Cross-domain Session Refresh via Hidden i-Frame Redirection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing multi-site user authentication systems require users to re-authenticate across multiple domains when an authenticated session expires, leading to inconvenience and inefficiency.
Innovation Solution
The implementation of redirection techniques, specifically using hidden inline frames (i-frames) and polling, to refresh authenticated sessions across multiple domains, ensuring seamless access to affiliated services without interrupting the user experience.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If session refresh is limited to single domain, then authentication security is maintained, but user convenience deteriorates requiring re-authentication across multiple domains
Solution Approach 1:
The patent segments the authentication system into domain-specific authentication modules, where each domain maintains its own authentication state independently. This allows session refresh to be performed separately for each domain, enabling cross-domain session validation without requiring complete re-authentication, thus improving user convenience while maintaining security through modular architecture
Solution Approach 2:
The patent introduces an intermediary authentication mechanism that mediates between multiple domains. When a user accesses a domain with an expired session, the intermediary system validates the session status and facilitates seamless re-authentication across domains without requiring the user to manually re-enter credentials, thereby enhancing ease of operation
2Ease of operation
If hidden i-frame redirection is used for session refresh, then user experience is maintained, but system complexity increases
Solution Approach 1:
The patent extracts the session refresh process into a separate, hidden i-frame operation that runs independently from the main user interface. This allows the redirection and authentication refresh to occur in the background without disrupting the user experience, while the complexity of the redirection mechanism is isolated and managed separately from the core application logic
3Reliability
If polling is used to detect session refresh completion, then session validity is ensured, but processing overhead increases
Solution Approach 1:
The patent implements periodic polling at strategically determined intervals to check session refresh completion. Rather than continuous monitoring, the system performs discrete periodic checks that balance reliability of session validation with minimization of processing overhead, ensuring session validity while avoiding excessive resource consumption
Data Source
AI summary
Various embodiments utilize redirection techniques to refresh an authenticated session for a web-based executable operated across multiple domains. In at least some embodiments, the redirection techniques utilize a hidden inline frame (“i-frame”) to refresh an authenticated session. In some embodiments, polling is utilized to detect the end of a redirection sequence and a refreshed authenticated session while in other embodiments, an authenticated session is assumed to be refreshed after the expiration of a predetermined period of time.