Session Recovery Using Stored Authentication Credentials
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In Web systems, session invalidation due to timeout leads to user authentication requirements upon session recovery, disrupting process continuity and requiring users to re-execute previous operations.
Innovation Solution
An information processing apparatus with an authentication information maintain part and a session recovery part that detects session invalidation and automatically re-establishes the session using stored authentication information, allowing seamless session resumption without user intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If session timeout is implemented to ensure security and reduce load, then security and system performance are improved, but session continuity and user convenience deteriorate
Solution Approach 1:
The patent applies preliminary action by storing authentication information (user ID and password) in advance before session timeout occurs. When the session is invalidated, the system automatically retrieves the pre-stored authentication information to re-establish the session, eliminating the need for users to re-input credentials and maintaining session continuity while preserving security.
2Ease of operation
If authentication information is stored for automatic session recovery, then session continuity and user convenience are improved, but security risks increase
Solution Approach 1:
The patent introduces an intermediary mechanism - the authentication information storage unit - that securely holds user ID and password. This intermediary allows the system to automatically recover sessions without direct user intervention, balancing convenience with security by controlling access to sensitive credentials through a dedicated storage component rather than handling them directly in the session management flow.
3Productivity
If session is automatically recovered using stored authentication information, then productivity and user experience are improved, but system complexity increases
Solution Approach 1:
The patent segments the session management system into distinct functional units: an authentication information storage unit for credential management, a session management unit for session operations, and a recovery unit for automatic re-establishment. This segmentation allows each component to perform its specific function independently, making the overall system more manageable and maintainable despite the added complexity of automatic recovery capabilities.
Data Source
AI summary
An information processing apparatus, a session recovery method and a recording medium for storing a session recovery program are disclosed. According to one aspect of the present invention, even if a session with a server apparatus connected via a network is invalidated, it is possible to resume the session without user's recognition of the session invalidation. The information processing apparatus includes an authentication information maintain part maintaining authentication information supplied to establish the session, a session invalidation detection part detecting that the session is invalidated, and a session recovery part, when the session invalidation detection part detects that the session has been invalidated, requesting the server apparatus to establish a session by using the authentication information in the authentication information maintain part.