Secure session management and authentication for web sites

Details Secure session management and authentication for web sites Secure session management and authentication for web sites

2007-05-08

2007-05-08

Zand, Kambiz (Department: 2135)

Electrical computers and digital processing systems: support

System access control based on user identification by...

Solely password entry

C713S185000, C713S159000, C726S009000, C726S010000

Reexamination Certificate

active

09810288

ABSTRACT:
The present invention comprises a system and method for secure session management and authentication between web sites and web clients. The method includes both secure and non-secure communication protocols, means for switching between secure and non-secure communication protocols, a session cookie and an authcode cookie. The session cookie is used for session management and the authcode cookie is used for authentication. The session cookie is transmitted using a non-secure communication protocol when the web client accesses a non-secure web page, whereas, the authcode cookie is transmitted using a secure communication protocol when the web client accesses a secure web page. Session management architecture and usage of two distinct cookies along with both secure and non-secure communication protocols prevents unauthorized users from accessing sensitive web client or web site information.

REFERENCES:
patent: 5875296 (1999-02-01), Shi et al.
patent: 5963915 (1999-10-01), Kirsch
patent: 5966705 (1999-10-01), Koneru et al.
patent: 6049877 (2000-04-01), White
patent: 6092196 (2000-07-01), Reiche
patent: 6598167 (2003-07-01), Devine et al.
patent: 6691232 (2004-02-01), Wood et al.
patent: 6701438 (2004-03-01), Prabandham et al.
patent: 6725222 (2004-04-01), Musgrove et al.
patent: 6892307 (2005-05-01), Wood et al.
patent: 2002/0152378 (2002-10-01), Wallace et al.
patent: 2349960 (2000-11-01), None
patent: 11-167595 (1999-06-01), None
patent: 2000-276444 (2000-10-01), None
patent: 0069110 (2000-11-01), None
patent: WO 00/69110 (2000-11-01), None
“HTTP State Management Mechanism”, D. Kristol, et al, Feb. 1997 pp. 1-44, 49-53.
Hanai, Hiroyuki, “Let's establish my server with BSD,” BSD Magazine 2000, No. 5, pp. 97-106.

Affiliated with

Also associated with

Rating

Secure session management and authentication for web sites does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Secure session management and authentication for web sites, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Secure session management and authentication for web sites will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-3813753