amongst plural specified services, one or more service providing devices amongst the plural providing devices delegated to provide the specific service, to the client device or to a client group with which the client device is associated.

3. The system as claimed in claim 1, wherein the central device deploys the service client mapping and the service list, to each of the plural providing devices in the system.

4. The system as claimed in claim 1, wherein the first providing device maintains sessions registered in the local cache, and when the TTL of the registered session has expired, the first providing device revokes the session.

5. The system as claimed in claim 1, wherein when the other providing device verifies the session, the other providing device checks whether the TTL of the session has expired, and if the TTL of the session has expired, the other providing device does not validate the session and revokes the session.

6. The system as claimed in claim 1,

wherein the service list specifies for each specific service amongst plural specified services, one or more service providing devices amongst the plural providing devices delegated to provide the specific service, and the central device deploys the service list to each of the plural providing devices in the system, and

wherein when the other providing device verifies the session, the other providing device checks whether the service list specifying the devices available to provide the requested service is stored locally, and if the service list specifying the devices available to provide the requested service is not stored locally, the other providing device does not validate the session.

7. The system as claimed in claim 6, wherein the other providing device checks whether the other providing device is specified on the service list as one of the devices available to provide the requested service, and if the other providing device is not specified on the service list as one of the devices available to provide the requested service, the other providing device does not validate the session.

8. The system as claimed in claim 1, wherein when the client device performs logout of the session with the other providing device, the other providing device communicates with the session issuer to revoke the session.

9. The system as claimed in claim 1, wherein the client device is configured to select any service providing device amongst the service providing devices specified on the delegation list of the session, and request the selected service providing device to perform logout of the session.

10. The system as claimed in claim 1, wherein when the selected service providing device performs logout of the session, the selected service providing device communicates with the session issuer to revoke the session, and the session issuer deletes the session from local cache of the session issuer.

11. The system as claimed in claim 1, wherein the service list specifies for each specific service amongst plural specified services, one or more service providing devices amongst the plural providing devices delegated to provide the specific service, and the first providing device communicates the delegation list associated with the client device or with a client group with which the client device is associated, to the client device.

12. The system as claimed in claim 1, wherein the session associates the delegation list with the client device or with a client group with which the client device is associated.

13. The system as claimed in claim 1, wherein the client device is configured with failover provisions to communicate with the other providing device to request to resume the session with the other providing device when session communication with the first providing device fails.

14. The system as claimed in claim 1, wherein the client device is configured with load balancing provisions to communicate with the other providing device to request to resume the session with the other providing device when the first providing device does not process the session within the TTL of the session or when an estimated rate of session processing by the first providing device suggest that the session will not be completed by the first providing device within the TTL of the session.

15. The system as claimed in claim 1, wherein the central device registers for each providing device the services assigned to the providing device, and transmits to the plural providing devices an all services list indicating the assigned services per providing device amongst the plural providing devices.

16. A method for maintaining a content or service access session across any of plural content or service providing devices in a networked system, each providing device providing access to assigned services to client devices, and a central device tracking devices and sessions in the networked system, the method comprising:

receiving by a requested providing device amongst the plural providing devices, from a client device, a request to access a requested service;

determining by the requested providing device that the requested providing device is assigned to perform the requested service;

communicating, by the requested providing device, the service request of the client device to the central device and receiving from the central device (a) a service list specifying service providing devices available to provide the requested service and (b) a service client mapping associating the client device with the service list, and the first providing device creates; and

creating by the requested providing device, and registering in local cache of the requested providing device, a session including a client identifier identifying the client device, issuer information identifying the requested providing device as session issuer, a delegation list specifying the service providing devices available to provide the requested service, and a session time-to-live (TTL), and communicating the session to the client device; and

receiving, by the requested providing device from an other providing device after the session has been disrupted, a request for said other providing device to resume the session, and determining whether the session has been revoked, and if the session has not been revoked and said other providing device validates the session, permitting the session to resume with the other providing device providing the requested service associated with the session to the client device.

17. A method for maintaining a content or service access session across any of plural content or service providing devices in a networked system, each providing device providing access to assigned services to client devices, and a central device tracking devices and sessions in the networked system, the method comprising:

transmitting by a client device to a requested providing device amongst the plural providing devices a request to access a requested service;

receiving, by the client device from the requested providing device, session information for a session created by the requested providing device in response to the request to access the requested service, the session information including a client identifier identifying the client device, issuer information identifying the requested providing device as session issuer, a delegation list specifying the service providing devices available to provide the requested service, and a session time-to-live (TTL);

transmitting by the client device to an other providing device, after the session has been disrupted, a request for said other providing device to resume the session; and

communicating, if the session has not been revoked and said other providing device validates the session, with the other providing device to resume the session, with the other providing device providing the requested service associated with the session to the client device.