US6041357A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Common session token system and protocol
Assignee: Tumbleweed Holdings LLC
•
Filing: 1997-02-06
•
Granted: 2000-03-21
•
Expires: 2017-02-06
Abstract
Abstract An improved session control method and apparatus includes a client which establishes a session with a first server such that the first server can identify the client. When the client wishes to migrate from the first server to a second server, the client requests a session token from the first server. The session token is a data element generated by the first server which is unique over the client-server network being navigated and identifies the particular session with the first server. The session token is preferably a difficult to forge data element, such as a data element digitally signed using the private key of the first server. The session token is passed from the client to the second server to initiate migration to the second server. If session data is too bulky to be passed as part of the session token, the second server may use data from the session token to formulate a request to the first server for additional data needed to handle the state of the session. To minimize the transmission of data, the second server might maintain a version of the bulk session data and only request an update to the version of the data indicated in the session token.
Inventors
- 👤 Kevin Kunzelman
- 👤 Sterling Hutto
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-01 13:15
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; H04L63/0815; H04L63/16; H04L63/168; H04L67/00; H04L67/01; H04L67/10; H04L67/1001; H04L63/04; H04L63/0428; H04L63/083
Claims Analysis
Total Claims: 14
Claim 1
Independent Claim
213 words
In a client-server network having multiple independent servers, a method of session migration from a session between a client and a first server to a session between the client and a second server; establishing a current session between the client and the first server after the first server has verified that th e client is an authorized client of the first server; sending a migration request from the client to the first server; in response to the migration request generating a session token; sending a session token from the first server to the client, wherein the session token uniquely identifies the current session between the client and the first server; sending the session token from the client to the second server as a request to the second server for migration; verifying, at the second server and from the session token, the identity of the client and the first server; requesting, from the first server, data about the session, wherein the request is sent from the second server; responding from the first server to the request for data by sending the requested data to the second server; and if the client is an authorized client with respect to the second server, continuing the session with the second server in place of the first server.
Claim 2
Dependent Claim
213 words
In a client-server network having multiple independent servers, a method of session migration from a session between a client and a first server to a session between the client and a second server; establishing a current session between the client and the first server after the first server has verified that th e client is an authorized client of the first server; sending a migration request from the client to the first server; in response to the migration request generating a session token; sending a session token from the first server to the client, wherein the session token uniquely identifies the current session between the client and the first server; sending the session token from the client to the second server as a request to the second server for migration; verifying, at the second server and from the session token, the identity of the client and the first server; requesting, from the first server, data about the session, wherein the request is sent from the second server; responding from the first server to the request for data by sending the requested data to the second server; and if the client is an authorized client with respect to the second server, continuing the session with the second server in place of the first server.
Claim 3
Dependent Claim
23 words
The method of claim 1, wherein the client-server network is the Internet and the first and second servers are hypertext transfer protocol servers.
Claim 4
Dependent Claim
22 words
The method of claim 1, wherein the step of generating a session token is a step of generating an encrypted session token.
Claim 5
Dependent Claim
49 words
The method of claim 3, wherein the step of generating an encrypted session token comprises the steps of encrypting portions of the session token and including a digitally signed portion in the session token, the digitally signed portion being digitally signed by a private key of the first server.
Claim 6
Dependent Claim
48 words
The method of claim 1, wherein the step of sending a session token from the first server to the client is a step of sending a session token containing a digitally signed portion, the digitally signed portion being digitally signed by a private key of the first server.
Claim 7
Dependent Claim
89 words
The method of claim 1, further comprising the steps of: requesting a password from the client; sending the password to the first server; if the password matches a predetermined criterion indicating an authorized client, continuing with the step of establishing a session; sending, as part of the session token, an indication from the first server, that the client is an authorized client; and using the indication from the first server as a substitute for a logon procedure used by the second server to verify the authorization of the client.
Claim 8
Dependent Claim
19 words
The method of claim 1, further comprising a step of forming a uniform resource locator representing the session token.
Claim 9
Dependent Claim
29 words
The method of claim 1, wherein the step of generating the session token is performed without a central token repository yet is guaranteed to be a unique session token.
Claim 10
Dependent Claim
23 words
The method of claim 1, further comprising a step of transferring the requested data using a protocol other than a hypertext transfer protocol.
Claim 11
Dependent Claim
73 words
The method of claim 1, further comprising a step of maintaining a version control number and requesting from the first server data which is an update to data received previously at the second server, the update being an update from a previous version of the data identified by a version number stored on the second server and a current version of the data identified by a version number stored on the first server.
Claim 12
Dependent Claim
32 words
The method of claim 1, wherein the session migration is from one World Wide Web server to a second World Wide Web server, and the client is a World Wide Web browser.
Claim 13
Dependent Claim
28 words
The method of claim 1, wherein each step of sending a session token comprises sending at least a part of the session token in a uniform resource locator.
Claim 14
Dependent Claim
29 words
The method of claim 1, wherein each step of sending a session token comprises sending at least a part of the session token in a hypertext transport protocol cookie.
References Cited (Backward Citations)
US5224163A
Cited
US5542046A
Cited
US5689638A
Cited
US5706349A
Cited
US5740242A
Cited
US5708780A
Cited
US5774670A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-03-21 | 2003-09-20 | 2004-03-21 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-03-21 | 2007-09-20 | 2008-03-21 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-03-21 | 2011-09-20 | 2012-03-21 | $7700.00 | Window Closed / Lapsed |