Login Management System Timeout and Refreshing Conflict
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The automatic logout function and automatic refreshing function in conventional login management systems are incompatible, leading to security issues and failure to meet real-time requirements due to differing timeout and refreshing intervals.
Innovation Solution
A login management system that includes a page responding unit, login performing unit, logout performing unit, counting unit, and logout managing unit, where the login timeout period is set longer than the refreshing time interval, and logout is performed when the accumulated refreshing time from successive automatic requests exceeds the timeout period, ensuring compatibility and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the login timeout period is set to be longer than the refreshing time interval, then the automatic refreshing function can operate continuously, but the security requirement is compromised
Solution Approach 1:
The system dynamically adjusts the effective timeout period based on the relationship between login timeout and refreshing interval. By introducing a counter that tracks refreshing requests and modifies timeout judgment logic, the system adapts its security enforcement to accommodate continuous refreshing operations while maintaining security for truly idle sessions.
Solution Approach 2:
The invention changes the parameter of timeout judgment by introducing a counter mechanism. Instead of using a fixed timeout period, the system modifies the timeout logic to account for accumulated refreshing requests, effectively changing how the timeout parameter is evaluated to resolve the conflict between continuous refreshing and security.
2Reliability
If the refreshing time interval is set to be longer than the login timeout period, then security is maintained, but the real-time property requirement is not met
Solution Approach 1:
The system dynamically adjusts the effective timeout period based on the relationship between login timeout and refreshing interval. By introducing a counter that tracks refreshing requests and modifies timeout judgment logic, the system adapts its security enforcement to accommodate continuous refreshing operations while maintaining security for truly idle sessions.
Solution Approach 2:
The invention changes the parameter of timeout judgment by introducing a counter mechanism. Instead of using a fixed timeout period, the system modifies the timeout logic to account for accumulated refreshing requests, effectively changing how the timeout parameter is evaluated to resolve the conflict between continuous refreshing and security.
3Reliability
If automatic logout is performed based on fixed timeout period, then security is ensured, but compatibility with automatic refreshing function is lost
Solution Approach 1:
The system dynamically adjusts the effective timeout period based on the relationship between login timeout and refreshing interval. By introducing a counter that tracks refreshing requests and modifies timeout judgment logic, the system adapts its security enforcement to accommodate continuous refreshing operations while maintaining security for truly idle sessions.
Solution Approach 2:
The invention changes the parameter of timeout judgment by introducing a counter mechanism. Instead of using a fixed timeout period, the system modifies the timeout logic to account for accumulated refreshing requests, effectively changing how the timeout parameter is evaluated to resolve the conflict between continuous refreshing and security.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention is provided with the page responding unit 33, the login performing unit 31, the logout performing unit 35, the counting unit 37, and the logout managing unit 39. The page responding unit 33 submits a response of a Web page in response to an automatic request or a manual request from a user. The login performing unit 31 performs login by user authentication. The logout performing unit 35 performs logout of the user in a case in which the request from the user who logged in is not received within the login timeout period. The counting unit 37 counts the automatic request upon reception of the automatic request within the login timeout period. The logout managing unit 39 makes the logout performing unit 35 perform logout in a case in which the accumulated refreshing time exceeds the login timeout period.