Transparent user and session management for web applications

• US 20010047477A1
• Filed: 03/20/2001
• Published: 11/29/2001
• Est. Priority Date: 03/20/2000
• Status: Abandoned Application

• Current Assignee: Gutenberg Printing LLC (Intellectual Ventures LLC)
• Original Assignee: Hotlens.com Inc.
• Inventors: Chiang, Hiang-Swee
• Application Number:
  US09/812,634
• Publication Number:
  US 20010047477A1
• Time in Patent Office: Days
• US Class Current: 713/170
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 69/327 in the session layer [OSI layer 5]

Abstract

A central server used to generate, for example, web application instances to remote users over a computer network, such as the Internet, is implemented with new programming techniques by which user and session management is made independent of the web application instance. The prior methods, by which a new user or session cookie is generated for each user request, is replaced by techniques wherein a single session cookie is provided to a user for all requests in a single user session. A user database is maintained by the central server which stores the session cookie and correlates it to a web application instance, identified by system variables stored in the database, rather than with application variables maintained by an application instance.

Claims

1. A method for performing user and session management over a computer network, comprising:

receiving a first request from a user for an application instance, the request including a single identifier for all user requests without further user and session application variables; and

transmitting an application instance response to the user based on stored user and session system information.

2. The method of

claim 1

, wherein the single identifier includes a random number associated with the user.

3. The method of

claim 1

, further comprising:

authenticating an identification of the user; and

assigning the single identifier to the user.

4. The method of

claim 3

, wherein said authenticating comprises:

transmitting a request for a user name and a password to the user;

receiving the user name and password from the user; and

comparing the user name and password to stored parameters.

5. The method of

claim 1

, further comprising:

receiving a second request from the user for a second application instance, the second request including the identifier; and

processing the request with the application instance.

6. The method of

claim 1

, further comprising:

receiving a second request from a second user, the second request including a second identifier corresponding to the second user; and

generating a second application instance responsive to the second identifier.

16. The method of

claim 1

, further comprising:

receiving a second request from a second user, the second request including a second identifier corresponding to the second user; and

generating a second application instance responsive to the second identifier.

7. An apparatus for performing user and session management over a computer network, comprising:

means for receiving a first request from a user for an application instance, the request including a single identifier for all user requests without further user and session application variables; and

means for transmitting an application instance response to the user based on stored user and session system information.

8. A method for performing user and session management over a computer network, comprising:

a processor; and

a memory in communication with the processor, the memory for storing a plurality of processing instructions for enabling the processor to;

receive a first request from a user for an application instance, the request including a single identifier for all user requests without further user and session application variables; and

transmit an application instance response to the user based on stored user and session system information.

9. A computer-readable medium encoded with processing instructions for implementing a method for performing user and session management over a computer network, the method comprising:

receiving a first request from a user for an application instance, the request including a single identifier for all user requests without further user and session application variables; and

transmitting an application instance response to the user based on stored user and session system information.

10. A method for performing user and session management over a computer network, comprising:

receiving a request for an application instance from a user;

assigning a single identifier to the user for handling all user requests; and

transmitting an application instance response to the user, wherein the single identifier is static for all requests from the user for a session.

11. The method of

claim 10

, wherein the single identifier is a random number.

12. The method of

claim 10

, wherein the single identifier does not include user or session application variables for use by the application instance.

13. The method of

claim 10

, wherein said assigning further comprises:

authenticating an identification of the user.

14. The method of

claim 13

, wherein said authenticating comprises:

transmitting a request for a user name and a password to the user;

receiving the user name and password from the user; and

comparing the user name and password to stored parameters.

15. The method of

claim 10

, further comprising:

receiving a second request from the user for a second application instance, the second request including the identifier; and

processing the request with the second application instance, while maintaining the first application instance.

22. The method of

claim 10

, wherein the identifier does not include user or session variables for use by the application instance.

24. The method of

claim 13

, wherein said authenticating comprises:

transmitting a request for a user name and a password to the user;

receiving the user name and password from the user; and

comparing the user name and password to stored parameters.

17. An apparatus for performing user and session management over a computer network, comprising:

means for receiving a request for an application instance from a user;

means for assigning a single identifier to the user for handling all user requests; and

means for transmitting an application instance response to the user, wherein the single identifier is static for all requests from the user for a session.

18. An apparatus for performing user and session management over a computer network, comprising:

a processor; and

a memory in communication with the processor, the memory for storing a plurality of processing instructions for enabling the processor to;

receive a request for an application instance from a user;

assign a single identifier to the user for handling all user requests; and

transmit an application instance response to the user, wherein the single identifier is static for all requests from the user for a session.

19. A computer-readable medium encoded with processing instructions for implementing a method for performing user and session management over a computer network, the method comprising:

receiving a request for an application instance from a user;

assigning a single identifier to the user for handling all user requests; and

transmitting an application instance response to the user, wherein the single identifier is static for all requests from the user for a session.

20. A method for performing user and session management over a computer network, comprising:

receiving a first request from a user for a first application instance, the first request including an identifier;

transmitting a first application instance response to the user;

receiving a second request from the user for a second application instance, the second request including the identifier; and

processing the request with the second application instance.

21. The method of

claim 20

, wherein the identifier is a random number.

23. The method of

claim 20

, further comprising:

authenticating an identification of the user; and

assigning the identifier to the user.

25. The method of

claim 20

, further comprising:

receiving a third request from a second user, the third request including a second identifier corresponding to the second user; and

generating a second application instance responsive to the second identifier.

26. An apparatus for performing user and session management over a computer network, comprising:

means for receiving a first request from a user for a first application instance, the first request including an identifier;

means for transmitting a first application instance response to the user;

means for receiving a second request from the user for a second application instance, the second request including the identifier; and

means for processing the request with the second application instance.

27. An apparatus for performing user and session management over a computer network, comprising:

a processor; and

a memory in communication with the processor, the memory for storing a plurality of processing instructions for enabling the processor to;

receive a first request from a user for a first application instance, the first request including an identifier;

transmit a first application instance response to the user;

receive a second request from the user for a second application instance, the second request including the identifier; and

process the request with the second application instance.

28. A computer-readable medium encoded with processing instructions for implementing a method for performing user and session management over a computer network, the method comprising:

receiving a first request from a user for a first application instance, the first request including an identifier;

transmitting a first application instance response to the user;

receiving a second request from the user for a second application instance, the second request including the identifier; and

processing the request with the second application instance.

29. A method for performing user and session management over a computer network, comprising:

receiving, from a user, a first request in a first session, the first request including an identifier;

transmitting a first application instance response to the user in response to the first request;

receiving, from the user, a second request in a second session, the second user request including the identifier; and

processing the second request through the first application instance.

30. The method of

claim 29

, wherein the first identifier includes a random number associated with the user.

31. The method of

claim 29

, further comprising:

authenticating an identification of the user; and

assigning the identifier to the user.

32. The method of

claim 31

, wherein said authenticating comprises:

transmitting a request for a user name and a password to the user;

receiving the user name and password from the user; and

comparing the user name and password to stored parameters.

33. The method of

claim 29

, further comprising:

receiving a third request from the user in the first user session, the third request including the identifier; and

processing the request with the application instance.

34. The method of

claim 29

, further comprising:

receiving a third request from a second user, the third request including a second identifier corresponding to the second user; and

generating a second application instance responsive to the second identifier.

35. An apparatus for performing user and session management over a computer network, comprising:

a processor; and

a memory in communication with the processor, the memory for storing a plurality of processing instructions for enabling the processor to;

receive, from a user, a first request in a first session, the first request including an identifier;

transmit a first application instance response to the user in response to the first request;

receive, from the user, a second request in a second session, the second user request including the identifier; and

process the second request through the first application instance.

36. An apparatus for performing user and session management over a computer network, comprising:

means for receiving, from a user, a first request in a first session, the first request including an identifier;

means for transmitting a first application instance response to the user in response to the first request;

means for receiving, from the user, a second request in a second session, the second user request including the identifier; and

means for processing the second request through the first application instance.

37. A computer-readable medium encoded with processing instructions for implementing a method for performing user and session management over a computer network, the method comprising:

receiving, from a user, a first request in a first session, the first request including an identifier;

transmitting a first application instance response to the user in response to the first request;

receiving, from the user, a second request in a second session, the second user request including the identifier; and

processing the second request through the first application instance.

38. A method for performing user and session management over a computer network, comprising:

receiving a first request from a first user session for a user, the first request including an identifier;

receiving a second request from a second user session for the user, the second request including the identifier without further user or session application variables; and

transmitting a response to the first and second requests, based on the identifier and a system session variable stored for each of the first and second user sessions.

39. The method of

claim 38

, wherein the single identifier includes a random number associated with the user.

40. The method of

claim 38

, further comprising:

authenticating an identification of the user; and

assigning the identifier to the user.

41. The method of

claim 40

, wherein said authenticating comprises:

transmitting a request for a user name and a password to the user;

receiving the user name and password from the user; and

comparing the user name and password to stored parameters.

42. The method of

claim 38

, further comprising:

receiving a third request from one of the first and the second user sessions, the third request including the identifier; and

processing the request with the application instance.

43. The method of

claim 38

, further comprising:

receiving a third request from a second user, the third request including a second identifier corresponding to the second user; and

generating a second application instance responsive to the second identifier.

44. An apparatus for performing user and session management over a computer network, comprising:

means for receiving a first request from a first user session for a user, the first request including an identifier;

means for receiving a second request from a second user session for the user, the second request including the identifier without further user or session application variables; and

means for transmitting a response to the first and second requests, based on the identifier and a system session variable stored for each of the first and second user sessions.

45. An apparatus for performing user and session management over a computer network, comprising:

a processor; and

a memory in communication with the processor, the memory for storing a plurality of processing instructions for enabling the processor to;

receive a first request from a first user session for a user, the first request including an identifier;

receive a second request from a second user session for the user, the second request including the identifier without further user or session application variables; and

transmit a response to the first and second requests, based on the identifier and a system session variable stored for each of the first and second user sessions.

46. A computer-readable medium encoded with processing instructions for implementing a method for performing user and session management over a computer network, comprising:

receiving a first request from a first user session for a user, the first request including an identifier;

receiving a second request from a second user session for the user, the second request including the identifier without further user or session application variables; and

transmitting a response to the first and second requests, based on the identifier and a system session variable stored for each of the first and second user sessions.

47. A method for performing user and session management over a computer network, comprising:

receiving a first request from a first user session for a user, the first request including an identifier; and

transmitting a first response to the first request, based on the identifier and a first system session variable stored in a user database;

receiving a second request from a second user session for the user, the second request including the identifier without further user or session application variables; and

transmitting a second response to the second request, based on the identifier and a second system session variable stored in the user database.

48. The method of

claim 47

, wherein the first response and the second response are generated from a single application instance.

49. The method of

claim 48

, wherein the identifier does not include further user and session variables for use by the application instance.

50. The method of

claim 47

, wherein the identifier includes a random number associated with the user.

51. The method of

claim 47

, further comprising:

authenticating an identification of the user; and

assigning the single identifier to the user.

52. The method of

claim 51

, wherein said authenticating comprises:

transmitting a request for a user name and a password to the user;

receiving the user name and password from the user; and

comparing the user name and password to stored parameters.

53. The method of

claim 48

, further comprising:

receiving a third request from the user in the first user session, the third request including the identifier; and

processing the request with the application instance.

54. The method of

claim 47

, further comprising:

receiving a third request from a second user, the third request including a second identifier corresponding to the second user; and

generating a second application instance responsive to the second identifier.

55. An apparatus for performing user and session management over a computer network, comprising:

means for receiving a first request from a first user session for a user, the first request including an identifier; and

means for transmitting a first response to the first request, based on the identifier and a first system session variable stored in a user database;

means for receiving a second request from a second user session for the user, the second request including the identifier without further user or session application variables; and

means for transmitting a second response to the second request, based on the identifier and a second system session variable stored in the user database.

56. An apparatus for performing user and session management over a computer network, comprising:

a processor; and

a memory in communication with the processor, the memory for storing a plurality of processing instructions for enabling the processor to;

receive a first request from a first user session for a user, the first request including an identifier; and

transmit a first response to the first request, based on the identifier and a first system session variable stored in a user database;

receive a second request from a second user session for the user, the second request including the identifier without further user or session application variables; and

transmit a second response to the second request, based on the identifier and a second system session variable stored in the user database.

57. A computer-readable medium encoded with processing instructions for implementing a method for performing user and session management over a computer network, the method comprising:

receiving a first request from a first user session for a user, the first request including an identifier; and

transmitting a first response to the first request, based on the identifier and a first system session variable stored in a user database;

receiving a second request from a second user session for the user, the second request including the identifier without further user or session variables; and

transmitting a second response to the second request, based on the identifier and a second system session variable stored in the user database.

58. A method for performing user and session management over a computer network, comprising:

receiving a first request from a first user, the first request including a first identifier corresponding to the first user;

receiving a second request from a second user, the second request including a second identifier corresponding to the second user; and

generating a first application instance responsive to the first identifier and a second application instance responsive to the second identifier.

59. The method of

claim 58

, wherein the first identifier and the second identifier do not include user and session application variables for use by the first and the second application instances.

60. The method of

claim 58

, wherein the first identifier includes a random number associated with the first user and the second identifier includes a second random number associated with the second user.

61. The method of

claim 58

, further comprising:

authenticating an identification of the first and second users; and

assigning the first identifier to the first user and the second identifier to the second user.

62. The method of

claim 61

, wherein said authenticating comprises:

transmitting a request for a user name and a password to the user;

receiving the user name and password from the user; and

comparing the user name and password to stored parameters.

63. The method of

claim 58

, further comprising:

receiving a third request from the first user, the third request including the first identifier; and

processing the request with the first application instance.

64. The method of

claim 58

, further comprising:

receiving a third request from the second user, the third request including the second identifier; and

processing the request with the second application instance.

65. An apparatus for performing user and session management over a computer network, comprising:

means for receiving a first request from a first user, the first request including a first identifier corresponding to the first user;

means for receiving a second request from a second user, the second request including a second identifier corresponding to the second user; and

means for generating a first application instance responsive to the first identifier and a second application instance responsive to the second identifier.

66. An apparatus for performing user and session management over a computer network, comprising:

a processor; and

a memory in communication with the processor, the memory for storing a plurality of processing instructions for enabling the processor to;

receive a first request from a first user, the first request including a first identifier corresponding to the first user;

receive a second request from a second user, the second request including a second identifier corresponding to the second user; and

generate a first application instance responsive to the first identifier and a second application instance responsive to the second identifier.

67. A computer-readable medium encoded with processing instructions for implementing a method for performing user and session management over a computer network, the method comprising:

receiving a first request from a first user, the first request including a first identifier corresponding to the first user;

receiving a second request from a second user, the second request including a second identifier corresponding to the second user; and

generating a first application instance responsive to the first identifier and a second application instance responsive to the second identifier.

68. A method for performing user and session management over a computer network, comprising:

receiving, from a first user, a first request in a first session, the first request including a first identifier;

transmitting a first application instance to the first user in response to the first request;

receiving, from the first user, a second request in a second session, the second request including the first identifier;

processing the second request through the first application instance;

receiving, from a second user, a third request in a third user session, the third request including a second identifier corresponding to the second user; and

transmitting a second application instance to the second user in response to the third request.

69. The method of

claim 68

, wherein the first identifier and the second identifier do not include further user and session application variables for use by the first and the second application instances.

70. The method of

claim 68

, wherein the first identifier includes a random number associated with the first user and the second identifier includes a second random number associated with the second user.

71. The method of

claim 68

, further comprising:

authenticating an identification of the first and second users; and

assigning the first identifier to the first user and the second identifier to the second user based on said authenticating.

72. The method of

claim 71

, wherein said authenticating comprises:

transmitting a request for a user name and a password to the first and second users;

receiving the user name and password from the first and the second users; and

comparing the user name and password to stored parameters.

73. The method of

claim 68

, further comprising:

receiving a fourth request from the first user, the fourth request including the first identifier without any further user and session application variables; and

processing the request with the first application instance based on stored user and session management system variables.

74. The method of

claim 68

, further comprising:

receiving a fourth request from the second user, the fourth request including the second identifier without any further user and session variables; and

processing the request with the second application instance based on stored user and session management system variables.

75. A method for interacting with a central server over a computer network, comprising:

transmitting a first request to a central server, the first request including a user identifier;

receiving a first application instance in response to the first request; and

transmitting a second request to the central server, the second request including the identifier without further user or session application variables; and

receiving a response to the second request from the application instance.

76. The method of

claim 75

, wherein the first identifier does not include user and session variables for use by the first application instance.

77. A method for interacting with a central server over a computer network, comprising:

transmitting a first request to a central server in a first user session, the first request including a user identifier;

receiving a first application instance in response to the first request; and

transmitting a second request to the central server in a second user session, the second request including the identifier without further user or session application variables; and

receiving a response to the second request from the application instance.

78. The method of

claim 77

, wherein the first identifier does not include user and session variables for use by the application instance.