Session management over a stateless protocol

• US 6,496,824 B1
• Filed: 02/19/1999
• Issued: 12/17/2002
• Est. Priority Date: 02/19/1999
• Status: Expired due to Term

• Current Assignee: Trivnet Ltd. (Thales SA)
• Original Assignee: Trivnet Ltd. (Thales SA)
• Inventors: Wilf, Saar
• Primary Examiner(s): Corrielus, Jean M.
• Application Number:
  US09/253,137
• Time in Patent Office: 1,397 Days
• Field of Search: 709/226, 709/227, 709/228, 709/201, 707/5, 707/1, 707/10, 707/7, 370/311, 370/351, 705/52, 705/77, 713/170, 713/171, 713/201
• US Class Current: 707/688
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/16 Payments settled via telecommunication systems
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 69/327 in the session layer [OSI layer 5]
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: Y10S 707/99931 Database or file accessing
• CPC Class Codes: Y10S 707/99935 Query augmenting and refining, e.g. inexact access
• CPC Class Codes: Y10S 707/99937 Sorting

Abstract

A method for session management over a stateless protocol the steps of comparing a first plurality of identifiers contained in a first request with a second plurality of identifiers contained in a second request, and associating the second request with the first request when the comparison is successful. The method may also include the step of calculating a total statistical significance for the plurality of identifiers. The step of associating is performed only when the total statistical significance is greater than a predetermined required significance level. A token for session management over a stateless protocol is formed by digitally hashing a plurality of identifiers contained in a request. The token may have a total significance calculated from a statistical significance associated with each of the plurality of identifiers.

Claims

1. A method for session management over a stateless protocol, the is method comprising the steps of:

receiving a request containing a plurality of identifiers;

generating a hash of at least one of said plurality of identifiers;

if said generated hash is incompatible with previously generated hashes;

associating information with said generated hash; and

sending a response based upon information associated with said generated hash; and

if said generated hash is compatible with a previously generated hash, sending a reponse based upon information previously associated with said previously generated hash.

2. A method according to claim 1, the method further comprising the steps of:

associating a statistical significance value with each of said at least one identifiers;

calculating a total significance for said hash from all of said associated values; and

if said generated hash is incompatible with previously generated hashes;

obtaining a user identification;

associating-said user identification with said generated hash;

wherein said steps of sending a response are performed only when said total statistical significance is greater than a predetermined required significance level, and

wherein said response is also based upon said user identification.