Personal Token Session Termination for Multi-System Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face difficulties in managing and terminating multiple login-based sessions across different systems, leading to security concerns and the risk of unauthorized access due to the complexity of tracking and closing sessions from various client systems.
Innovation Solution
A personal session controller is introduced that issues a personal token for each login-based session, allowing users to manage and deactivate all sessions with a single action, independent of the server or client system, and automatically disallows session tokens based on user-defined expiration rules and destruction settings.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users manually track and close each session window separately, then session security is maintained, but user operation complexity and time consumption increase significantly
Solution Approach 1:
The patent segments session management into two independent components: session tokens that remain on server systems and personal tokens that reside on client systems. This segmentation allows the personal token to independently control and terminate session tokens across multiple systems, eliminating the need for manual tracking while maintaining security through the personal token's ability to disallow session tokens remotely.
Solution Approach 2:
The personal token acts as an intermediary between the user and multiple session tokens across different systems. Instead of requiring users to manually manage each session window, the personal token automatically communicates with session tokens, enabling centralized control and automatic termination of sessions through a single interface, thus resolving the contradiction between security and ease of operation.
2Adaptability or versatility
If session tokens are maintained across multiple client systems, then user access flexibility is improved, but the risk of unauthorized access increases
Solution Approach 1:
The patent implements a feedback mechanism where personal tokens continuously monitor and communicate with session tokens across multiple client systems. When a user logs out or terminates access from one system, the personal token receives feedback and automatically propagates termination signals to session tokens on other systems, ensuring that unauthorized access cannot occur even when multiple sessions are active across different platforms.
3Reliability
If automatic session termination based on inactivity is implemented, then session security is improved, but users cannot immediately terminate sessions before the time limit
Solution Approach 1:
The patent implements preliminary action by providing users with personal tokens that enable immediate session termination before any inactivity time limit is reached. Instead of waiting for automatic termination based on timeout, users can proactively use their personal tokens to disallow session tokens and close associated windows immediately, giving them full control over session security timing while maintaining the option for automatic termination as a backup security measure.
Data Source
AI summary
A method, system, and program are provided for killing login-based sessions with a single action. In addition to issuing a session token to a client system upon login by a user to a network service, a personal token is issued to the client system. The personal token is executable at the client system to trigger accesses to a personal session controller and to automatically disallow the session token if the personal session controller indicates that the personal token is deactivated. The personal session controller enables an interface through which a user is enabled select to deactivate all active personal tokens with a single action, such that a user manages killing login-based sessions independent of the server system authorizing each login-based session and independent of the client system to which the login-based session was authorized.