Patent ID: 8631238
Filing Date: 2014-01-14
Classification: H04L

Abstract:
1. A method of preventing race conditions in secure token conversations, the method comprising: generating a message from a client application to a server application; determining, at a WS-SC client, that a first secure conversation token (SCT) exists; using the first SCT to encrypt the message; sending the encrypted message to the server; receiving an indication that the first SCT has expired; initiating an SCT renew request; storing the first SCT at the client and the server; receiving a second SCT in response to the SCT renew request, and storing the second SCT in addition to the first SCT; determining an expiration time of the first SCT; determining a round trip time (RTT) of the SCT renew request; based on the combination of the RTT of the SCT renew request and the expiration of the first SCT, scheduling an subsequent SCT renew request; retrieving, at a WS-SC server, an encrypted message; determining that the encrypted message has been encrypted using the first SCT; in response to the determination, using the first SCT to decrypt the message; generating a response from the server to the client; and initiating the subsequent SCT renew request based on the determined RTT of the SCT renew request and the determined expiration of the first SCT.