Cross-Domain Session Transfer via Mediator Redirection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current HTTP protocols do not inherently support session tracking, making it difficult to transfer session data between network applications accessible via different DNS domains, particularly for applications requiring user authentication, as cookies issued by one domain are not valid for another domain.
Innovation Solution
A method and system for transferring session data between network applications by establishing a session with an HTTP client, storing session data in a memory structure, and transmitting a redirection status code and URI to redirect the client to a new application domain, allowing seamless session transfer without requiring re-authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If session data is stored using domain-specific cookies, then session security and domain isolation are improved, but session continuity across different DNS domains deteriorates
Solution Approach 1:
The patent introduces a mediator component that intercepts HTTP requests and responses between the client and server. This mediator extracts session data from domain-specific cookies, transforms it into a universal format, and manages cross-domain session continuity. The mediator acts as an intermediary layer that reconciles the conflict between domain isolation (security) and cross-domain accessibility (continuity), allowing users to maintain sessions across different DNS domains while preserving the security benefits of domain-specific cookie management.
2Ease of manufacture
If HTTP protocol is used for simple request-response exchange, then protocol simplicity and ease of implementation are improved, but inherent session tracking capability deteriorates
Solution Approach 1:
The patent implements preliminary action by establishing session tracking infrastructure before actual session management is needed. The system pre-configures session data structures, defines cookie handling protocols, and sets up the mediator framework in advance. This allows the simple HTTP protocol to be enhanced with session tracking capabilities without requiring complex modifications to the core protocol, as the session management layer is prepared beforehand and operates transparently over the simple HTTP request-response mechanism.
3Reliability
If user authentication is required for each domain, then domain security and access control are improved, but user convenience and authentication time deteriorate
Solution Approach 1:
The patent applies the copying principle by creating and managing session data copies that can be transferred across domain boundaries. Instead of requiring users to re-authenticate at each domain, the system copies essential authentication information into session data structures that can be safely shared across domains through the mediator. This copying mechanism preserves domain security by maintaining proper authentication verification while eliminating redundant authentication steps, thereby reducing authentication time and improving user convenience without compromising security.
Data Source
AI summary
A method for transferring session data includes receiving a hypertext transfer protocol (HTTP) request that includes user credential data from a client computer program; determining whether to apply a filter that includes data inclusion condition(s) or data exclusion condition(s) to data pertaining to a session between a first application and the client computer program; storing a data structure containing the user credential data in response to the client computer program not meeting the data inclusion condition(s) or the session meeting the data exclusion condition(s); transmitting an HTTP response that includes an identifier of the data structure and an identifier of a second computer program function, which utilizes the identifier of the data structure to retrieve data to authenticate the client computer program; and erasing the data structure from the memory to prevent replay attacks.