# US 2018/0324260 A1 · System and method for limiting active sessions > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0324260 A1 - Document ID: US20180324260A1 - Status: Published application - Kind: A1 - Application number: 15/584,978 - Filed: 2017-05-02 - Published: 2018-11-08 - Earliest claimed: 2017-05-02 - Assignees: ServiceNow, Inc. - Applicants: ServiceNow, Inc. - Inventors: Bryan Mather Barnard; Subbaaraya Kumar Deverakonda Venkata; Silas A. Smith; Sanjay Shrikanth Kittur - Web page: https://patentgrep.com/patent/US20180324260A1 ## CPC - H04L 67/143: Termination or inactivation of sessions, e.g. event-controlled end of session - H04L 67/14: Session management (for real-time applications in data packet communications networks H04L65/1066) - H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70) - H04L 63/102: {Entity profiles} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems, methods, and media for limiting concurrent sessions include determining whether concurrent sessions exist on one or more connected nodes when a new session is to be established using a set of valid credentials. When concurrent sessions are to be limited, excess concurrent sessions are terminated in response to the establishment of the new session. ## Claims ### Claim 1 A system comprising: non-transitory memory; and one or more hardware processors configured to read instructions from the non-transitory memory to perform operations comprising: determining one or more login requests to access a client instance; routing the one or more login requests to a first node of a plurality of nodes based at least on respective workloads distributed among the plurality of nodes; creating a first interactive session with the first node based at least on credentials of the one or more login requests; and responsive to creating the first interactive session, searching for one or more concurrent interactive sessions with the client instance to terminate the one or more concurrent interactive sessions. ### Claim 2 (depends on 1) The system of claim 1, wherein the operations comprise: routing at least one of the one or more login requests to a second node of a plurality of nodes based at least on the respective workloads distributed among the plurality of nodes; creating a second interactive session with the second node based at least on the credentials; responsive to creating the second interactive session, searching for the one or more concurrent interactive sessions with the client instance to terminate the one or more concurrent interactive sessions. ### Claim 3 (depends on 2) The system of claim 2, wherein searching for the one or more concurrent interactive sessions comprises searching a database for a number of concurrent interactive sessions with the client instance. ### Claim 4 (depends on 1) The system of claim 1, wherein the operations comprise: identifying a concurrent interactive session from searching for the one or more concurrent active sessions; and determining the concurrent interactive session is associated with a second node of the plurality of nodes; and terminating the first interactive session based at least on the concurrent interactive session associated with the second node. ### Claim 5 (depends on 4) The system of claim 4, wherein terminating the first interactive session comprises sending a cluster message from the second node to remaining nodes of the plurality of nodes instructing each of the plurality of nodes to lock out the first interactive session. ### Claim 6 (depends on 4) The system of claim 4, wherein terminating the first interactive session comprises sending a message from the second node to the first node instructing the first node to lock out the first interactive session. ### Claim 7 (depends on 1) The system of claim 1, wherein the operations comprise receiving a selection of a limit of a number of the concurrent interactive sessions active before terminating the first interactive session. ### Claim 8 (depends on 1) The system of claim 1, wherein non-interactive viewing sessions do not count toward the limit of the number of the concurrent interactive sessions. ### Claim 9 (depends on 8) The system of claim 8, wherein a single connection between the client and the plurality of nodes includes a plurality of sessions comprising a non-interactive viewing session and an interactive session. ### Claim 10 (depends on 9) The system of claim 9, wherein the single connection comprises a connection from the plurality of nodes to a mobile application program executed on a mobile device. ### Claim 11 A method, comprising: receiving a first request to access an instance from a client device, wherein the first request includes first credentials; routing the first request through a load balancer to a first node; validating the first credentials; at the first node, creating a first session based on the first credentials being validated; receiving a second request to access the instance, wherein the second request to access includes second credentials; routing the second request to a second node; validating the second credentials; at the second node, creating a second session based on the second credentials being validated; determining whether the first credentials correspond to the second credentials; and in response to the second request and to the first credentials corresponding to the second credentials, invalidating the first session. ### Claim 12 (depends on 11) The method of claim 11, wherein the first and second sessions comprise respective first and second interactive sessions. ### Claim 13 (depends on 11) The method of claim 11, wherein the second request is received from the client device. ### Claim 14 (depends on 11) The method of claim 11, wherein the second request is received from another device. ### Claim 15 (depends on 11) The method of claim 11 comprising: using the second node, determining a number of other active sessions on the instance exist for the second credentials; determining whether the number exceeds a threshold of allowable sessions for the second credentials. ### Claim 16 (depends on 15) The method of claim 15 comprising in response to the number exceeds the threshold, locking out the first session when the first credentials correspond to the second credentials. ### Claim 17 (depends on 16) The method of claim 16 comprising invalidating the first session comprises returning the client device to a login screen when an action is attempted in the first session. ### Claim 18 (depends on 11) The method of claim 11, wherein invalidating the first session comprises sending a cluster message from the second node to the first node and invalidating the first session is based at least in part on validation of the second credentials. ### Claim 19 (depends on 18) The method of claim 18, wherein invalidating the first session comprises limiting transmission of the cluster message to a threshold periodicity, wherein the cluster message identifies all sessions to be terminated by any nodes connected to the second node. ### Claim 20 Non-transitory, tangible, and computer-readable medium comprising instructions configured to cause one or more hardware processors to: receive a request to access an instance from a client, wherein the request includes credentials; determine whether the credentials are valid; create an interactive session when the credentials are validated; determining a number of interactive sessions on the instance that exist for the credentials; determining whether the number exceeds a threshold of allowed sessions for the credentials; and when the number exceeds the threshold, invalidating at least one of the existing interactive sessions.