公开(公告)号：US20050154887A1

公开(公告)日：2005-07-14

申请号：US10755835

申请日：2004-01-12

申请人： Peter Birk ,  Ching-Yun Chao ,  Hyen Chung ,  Carlton Mason ,  Karkala Reddy ,  Vishwanath Venkataramappa ,  Dennis Riddlemoser

发明人： Peter Birk ,  Ching-Yun Chao ,  Hyen Chung ,  Carlton Mason ,  Karkala Reddy ,  Vishwanath Venkataramappa ,  Dennis Riddlemoser

IPC分类号： G06F11/30 ,  G06F21/00 ,  H04L9/00

CPC分类号： G06F21/41 ,  G06F2221/2151

摘要： State management (cookie) data is encrypted so that access control data included in the cookie is unable to be modified by the user. A hashing algorithm is performed using various fields in the cookie data and the hash value is encrypted. The hash value is combined with other data such as the user identifier and a time stamp and encrypted to form a cookie value. When a request is received, the cookie data is checked. If the token value is not in the server's cache then the token is authenticated facilitating movement of the client between servers. If the cookie does not exist or is timed out, then the user is authenticated using traditional means.

摘要翻译： 状态管理（cookie）数据被加密，使得包含在cookie中的访问控制数据不能被用户修改。 使用Cookie数据中的各种字段执行散列算法，并且哈希值被加密。 哈希值与诸如用户标识符和时间戳的其他数据组合，并被加密以形成cookie值。 收到请求后，将检查Cookie数据。 如果令牌值不在服务器的缓存中，那么令牌被认证便于客户端在服务器之间移动。 如果cookie不存在或超时，那么用户将使用传统手段进行身份验证。