×

Cookie based session management

  • US 9,866,640 B2
  • Filed: 09/19/2014
  • Issued: 01/09/2018
  • Est. Priority Date: 09/20/2013
  • Status: Active Grant
First Claim
Patent Images

1. A method for managing sessions in an enterprise environment, the method comprising:

  • based on authenticating a client device to access a first application in a computing environment, generating, by a computer system of an access management system, a session cookie that enables the client device to access a feature of a first application in the computing environment, wherein access to the feature of the first application is enabled without establishing a server-based session for the client device in the computing environment;

    sending the session cookie to the client device, wherein the client device stores the session cookie to enable the client device to access the feature of the first application;

    receiving, at the computer system, a request for the client device to access a feature of a second application in the computing environment;

    determining, with one or more processors associated with the computer system, whether access to the feature of the second application is dependent on establishing a server-side session for the client device in the computing environment;

    based on determining that the client device is authenticated to access the second application according to the session cookie and based on determining that access to the feature of the second application is dependent on establishing the server-side session for the client device in the computing environment, instantiating, with the one or more processors associated with the computer system, a server-side session object to establish the server-side session for the client device in the computing environment, wherein the server-side session object enables the client device to access the feature of the second application in the computing environment;

    updating, with the one or more processors associated with the computer system, the server-side session object to include an identifier associated with the session cookie that is stored on the client device;

    generating with the one or more processors associated with the computer system, a response to the request based on enabling access to the feature of the second application using the server-side session object; and

    sending the response to the client device.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×