Login Session Queue for Managing User Login Sessions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to effectively manage a legitimate user's login session status, allowing illegitimate users to maintain active sessions despite password changes, leading to security issues.
Innovation Solution
Implementing a method and server system that uses a login session queue to manage user login sessions by querying for existing sessions, storing session IDs, and managing login status through a session cache list, ensuring legitimate users maintain control over their sessions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Duration of action of stationary object
If a login session is kept active by periodically refreshing the webpage to update the login timestamp, then the login session remains active, but security control over the legitimate user's login status is lost
Solution Approach 1:
The system implements feedback by continuously monitoring login session status and timestamp updates. When an illegitimate user refreshes the page to extend session duration, the system detects this through the session queue mechanism and can terminate the session, thereby maintaining security control while managing session duration.
Solution Approach 2:
A session queue is introduced as an intermediary between the legitimate user and the session management system. This queue tracks all login sessions associated with a user ID and enables the system to identify and terminate illegitimate sessions without affecting the legitimate user's ability to maintain authorized sessions.
2Reliability
If the login session queue tracks all user sessions, then legitimate users can control their login status, but system complexity increases
Solution Approach 1:
Instead of modifying the core session management system, the invention creates a copy mechanism through the session queue that mirrors session information. This queue stores session IDs and timestamps, providing a simplified view and control interface for legitimate users without complicating the underlying session handling infrastructure.
3Reliability
If session cache list stores all login session information, then session management capability is improved, but storage capacity is consumed
Solution Approach 1:
The session queue extracts only the essential information needed for session management (session IDs and timestamps) from the complete session data. By storing only these critical elements in the queue while maintaining full session information elsewhere, the system achieves effective session control with minimal additional storage overhead in the cache list.
Data Source
AI summary
The present disclosure provides a method, device and server for managing user login sessions. A session cache list is queried, using a user ID and after a user has successfully logged in with the user ID via the login medium, whether a login session queue corresponding to the user ID exists in the session cache list. If the login session queue exists in the session cache list, a user login status is managed through the login session queue. If the login session queue corresponding to the user ID is absent from the session cache list, a session ID corresponding to the user's login is stored in a login session queue corresponding to the user ID in the session cache list. A legitimate user is able to effectively manage each login created with the user's user ID through the login session queue, and to prevent any login sessions created when the user ID is used to log in from being beyond the legitimate user's control.