Systems, methods and computer program products for sharing state information between a stateless server and a stateful client
AssigneeInternational Business Machines Corporation
InventorJohn Gregg White
Life of this patent
Estimating the term…
Abstract
Systems, methods and computer program products for sharing state information between a stateless server and a stateful client are provided. A client request to perform an action on the server is accompanied by an encrypted token which contains state information. The server receiving the client request decrypts the token using a symmetric key generated from variable data. The server verifies that the received token is valid and uses the state information contained therein to perform the requested action. The server also provides clients with encrypted tokens using a symmetric key generated from variable data.
Claims23
A method of providing state information between a stateless server and a stateful client, said method comprising the steps of:
- receiving a client request to perform a server action;
- responsive to receiving the client request, performing the action and creating a token containing post-action state information;
- encrypting the created token;
- and
- sending the encrypted token and action output to the client.
A method of providing state information between a stateless server and a stateful client, said method comprising the steps of:
- sending a client request to perform a server action;
- and
- receiving from the server an encrypted token.
A method of providing state information between a stateless server and a stateful client, said method comprising the steps of:
- sending an encrypted token with a client request to perform a server action;
- receiving the encrypted token with the client request to perform a server action from the client;
- responsive to receiving the client request, decrypting the received encrypted token;
- responsive to decrypting the received encrypted authentication token, verifying that the received token is valid;
- responsive to verifying that the received token is valid, using state information contained therein to perform the requested action;
- responsive to performing the requested action, replacing previous state information with new state information in the token;
- encrypting the token;
- and
- sending encrypted token and action output to the client.
A data processing system for providing state information between a stateless server and a stateful client, said data processing system comprising:
- means for receiving a client request to perform a server action;
- means, responsive to said client request receiving means, for performing the action and creating a token containing post-action state information;
- means for encrypting the created token;
- and means, responsive to said encrypting means, for sending the encrypted token and action output to the client.
A data processing system for providing state information between a stateless server and a stateful client, said data processing system comprising:
- means for sending an encrypted token with a client request to perform a server action;
- means for receiving the encrypted token with the client request to perform a server action from the client;
- means, responsive to said means for receiving the client request, for decrypting the received encrypted token;
- means, responsive to said decrypting means, for verifying that the received token is valid;
- means, responsive to said verifying means, for using state information contained therein to perform the requested action;
- means, responsive to said performing means, for replacing previous state information with new state information in the token;
- means for encrypting the token;
- and
- means for sending the encrypted token and action output to the client.
A computer program product for providing state information between a stateless server and a stateful client, said computer program product comprising:
- a computer usable medium having computer readable program code means embodied in said medium for receiving a client request to perform a server action;
- the computer usable medium having computer readable program code means embodied in said medium, responsive to said client request receiving means, for performing the action and creating a token containing post-action state information;
- the computer usable medium having computer readable program code means embodied in said medium for encrypting the created token;
- and
- the computer usable medium having computer readable program code means embodied in said medium, responsive to said encrypting means, for sending the encrypted token and action output to the client.
Dependencies are inferred from the claim text.