US6374359B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Dynamic use and validation of HTTP cookies for authentication
Assignee: International Business Machines Corp
•
Filing: 1998-11-19
•
Granted: 2002-04-16
•
Expires: 2018-11-19
Abstract
Abstract A method of enabling a Web browser user to interact with a given application running on a Web server begins by constructing and returning a cookie to the Web browser upon a given occurrence, e.g., user login to the application. Without additional user input, the routine then forces the Web browser to check with the Web server that the cookie was set on the Web browser. Preferably, this is accomplished by sending the cookie from the Web server in a refresh page that redirects the HTTP flow back to itself with a parameter to check if the cookie was set. At the Web server, a test is then done to determine whether the cookie is valid. If so, the user is allowed to interact with the given server application (e.g., to take a given action or to log off from the application without closing the Web browser). A novel cookie construction and validation mechanism is also described.
Inventors
- 👤 Theodore Jack London Shrader
- 👤 Garry L. Child
- 👤 William H. Gengler
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 17:44
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L63/08; H04L63/083; H04L63/16; H04L63/168; H04L67/00; H04L67/14; H04L9/00; H04L9/40; H04L67/01; H04L67/02; H04L69/00; H04L69/30; H04L69/32; H04L69/322; H04L69/329
Claims Analysis
Total Claims: 23
Claim 1
Independent Claim
92 words
A method of enabling a Web browser user to interact with a given application running on a Web server, comprising the steps of: upon a given occurrence at the Web server, constructing and returning a cookie to the Web browser; without user input, redirecting the Web browser to a refresh object to allow the given application to determine if the cookie was set on the Web browser; at the Web server, determining if the cookie is valid; and enabling the user to interact with the given application if the cookie is invalid.
Claim 2
Independent Claim
92 words
A method of enabling a Web browser user to interact with a given application running on a Web server, comprising the steps of: upon a given occurrence at the Web server, constructing and returning a cookie to the Web browser; without user input, redirecting the Web browser to a refresh object to allow the given application to determine if the cookie was set on the Web browser; at the Web server, determining if the cookie is valid; and enabling the user to interact with the given application if the cookie is invalid.
Claim 3
Dependent Claim
44 words
The method as described in claim 1 wherein the cookie is a string generated by the following steps: concatenating into a derived value a userid, a password and other information; encrypting the derived value to generate a binary string; and encoding the binary string.
Claim 4
Dependent Claim
16 words
The method as described in claim 2 wherein the other information is a client destination address.
Claim 5
Dependent Claim
103 words
The method as described in claim 3 wherein the step of determining whether the cookie is valid comprises: decoding the string to generate a resulting binary value; decrypting the resulting binary value to generate a resulting derived value; determining whether the destination address in the resulting derived value matches a destination address of a client machine on which the Web browser is running; if the destination addresses match, determining whether the user name and password in the resulting derived value match the user's user name and password; and if the user name and password match, enabling the user to interact with the application.
Claim 6
Dependent Claim
39 words
The method as described in claim 1 wherein the redirecting step includes the step of sending the cookie from the Web client back to the Web server to enable the given application to determine if the cookie is valid.
Claim 7
Dependent Claim
19 words
The method as described in claim 1 wherein the given occurrence is a valid login to the given application.
Claim 8
Dependent Claim
20 words
The method as described in claim 6 wherein the given application is an Lightweight Directory Access Protocol (LDAP) GUI interface.
Claim 9
Dependent Claim
21 words
The method as described in claim 7 wherein the user interacts with the LDAP GUI interface to take a given action.
Claim 10
Dependent Claim
30 words
The method as described in claim 7 wherein the user interacts with the LDAP GUI interface to log off from the LDAP GUI without having to exit the Web browser.
Claim 11
Independent Claim
99 words
A method of enabling a Web browser user to interact with a given application running on a Web server, comprising the steps of: upon a valid user login at the Web server, constructing a cookie; returning the cookie to the Web browser in a refresh page the redirects HTTP flow back to itself with a given parameter; returning the cookie back to the Web server; at the Web server, using the returned cookie and the given parameter to determine if the cookie is valid; and enabling the user to interact with the given application if the cookie is valid.
Claim 12
Independent Claim
99 words
A method of enabling a Web browser user to interact with a given application running on a Web server, comprising the steps of: upon a valid user login at the Web server, constructing a cookie; returning the cookie to the Web browser in a refresh page the redirects HTTP flow back to itself with a given parameter; returning the cookie back to the Web server; at the Web server, using the returned cookie and the given parameter to determine if the cookie is valid; and enabling the user to interact with the given application if the cookie is valid.
Claim 13
Dependent Claim
45 words
The method as described in claim 10 wherein the cookie is an ASCII string constructed by the following steps: concatenating into a derived value a userid, a password and other information; encrypting the derived value to generate a binary string; and encoding the binary string.
Claim 14
Dependent Claim
16 words
The method as described in claim 11 wherein the other information is a client IP address.
Claim 15
Dependent Claim
104 words
The method as described in claim 12 wherein the step of determining whether the cookie is valid comprises: decoding the ASCII string to generate a resulting binary value; decrypting the resulting binary value to generate a resulting derived value; determining whether the IP address in the resulting derived value matches an IF address of a client machine on which the Web browser is running; if the IP addresses match, determining whether the user name and password in the resulting derived value match the user's user name and password; and if the user name and password match, enabling the user to interact with the application.
Claim 16
Dependent Claim
20 words
The method as described in claim 10 wherein the given application is an Lightweight Directory Access Protocol (LDAP) GUI interface.
Claim 17
Dependent Claim
21 words
The method as described in claim 14 wherein the user interacts with the LDAP GUI interface to take a given action.
Claim 18
Dependent Claim
30 words
The method as described in claim 10 wherein the user interacts with the LDAP GUI interface to log off from the LDAP GUI without having to exit the Web browser.
Claim 19
Dependent Claim
85 words
A computer program product in a computer-readable medium for enabling a Web browser user to interact with a given application running on a Web server, comprising: means for constructing a cookie; means for returning the cookie to the Web browser in a refresh page the redirects HTTP flow back to itself with a given parameter; means for determining if the cookie is valid; and means responsive to the determining means for enabling the user to interact with the given application if the cookie is valid.
Claim 20
Dependent Claim
85 words
A computer program product in a computer-readable medium for enabling a Web browser user to interact with a given application running on a Web server, comprising: means for constructing a cookie; means for returning the cookie to the Web browser in a refresh page the redirects HTTP flow back to itself with a given parameter; means for determining if the cookie is valid; and means responsive to the determining means for enabling the user to interact with the given application if the cookie is valid.
Claim 21
Dependent Claim
57 words
The computer program product as described in claim 17 wherein the cookie is a string and the means for constructing comprises: means for concatenating into a derived value a userid, a password and other information; means for encrypting the derived value to generate a binary string; and means for encoding the binary string to generate the string.
Claim 22
Dependent Claim
18 words
The computer program product as described in claim 18 wherein the other information is a client destination address.
Claim 23
Dependent Claim
113 words
The computer program product as described in claim 18 wherein the means for determining comprises: means for decoding the string to generate a resulting binary value; means for decrypting the resulting binary value to generate a resulting derived value; means for determining whether the destination address in the resulting derived value matches a destination address of a client machine on which the Web browser is running; means responsive to a destination address match for determining whether the user name and password in the resulting derived value match the user's user name and password; and means responsive to match of the user name and password for enabling the user to interact with the application.
References Cited (Backward Citations)
US5875296A
Cited
US6085224A
Cited
US6112240A
Cited
US6092196A
Cited
US6304906B1
Cited
US6205480B1
Cited
US6226752B1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2005-04-15 | 2005-10-15 | 2006-04-16 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2009-04-15 | 2009-10-15 | 2010-04-16 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2013-04-15 | 2013-10-15 | 2014-04-16 | $7700.00 | Window Closed / Lapsed |