Dynamic use and validation of HTTP cookies for authentication
AssigneeInternational Business Machines Corporation
InventorsTheodore Jack London Shrader, Garry L. Child, William H. Gengler
Life of this patent
Estimating the term…
Loading patent…
AssigneeInternational Business Machines Corporation
InventorsTheodore Jack London Shrader, Garry L. Child, William H. Gengler
Estimating the term…
A method of enabling a Web browser user to interact with a given application running on a Web server begins by constructing and returning a cookie to the Web browser upon a given occurrence, e.g., user login to the application. Without additional user input, the routine then forces the Web browser to check with the Web server that the cookie was set on the Web browser. Preferably, this is accomplished by sending the cookie from the Web server in a refresh page that redirects the HTTP flow back to itself with a parameter to check if the cookie was set. At the Web server, a test is then done to determine whether the cookie is valid. If so, the user is allowed to interact with the given server application (e.g., to take a given action or to log off from the application without closing the Web browser). A novel cookie construction and validation mechanism is also described.
A method of enabling a Web browser user to interact with a given application running on a Web server, comprising the steps of:
A method of enabling a Web browser user to interact with a given application running on a Web server, comprising the steps of:
A computer program product in a computer-readable medium for enabling a Web browser user to interact with a given application running on a Web server, comprising:
Dependencies are inferred from the claim text.