Patent ID: 8219687
Filing Date: 2012-07-10
Classification: G06F

Abstract:
1. A computer implemented method of managing session data, the computer implemented method comprising: responsive to receiving a request for content, determining whether preexisting serialized session data from a serialized session object associated with the request is present; responsive to the preexisting serialized session data not being present, generating session data in a first session object associated with the request, creating a serialized session data from the first session object, calculating a message authentication code using a timestamp, the serialized session data, and a security key, generating a response page having a set of forms including a set of hidden fields comprising the serialized session data, the timestamp, and the message authentication code, and sending the response page to a client browser; and responsive to a presence of the preexisting serialized session data being associated with the request, wherein the preexisting serialized session data is in the set of hidden fields, de-serializing the preexisting serialized session data to form de-serialized session data, storing the de-serialized session data in a second session object, and processing the request using the de-serialized session data.