Gateway Cookie Management via Creation Time Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In wireless communication environments, the inability of gateways to handle encrypted HTTP cookies leads to session invalidation issues due to the creation of multiple cookies from the same server for a wireless device, resulting in failed validation of subsequent sessions.
Innovation Solution
A method where a web-based server returns non-encrypted and encrypted HTTP cookies to a wireless device, with the gateway comparing creation times and forwarding the most recently created cookie to prevent session invalidation, ensuring only one cookie is sent to the server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the gateway stores non-encrypted HTTP cookies for non-secure sessions, then the gateway can manage cookies for wireless devices, but the gateway cannot store encrypted HTTP cookies from secure sessions, leading to multiple cookies being created
Solution Approach 1:
The gateway performs preliminary actions by storing both non-encrypted and encrypted HTTP cookies before session validation issues occur. It proactively manages multiple cookies by comparing their creation times and preparing the most recent one for forwarding, preventing session invalidation before it happens.
Solution Approach 2:
The gateway acts as an intermediary that handles the complexity of managing multiple cookie types (encrypted and non-encrypted) between the wireless device and web server. It mediates the cookie selection process by comparing creation times and choosing the most recent cookie to forward, ensuring proper session validation.
2Quantity of substance
If the gateway forwards multiple HTTP cookies to the web server, then all cookie information is transmitted, but the server receives duplicate cookies causing session invalidation
Solution Approach 1:
The gateway extracts and selects only the most recent HTTP cookie from multiple available cookies (both encrypted and non-encrypted) and forwards just that one to the web server. This extraction process eliminates duplicate cookies that would cause session invalidation while preserving the necessary cookie information.
Solution Approach 2:
The gateway changes the parameter of cookie selection based on creation time. It compares the creation times of multiple cookies and selects the most recent one for forwarding, transforming the multi-cookie state into a single cookie state that ensures proper session validation.
3Reliability
If the wireless device stores encrypted HTTP cookies directly, then secure session data is preserved, but the gateway cannot access or compare cookies to manage multiple sessions
Solution Approach 1:
The system segments cookie storage into two locations: the gateway stores non-encrypted cookies for non-secure sessions, while the wireless device stores encrypted cookies for secure sessions. This segmentation allows each component to manage cookies appropriately according to security requirements while maintaining overall system functionality.
Data Source
AI summary
A method, system, and computer readable media are provided for managing multiple HTTP cookies that are present in a wireless communication system. When a secure or non-secure HTTP cookie is formed, a time of creation for that HTTP cookie is also created as part of the cookie header. Therefore, when a wireless device makes a subsequent communication to a web based server, the gateway compares the creation time for multiple HTTP cookies that are present, and only forwards the most recently created HTTP cookie to the web based server. This avoids invalidating a session as a result of receiving multiple conflicting HTTP cookies from the same wireless device.