Patent ID: 8578462

Claim:
A method of secure session management for a web farm, the web farm including a first server and a second server, the second server having a requested web page, the method comprising: at the first server: receiving a request for the requested web page from a browser, said request including an encrypted session token associated with a session; decrypting said encrypted session token at the first server to obtain a session ID and a timestamp; transmitting a redirect message, said redirect message prompting transmission of said request to the second server; in conjunction with said transmitting said redirect message, transmitting said session ID and said timestamp directly to the second server; at the second server: receiving said request; receiving said session ID and said timestamp from said first server; verifying said session; generating a new session ID; updating the timestamp to produce an updated timestamp; creating a new session token, wherein the new session token includes the new session ID and the updated timestamp; encrypting the new session token to produce a new encrypted session token; and transmitting a response to the browser from the second server, wherein the response includes the new encrypted session token.