Apparatus and method for providing global session persistence

• US 7,386,672 B2
• Filed: 08/29/2002
• Issued: 06/10/2008
• Est. Priority Date: 08/29/2002
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Casazza, James
• Primary Examiner(s): Sparks; Doanld
• Assistant Examiner(s): BRADLEY, MATTHEW A
• Application Number:
  US10/231,678
• Publication Number:
  US 20040044866A1
• Time in Patent Office: 2,112 Days
• Field of Search: 345/733, 345/741, 345/557, 707/9, 709/213, 709/312, 711/126, 711/129, 711/130, 711/133, 711/134, 711/135, 711/156, 711/163, 711/166, 713/151, 713/153, 713/166, 713/182, 713/200
• US Class Current: 711/129
• CPC Class Codes: G06F 12/0891 using clearing, invalidating or resetting means
• CPC Class Codes: G06F 12/1466 Key-lock mechanism
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 67/5682 Policies or rules for updating, deleting or replacing the stored data
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

An apparatus and method provide persistent data during a user session on a networked computer system. A global data cache is divided into three sections: trusted, protected, and unprotected. An authorization mechanism stores and retrieves authorization data from the trusted section of the global data store. A common session manager stores and retrieves data from the protected and unprotected sections of the global data cache. Using the authorization mechanism, software applications may verify that a user is authorized without prompting the user for authorization information. Using the common session manager, software applications may store and retrieve data to and from the global data store, allowing the sharing of data during a user session. After the user session terminates, the data in the global data cache corresponding to the user session is invalidated.

Claims

1. A method for sharing data between first and second software applications during a user session, the method comprising the steps of:

a user providing authorization data to the first software application;

the first software application storing the authorization data in a trusted section of the global data cache, the first software application storing application data in at least one of a protected section and an unprotected section of the global data cache;

the second software application requesting verification that the user is authorized to access the second software application;

reading the authorization data from the trusted area of the global data cache;

determining from the read authorization data whether the user is authorized to access the second software application;

if the user is authorized to access the second software application, allowing the user to access the second software application;

if the user is not authorized to access the data in the global data cache, denying the user access to the second software application; and

invalidating the data in the global data cache corresponding to the user session after the user session terminates.

2. The method of claim 1 wherein the user is authorized to access the protected section of the global data cache if the user has previously supplied authorization information corresponding to the data stored in the protected section.

3. The method of claim 1 wherein the user is authorized to access the unprotected section of the global data cache if the user has a valid session identifier.