Internet server access control and monitoring systems

  • US 9,900,305 B2
  • Filed: 12/13/2005
  • Issued: 02/20/2018
  • Est. Priority Date: 01/12/1998
  • Status: Expired due to Term
First Claim
Patent Images

1. A method of controlling access to a content server from a plurality of clients, comprising:

  • receiving an access request at a content server from one of a plurality of clients;

    based on the access request received by the content server, generating a session identifier for controlling access to the content server by the requesting client, wherein the session identifier includes a plurality of data fields having information associated with the access request including a digital signature field that is created using a secret key and information in one or more other fields of the session identifier;

    transmitting the session identifier to the requesting client to enable the requesting client to access the content server;

    receiving a subsequent access request at the content server from the requesting client, the subsequent access request including the session identifier and the digital signature field in the session identifier, wherein the session identifier identifies the subsequent access request as being part of a session of requests; and

    validating the session identifier in the subsequent access request to authorize access to the content server, the session identifier being validated by creating a second digital signature using the secret key and information in the one or more other fields of the received session identifier and comparing the second digital signature with the received digital signature field.

View all claims

    Thank you for your feedback