Browser Watchdog Session for Token Disconnection Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems lack an efficient method for automatically logging out a client from a server when a portable token is disconnected, leading to potential security vulnerabilities and session persistence beyond intended durations.
Innovation Solution
Implementing a method where a client device with a browser performs short polling to detect token disconnection, establishes a watchdog session with a session manager, and sends a disconnect message upon detection, triggering a logout from the server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a portable token is used for authentication during the authentication phase, then client authentication is improved, but automatic logout detection at the server side deteriorates
Solution Approach 1:
A session manager is introduced as an intermediary component between the client/browser and the service. The session manager receives long polling requests from the browser, monitors token connection status, and manages the session lifecycle. This intermediary enables automatic logout detection by bridging the gap between the authentication mechanism (token) and the session management functionality, allowing the server to be aware of token disconnection without requiring direct server-side token monitoring.
Solution Approach 2:
The system implements a feedback mechanism through long polling requests where the browser periodically checks with the session manager about session status. When the token is disconnected, the browser detects this through the polling mechanism and sends a disconnect message to the session manager, which then triggers the logout process. This continuous feedback loop enables real-time detection of token disconnection and automatic session termination.
2Duration of action of stationary object
If the server maintains session persistence for extended periods, then service availability is improved, but security vulnerabilities worsen
Solution Approach 1:
The session duration is made dynamic rather than static. The session manager continuously monitors token connection status and automatically adjusts session validity based on real-time conditions. When a token is disconnected, the session is immediately terminated regardless of the originally planned duration. This dynamic adaptation allows the system to maintain sessions for extended periods when needed while automatically reducing duration when security conditions change (token disconnection), thus resolving the contradiction between availability and security.
Solution Approach 2:
The system performs preliminary actions by establishing a watchdog session through long polling requests that continuously monitor token status before any potential security breach can occur. The browser is configured to detect token disconnection and send disconnect messages in advance, allowing the session manager to proactively terminate sessions before unauthorized access can happen. This preliminary monitoring and action prevents security vulnerabilities rather than reacting to them after they occur.
3Speed
If short polling is used to detect token disconnection quickly, then logout detection speed is improved, but energy consumption worsens
Solution Approach 1:
The system uses periodic long polling requests instead of continuous short polling. The browser sends polling requests at predetermined time intervals to the session manager, which is more energy-efficient than continuous monitoring. This periodic action maintains adequate detection speed for logout events while significantly reducing energy consumption compared to constant short polling, as the system only checks status at necessary intervals rather than continuously.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention is a method for allowing a service (SE) hosted by a secure server (SV1) to be aware that a portable token (SC) has been disconnected from a client device (PC) comprising a browser (BR). The method comprises the following steps: - performing a short polling in the client device (PC) allowing the browser (BR) to detect that the portable token (SC) has been disconnected less than a first limited duration after disconnecting, - sending a long polling request from the browser (BR) to a session manager (SM) for establishing a watchdog session by the session manager (SM), - when the browser (BR) detects that the portable token (SC) has been disconnected, sending a disconnect message from the browser (BR) to the session manager (BR), - upon receipt of the disconnect message, sending a logout message from the session manager (SM) to the service.