System and method for session management
AssigneeWells Fargo Bank, N.A.
InventorsManuel Jasso, Arnaud Versini, Ryan Van Oss
Life of this patent
Estimating the term…
Abstract
A client device generates a plurality of application windows. For example, a first application window may be provided by a first application that has a first session established with a server system, and a second application window may be provided by a second application that has a second session established with the server system. The client device detects user activity in the first window. Based on the user activity in the first window, the client device sends a message to the server system. The message providing an indication of user activity in one or more of the plurality of windows. The message causes the server system to maintain the second session as active despite inactivity in the second application window.
Claims19
A method, comprising:
- generating, by a client device, a plurality of application windows, the plurality of application windows being provided by a plurality of applications that each have a session established with a server system;
- detecting, by each application window, user activity in each respective application window;
- updating, by each application window, a messaging element with a time stamp corresponding to a time at which a most recent user activity was detected in each respective application window;
- polling, by a first application window, the messaging element to determine a duration of time since a most recent time stamp, wherein a duration of time since a most recent detected user activity in the first application window exceeds a predetermined timeout period;
- determining, by the first application window and in response to polling the messaging element, that a most recent user activity detected in any of the plurality of application windows was detected in a second application window;
- and
- sending, by the first application window and in response to determining that a duration of time since the time at which the most recent user activity was detected in the second application window is less than the predetermined timeout period, a ping message to the server system;
- and
- making sensitive information in the first application window inaccessible in response to the first application window determining that a duration of time since the time at which the most recent user activity was detected in the second application window exceeds the predetermined timeout period.
A non-transitory computer readable medium containing code, which, when executed is configured to cause a computing device to:
- establish a session with a first application server;
- generate a first application window;
- obtain information about user activity in a second application window on the client device;
- update a messaging element with a time stamp corresponding to a time at which a most recent user activity was detected in the second application window;
- poll the messaging element to determine a duration of time since the time stamp, wherein a duration of time since a most recent user activity was detected in the first application window exceeds a predetermined timeout period;
- send, in response to determining that a duration of time since the time at which the most recent user activity was detected in the second application window is less than the predetermined timeout period, a ping message from the first application window to the first application server comprising instructions to keep the session active;
- and
- make sensitive information in the first application window inaccessible in response to determining that a duration of time since the time at which the most recent user activity was detected in the second application window exceeds the predetermined timeout period.
A method, comprising:
- establishing, by a server system, a first session with a first application on a client device, wherein the establishment of the first session with the first application generates a first application window on the client device;
- receiving, by the server system, an activity message from the first application at a first point in time, the first point in time defined by a first period of user inactivity within the first application window, the activity message being received in response to the first application determining, based on a time stamp provided by a messaging element polled by the first application, that a duration of time since a most recent activity was detected in a second application window generated by a second application of the client device is less than a predetermined timeout period;
- maintaining, by the server system, operation of the first session in response to the received activity message;
- receiving, by the server system, an inactivity message from the first application at a second point in time, the second point in time defined by a second period of user inactivity within the first application window, the inactivity message being received in response to the first application determining, based on the time stamp, that the duration of time since the most recent activity was detected in the second application window exceeds the predetermined timeout period;
- and
- terminating, by the server system, operation of the first session in response to the received inactivity message;
- wherein sensitive information in the first application window is made inaccessible in response to the first session being terminated.
Dependencies are inferred from the claim text.