Method and apparatus for identifying a data communications session

• US 6,742,126 B1
• Filed: 10/07/1999
• Issued: 05/25/2004
• Est. Priority Date: 10/07/1999
• Status: Expired due to Fees

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Roden, Thomas Anthony, Deng, Mingqi, Mann, Joseph F.
• Primary Examiner(s): Barron, Gilberto
• Assistant Examiner(s): Fields, Courtney D.
• Application Number:
  US09/414,386
• Time in Patent Office: 1,692 Days
• Field of Search: 713/201, 713/156, 713/188
• US Class Current: 726/5
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A method and apparatus for using a session identifier to identify a specific data communications session between an apparatus and an external apparatus is disclosed. When a data communications session is initiated between the apparatus and an external apparatus, the external apparatus sends authenticating information to the apparatus. The apparatus uses the authenticating information to determine the identity and the privileges of the external apparatus for the particular session. A unique session identifier is created by the apparatus, and the session identifier is associated with the external apparatus'"'"'s identity and privileges. The session identifier is passed between the apparatus and the external apparatus with each subsequent data communication in the session until the session is terminated. The apparatus uses the session identifier received with the data communications to identify the external apparatus and its privileges and allocate resources accordingly. The session identifier is encoded using a six bit code, thereby making it compatible with the Internet e-mail protocol and while also optimizing data compression. The encoded session identifier may be transmitted by appending it to a URL like a query string.

Claims

1. A method for identifying a session of communication of binary data between an apparatus and an external apparatus, said method comprising:

receiving authenticating information from the external apparatus into the apparatus;

using the authenticating information to identify the external apparatus;

creating a session identifier associated with the session, the session identifier represented by a six-bit code;

transmitting the session identifier to the external apparatus;

receiving the session identifier along with each subsequent transmission of data from the external apparatus to the apparatus until the session is terminated; and

using the session identifier to identify the external apparatus.

2. The method of claim 1, further comprising:

appending the session identifier to a URL prior to said transmitting and said receiving.

3. The method of claim 1, further comprising:

decoding at least portions of the authenticating information from a URL-encoded format.

4. The method of claim 1, wherein the six-bit code is a base64 code.

5. The method of claim 4, wherein the key for the base64 code comprises the string

“

ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789/;

”

.

19. The method of claim 1, wherein said creating comprises:

generating an intermediate sequence for the session identifier;

comparing the intermediate sequence with other intermediate sequences of currently active session identifiers to determine uniqueness; and

encoding the intermediate sequence into the session identifier.

20. The method of claim 19, wherein the intermediate sequence is derived in part from the authentication information of the external apparatus.

21. The method of claim 19, wherein the intermediate sequence comprises a randomly generated sequence.

6. An apparatus for identifying a session of communication of binary data to and from an external apparatus, comprising:

a first memory for storing associations among authenticating information, external apparatus identification information, and a session identifier;

a second memory for storing authenticating information received from the external apparatus;

an external apparatus initiator, said external apparatus initiator identifying the external apparatus by comparing the authenticating information with the associations stored in first memory;

a session identifier creator, said session identifier creator creating a session identifier;

a third memory for storing a session identifier, the session identifier represented by a six-bit code;

a fourth memory for storing a putative session identifier received from the external apparatus;

an external apparatus identifier, the external apparatus identifier identifying the external apparatus by comparing the putative session identifier with the associations stored in first memory.

7. The apparatus of claim 6, further comprising:

a session identifier appender, said session identifier appender appending the session identifier to a URL.

8. The apparatus of claim 6, further comprising:

a decoder, said decoder decoding at least portions of the authenticating information from a URL-encoded format.

9. The apparatus of claim 6, wherein the six-bit code is a base64 code.

10. The apparatus of claim 6, wherein the key for the base64 code comprises the string

“

ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789/;

”

.

22. The apparatus of claim 6, wherein said session identifier creator comprises:

an intermediate sequence generator adapted to generate an intermediate sequence for the session identifier;

a determiner adapted to compare the intermediate sequence with other intermediate sequences of currently active session identifiers to determine uniqueness; and

an encoder adapted to encode the intermediate sequence into the session identifier.

23. The apparatus of claim 22, wherein the intermediate sequence is derived in part from the authentication information of the external apparatus.

24. The apparatus of claim 22, wherein the intermediate sequence comprises a randomly generated sequence.

11. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform a method for identifying a session of communication of binary data between an apparatus and an external apparatus, said method comprising:

receiving authenticating information from the external apparatus into the apparatus;

using the authenticating information to identify the external apparatus;

creating a session identifier associated with the session, the session identifier represented by a six-bit code;

transmitting the session identifier to the external apparatus;

eceiving the session identifier along with each subsequent transmission of data from the external apparatus until the session is terminated; and

using the session identifier to identify the external apparatus.

25. The program storage device of claim 11, wherein said creating comprises:

generating an intermediate sequence for the session identifier;

comparing the intermediate sequence with other intermediate sequences of currently active session identifiers to determine uniqueness; and

encoding the intermediate sequence into the session identifier.

26. The program storage device of claim 25, wherein the intermediate sequence is derived in part from the authentication information of the external apparatus.

27. The program storage device of claim 25, wherein the intermediate sequence comprises a randomly generated sequence.

12. A method for identifying a session of communication of binary data between an apparatus and an external apparatus, said method comprising:

receiving authenticating information from the external apparatus into the apparatus;

using the d authenticating information to identify the external apparatus;

creating a session identifier associated with the session, the session identifier represented by a seven-bit code;

transmitting the session identifier to the external apparatus;

receiving the session identifier along with each subsequent transmission of data from the external apparatus until the session is terminated; and

using the session identifier to identify the external apparatus.

13. The method of claim 12, further comprising:

appending the session identifier to a URL prior to said transmitting and said receiving.

14. The method of claim 12, further comprising:

decoding at least portions of the authenticating information from a URL-encoded format.

28. The method of claim 12, wherein said creating comprises:

generating an intermediate sequence for the session identifier;

comparing the intermediate sequence with other intermediate sequences of currently active session identifiers to determine uniqueness; and

encoding the intermediate sequence into the session identifier.

29. The method of claim 28, wherein the intermediate sequence is derived in part from the authentication information of the external apparatus.

30. The method of claim 28, wherein the intermediate sequence comprises a randomly generated sequence.

15. An apparatus for identifying a session of communication of binary data to and from an external apparatus, said apparatus comprising:

a first memory for storing associations among authenticating information, external apparatus identification information, and a session identifier;

a second memory for storing authenticating information received from the external apparatus;

an external apparatus initiator, said external apparatus initiator identifying the external apparatus by comparing the authenticating information with the associations stored in first memory;

a session identifier creator, said session identifier creator creating a session identifier;

a third memory for storing a session identifier, the session identifier represented by a seven-bit code;

a fourth memory for storing a putative session identifier received from the external apparatus;

an external apparatus identifier, said external apparatus identifier identifying the external apparatus by comparing the putative session identifier with the associations stored in first memory.

16. The apparatus of claim 15, further comprising:

a session identifier appender, said session identifier appender appending the session identifier to a URL.

17. The apparatus of claim 15, further comprising:

a decoder, said decoder decoding at least portions of the authenticating information from a URL-encoded format.

31. The apparatus of claim 15, wherein said session identifier creator comprises:

an intermediate sequence generator adapted to generate an intermediate sequence for the session identifier;

a determiner adapted to compare the intermediate sequence with other intermediate sequences of currently active session identifiers to determine uniqueness; and

an encoder adapted to encode the intermediate sequence into the session identifier.

32. The apparatus of claim 31, wherein the intermediate sequence is derived in part from the authentication information of the external apparatus.

33. The apparatus of claim 31, wherein the intermediate sequence comprises a randomly generated sequence.

18. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform a method for identifying a session of communication of binary data between an apparatus and an external apparatus, said method comprising:

receiving authenticating information from the external apparatus into the apparatus;

using the authenticating information to identify the external apparatus;

creating a session identifier associated with the session, the session identifier represented by a seven-bit code;

transmitting the session identifier to the external apparatus;

receiving the session identifier along with each subsequent transmission of data from the external apparatus until the session is terminated; and

using the session identifier to identify the external apparatus.

34. The program storage device of claim 18, wherein said creating comprises:

generating an intermediate sequence for the session identifier;

comparing the intermediate sequence with other intermediate sequences of currently active session identifiers to determine uniqueness; and

encoding the intermediate sequence into the session identifier.

35. The program storage device of claim 34, wherein the intermediate sequence is derived in part from the authentication information of the external apparatus.

36. The program storage device of claim 34, wherein the intermediate sequence comprises a randomly generated sequence.

37. An apparatus for identifying a session of communication of binary data between an apparatus and an external apparatus, said apparatus comprising:

means for receiving authenticating information from the external apparatus into the apparatus;

means for identifying the external apparatus using the authenticating information;

means for creating a session identifier associated with the session, the session identifier represented by a six-bit code;

means for transmitting the session identifier to the external apparatus;

means for receiving the session identifier along with each subsequent transmission of data from the external apparatus until the session is terminated; and

means for identifying the external apparatus using the session identifier.

38. The apparatus of claim 37, wherein said means for creating comprises:

means for generating an intermediate sequence for the session identifier;

means for comparing the intermediate sequence with other intermediate sequences of currently active session identifiers to determine uniqueness; and

means for encoding the intermediate sequence into the session identifier.

39. The apparatus of claim 38, wherein the intermediate sequence is derived in part from the authentication information of the external apparatus.

40. The apparatus of claim 38, wherein the intermediate sequence comprises a randomly generated sequence.

41. An apparatus for identifying a session of communication of binary data between an apparatus and an external apparatus, said apparatus comprising:

means for receiving authenticating information from the external apparatus into the apparatus;

means for identifying the external apparatus using the authenticating information;

means for creating a session identifier associated with the session, the session identifier represented by a seven-bit code;

means for transmitting the session identifier to the external apparatus;

means for receiving the session identifier along with each subsequent transmission of data from the external apparatus until the session is terminated; and

means for identifying the external apparatus using the session identifier.

42. The apparatus of claim 41, wherein said means for creating comprises:

means for generating an intermediate sequence for the session identifier;

means for comparing the intermediate sequence with other intermediate sequences of currently active session identifiers to determine uniqueness; and

means for encoding the intermediate sequence into the session identifier.

43. The apparatus of claim 42, wherein the intermediate sequence is derived in part from the authentication information of the external apparatus.

44. The apparatus of claim 42, wherein the intermediate sequence comprises a randomly generated sequence.