Web Session Synchronization via Web Socket and Cookie Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for maintaining web sessions across devices fail to transfer session information effectively, leading to a disrupted user experience, especially for web pages with session-dependent functionality like shopping carts, as users must repeat operations when switching devices.
Innovation Solution
The method involves establishing web socket connections between sending and receiving devices to synchronize session information, using cookies and redirect URLs to maintain session continuity without requiring server-side storage, thus enhancing security and user experience.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If URL transfer is used to maintain web page continuity between devices, then the web page can be loaded on the receiving device, but session information is lost and users must repeat operations
Solution Approach 1:
The system performs preliminary action by capturing and storing session information (cookies, local storage, session storage) from the sending device before the user switches devices. This pre-captured data is then transferred to the receiving device, allowing the web session to continue without requiring users to repeat operations like adding items to a shopping cart.
Solution Approach 2:
The system introduces an intermediary mechanism (the session synchronization system using web sockets) that mediates between the sending and receiving devices. This intermediary captures session data from the sending device and delivers it to the receiving device, enabling seamless session continuation across devices without direct device-to-device communication.
2Reliability
If session information is stored on the server to maintain sessions across devices, then session continuity can be maintained, but security is compromised due to server-side storage of sensitive data
Solution Approach 1:
The system extracts session information from the server-side storage model and implements client-side session management. By taking out the session data control from the server and placing it on the client devices through secure web socket connections, the system maintains session continuity while reducing security risks associated with centralized server-side storage of sensitive user data.
Solution Approach 2:
The system implements self-service by enabling devices to autonomously manage and transfer their own session information through web sockets. Each device maintains its own session data locally and can independently synchronize with other devices, eliminating the need for secure server-side storage and providing devices with self-sufficient session management capabilities.
3Adaptability or versatility
If traditional HTTP connections are used for web page loading, then web pages can be accessed, but real-time session synchronization between devices cannot be achieved
Solution Approach 1:
The system replaces the traditional HTTP request-response mechanical system with a web socket-based persistent connection system. This substitution enables real-time, bidirectional communication between devices and the synchronization server, allowing instantaneous session information transfer when users switch devices, rather than relying on slower, request-driven HTTP polling or redirection.
Data Source
AI summary
A first web socket connection is established with a sending device and a second web socket connection is established with a receiving device. The sending device is notified when the second web socket connection is established. One or more cookies including session information and a redirect uniform resource locator (URL) are received from the sending device in response to the notification and over the first web socket connection. The one or more cookies and the redirect URL are forwarded to the receiving device over the second web socket connection, wherein the redirect URL is associated with a web page that, when executed by the receiving device, is configured to comprise the session information.