Method and system for remotely managing persistent state data

• US 6,961,759 B2
• Filed: 09/24/2001
• Issued: 11/01/2005
• Est. Priority Date: 09/24/2001
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Schwerdtfeger, Richard Scott, Fairweather, Peter Gustav, Detweiler, Samuel R., Brown, Frances C., Tibbitts, Beth Rush, Crayne, Susan, Hanson, Vicki Lynne
• Primary Examiner(s): Meky, Moustafa M.
• Application Number:
  US09/961,999
• Publication Number:
  US 20030061275A1
• Time in Patent Office: 1,499 Days
• Field of Search: 709200-203, 709217-220, 709223-224, 709227-229
• US Class Current: 709/217
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A system for removing and saving in an intermediary web server Internet cookies being transmitted from a web content server to a client device. Internet cookies, being persistent client data for a specific user and a specific content provider, typically contain sensitive data, including a history of past purchases or financial information about the user such as a credit card number. To protect the security of the cookies, and to allow an authorized user to use the cookies from multiple devices, such as different desktop computers, PDA'"'"'s or cellular telephones, the cookies are removed from the data response from the web content server and stored in an intermediary web server, where they are accessible to the user.

Claims

1. A method for managing persistent state data in a computer system, said method comprising:

Connecting an intermediary proxy machine between a plurality of client devices and a web content server on a computer system;

removing, at the intermediary proxy machine, at least one persistent state data from a data response being transmitted to at least one of the client devices;

storing said at least one persistent state data in the intermediary proxy machine, wherein said at least one persistent state data is available to be utilized by any authorized client device of the plurality of client devices;

storing said persistent state data in said at least one of the client devices; and

in response to a session between said intermediary proxy machine and said at least one of the client devices ending, removing said persistent state data from said at least one of the client devices.

2. The method of claim 1, further comprising:

inserting the persistent data stored in the intermediary proxy machine into a data request being sent from the at least one of the client devices; and

sending the data request with the persistent data to a server application on the web content server.

3. The method of claim 2, further comprising:

identifying an authorized user accessing the intermediary proxy machine;

associating the authorized user with said at least one persistent state data; and

providing access to the persistent state data to the authorized user.

4. The method of claim 2, further comprising:

identifying an authorized user accessing the intermediary proxy machine;

associating the authorized user with said at least one persistent state data;

providing access to the persistent state data to the authorized user; and

denying access to the persistent state data to a non-authorized user.

5. The method of claim 1, wherein the connection between the intermediary proxy machine and the web content server is secure.

6. The method of claim 5, wherein only said persistent data stored in said intermediary proxy machine is encrypted such that only said web content server can decrypt said persistent data.

7. A system for managing persistent state data in a computer system, said system comprising:

means for connecting an intermediary proxy machine between plurality of client devices and a web content server on a computer system;

means for removing, at the intermediary proxy machine, at least one persistent state data from a data response being transmitted to at least one of the client devices;

means for storing said at least one persistent state data in the intermediary proxy machine, wherein said at least one persistent state data is available to be utilized by any authorized client device of the plurality of client devices;

means for storing said persistent state data in said at least one of the client devices; and

means for, in response to a session between said intermediary proxy machine and said at least one of the client devices ending, removing said persistent state data from said at least one of the client devices.

8. The system of claim 7, further comprising:

means for inserting the persistent data stored in the intermediary proxy machine into a data request being sent from the at least one of the client device; and

means for sending the data request with the persistent data to a server application on the web content server.

9. The system of claim 8, further comprising:

means for identifying an authorized user accessing the intermediary proxy machine;

means for associating the authorized user with said at least one persistent state data; and

means for providing access to the persistent state data to the authorized user.

10. The system of claim 8, further comprising:

means for identifying an authorized user accessing the intermediary proxy machine;

means for associating the authorized user with said at least one persistent state data;

means for providing access to the persistent state data to the authorized user; and

means for denying access to the persistent state data to a non-authorized user.

11. The system of claim 7, wherein the connection between the intermediary proxy machine and the web content server is secure.

12. The system of claim 7, wherein said persistent data stored in said intermediary proxy machine is encrypted such that only said web content server can decrypt said persistent data.

13. A computer program product, stored on a computer readable media, for managing persistent state data in a computer system, said computer program product comprising:

computer program code for connecting an intermediary proxy machine between a plurality of client devices and a web content server on a computer system;

computer program code for removing, at the intermediary proxy machine, at least one persistent state data from a data response being transmitted to at least one of the client devices;

computer program code for storing said at least one persistent state data in the intermediary proxy machine, wherein said at least one persistent state data is available to be utilized by any authorized client device of the plurality of client devices;

computer program code for storing said persistent state data in said at least one of the client devices; and

computer program code for, in response to a session between said intermediary proxy machine and said at least one of the client devices ending, removing said persistent state data from said at least one of the client devices.

14. The computer program product of claim 13, further comprising:

computer program code for inserting the persistent data stored in the intermediary proxy machine into a data request being sent from the at least one of the client devices; and

computer program code for sending the data request with the persistent data to a server application on the web content server.

15. The computer program product of claim 14, further comprising:

computer program code for identifying an authorized user accessing the intermediary proxy machine;

computer program code for associating the authorized user with said at least one persistent state data; and

computer program code for providing access to the persistent state data to the authorized user.

16. The computer program product of claim 14, further comprising:

computer program code for identifying an authorized user accessing the intermediary proxy machine;

computer program code for associating the authorized user with said at least one persistent state data;

computer program code for providing access to the persistent state data to the authorized user; and

computer program code for denying access to the persistent state data to a non-authorized user.

17. The computer program as in claim 13, wherein the connection between the intermediary proxy machine and the web content server is secure.

18. The computer program as in claim 17, wherein only said persistent data stored in said intermediary proxy machine is encrypted such that only said web content server can decrypt said persistent data.