Simulating web cookies for non-cookie capable browsers

• US 6,751,654 B2
• Filed: 03/31/1999
• Issued: 06/15/2004
• Est. Priority Date: 03/31/1999
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Som, Tapas Kumar, Massarani, Leonardo Coutinho
• Primary Examiner(s): Wiley, David
• Assistant Examiner(s): Avellino, Joseph E
• Application Number:
  US09/282,660
• Publication Number:
  US 20030158889A1
• Time in Patent Office: 1,903 Days
• Field of Search: 709/200, 709/217, 709/219, 713/202, 770/514
• US Class Current: 709/219
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/59 Providing operational support to end devices by off-loading in the network or by emulation, e.g. when they are unavailable
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

In a computer network such as the Internet including one or more servers and one or more user units or clients wherein at least some user units do not transmit client identification information such as Web cookies, a method and system for performing the method for a server to communicate with at least one of the client units, comprising the steps of: receiving an access request from one of the user units, the user unit including a network browser; determining whether the access request received originated from a cookies capable or cookies enabled network browser; and simulate and proxy cookies support at the server, on behalf of the network browser, at the server when it is determined that the access request received did not originate from a non-cookies capable or non-cookies enabled network browser.

Claims

1. In a computer network including one or more servers and one or more user units, at least some of which present graphical user interfaces, a method for a server to communicate with at least one of the user units, the method comprising the steps of:

receiving a first access request from one of the user units, the user unit including a network browser;

determining whether the first access request received originated from a non-cookies capable or cookies enabled network browser; and

simulating and proxying cookies support, on behalf of the network browser, at the server when it is determined that the first access request received originated from a non-cookies capable or non-cookies enabled network browser,

wherein the step of simulating and proxying cookies support includes the sub-steps of;

receiving a user ID and a password from the one user unit from which the first access request was received;

generating a proxy cookie structure, the proxy cookie structure including a user identification field that is a function of the user ID received from the one user unit; and

creating a table entry that includes the user ID received from the one user unit, the password received from the one user unit, and the proxy cookie structure that was generated.

2. The method of claim 1, wherein the determining step comprises parsing the first access request and its headers to determine the type of browser that sent the request.

3. The method of claim 2, wherein the parsing step comprises using a lookup table of known browser types and reported header fields.

4. The method of claim 1, wherein the step of simulating and proxying cookies support further includes the sub-step of prompting the one user unit the user ID and password.

5. The method of claim 4, wherein in the sub-step of receiving the user ID and password, an encoded string of characters comprises the user ID and password.

6. The method of claim 5, wherein the step of simulating and proxying cookies support further includes the sub-step of decoding the encoded string of characters and authenticating the user requesting access.

7. The method of claim 4, wherein the network includes the Internet.

8. The method of claim 1, further comprising the steps of:

when it is determined that the first access request originated from a cookies enabled network browser, generating a normal cookie that is different than the proxy cookie that would have been generated if the first access request would have originated from a non-cookies capable or non-cookies enabled network browser.

9. The method of claim 1, wherein the means for simulating and proxying cookies support further includes the sub-steps of:

receiving a second access request from the one user unit, the second access request including the user ID and the password;

using the user ID and the password in the second access request to locate the table entry; and

modifying the second access request so that the second access request includes the proxy cookie from the table entry that was located.

10. A machine-readable medium encoded with a program for a server to communicate with at least one user unit for performing the steps of:

receiving a first access request from the user unit, the user unit including a network browser;

determining whether the first access request received originated from a non-cookies capable network browser; and

simulating and proxying cookies support, on behalf of the network browser, at the server when it is determined that the first access request received originated from a non-cookies capable or non-cookies enabled network browser,

wherein the step of simulating and proxying cookies support includes the sub-steps of;

receiving a user ID and a password from the one user unit from which the first access request was received;

generating a proxy cookie structure, the proxy cookie structure including a user identification field that is a function of the user ID received from the one user unit; and

creating a table entry that includes the user ID received from the one user unit, the password received from the one user unit, and the proxy cookie structure that was generated.

11. The machine-readable medium as defined in claim 10, wherein the determining step comprises parsing the first access request and its headers to determine the type of browser that sent the request.

12. The machine-readable medium as defined in claim 11, wherein the parsing step comprises using a lookup table of known browser types and reported header fields.

13. The machine-readable medium as defined in claim 10, wherein the step of simulating and proxying cookies support further includes the sub-step of prompting the one user unit for the user ID and password.

14. The machine-readable medium as defined in claim 13, wherein in the sub-step of receiving the user ID and password, an encoded string of characters comprises the user ID and password.

15. The machine-readable medium as defined in claim 14, wherein the step of simulating and proxying cookies support further comprises the sub-step of decoding the encoded string of characters and authenticating the user requesting access.

16. The machine-readable medium as defined in claim 10, further comprising the steps of:

when it is determined that the first access request originated from a cookies enabled network browser, generating a normal cookie that is different than the proxy cookie that would have been generated if the first access request would have originated from a non-cookies capable or non-cookies enabled network browser.

17. A Web server for providing information from a database to a user'"'"'s system, said Web server comprising:

means for receiving a first access request from one user unit, the user unit including a network browser;

means for determining whether the first access request received originated from a cookies capable or cookies enabled network browser; and

means for simulating and proxying cookies support, on behalf of the network browser, at the server when it is determined that the first access request received originated from a non-cookies capable or non-cookies enabled network browser,

wherein the step of simulating and proxying cookies support includes;

receiving a user ID and a password from the one user unit from which the first access request was received;

generating a proxy cookie structure, the proxy cookie structure including a user identification field that is a function of the user ID received from the one user unit; and

creating a table entry that includes the user ID received from the one user unit, the password received from the one user unit, and the proxy cookie structure that was generated.

18. The Web server as defined in claim 17, wherein the means for determining comprises means for parsing the first access request and its headers to determine the type of browser that sent the request.

19. The Web server as defined in claim 17, wherein the means for parsing comprises a lookup table of known browser types and reported header fields.

20. The Web server of claim 17, wherein the means for simulating and proxying cookies support further includes means for prompting the one user unit for the user ID and password.

21. The Web server of claim 20, wherein an encoded string of characters comprises the user ID and password.

22. The Web server of claim 21, wherein the means for simulating and proxying cookies support further includes means for decoding and authenticating the user requesting access.

23. The Web server of claim 17, wherein the step of simulating and proxying cookies support further includes:

means for receiving a second access request from the one user unit, the second access request including the user ID and the password;

means for using the user ID and the password in the second access request to locate the table entry; and

means for modifying the second access request so that the second access request includes the proxy cookie from the table entry that was located.