System and method for session management

Patent metadata

Field	Value
Publication number	US-10051019-B1
Application number	US-201313794651-A
Country	US
Kind code	B1
Filing date	Mar 11, 2013
Priority date	Nov 9, 2012
Publication date	Aug 14, 2018
Grant date	Aug 14, 2018

Abstract

A client device generates a plurality of application windows. For example, a first application window may be provided by a first application that has a first session established with a server system, and a second application window may be provided by a second application that has a second session established with the server system. The client device detects user activity in the first window. Based on the user activity in the first window, the client device sends a message to the server system. The message providing an indication of user activity in one or more of the plurality of windows. The message causes the server system to maintain the second session as active despite inactivity in the second application window.

First claim

What is claimed is:

1. A method, comprising:
generating, by a client device, a plurality of application windows, the plurality of application windows including a first application window and a second application window, the first application window being provided by a first application that has a first session established with a server system, and the second application window being provided by a second application that has a second session established with the server system;
detecting, by the client device, user activity in the first application window;
updating, by the first application, a messaging mechanism configured to indicate user activity or inactivity with information regarding the user activity detected in the first application window;
detecting, by the client device, user inactivity in the second application window;
polling, by the second application, the messaging mechanism to obtain information about user activity in the first application window;
obtaining, by the second application, the information regarding the user activity detected in the first application window via the polling of the messaging mechanism;
sending, by the second application, an activity message to the server system, the activity message based on the detected user activity in the first application window; and
maintaining, in response to the activity message being sent by the second application, a synchronous operation of each of the first session and the second session as active despite the user inactivity detected in the second application window;
terminating each of the first session and the second session synchronously after a predetermined period of inactivity absent an activity message providing an indication of user activity in the first application window and the second application window being sent to the server system from the client device;
wherein the client device is structured to display a warning message in each of the plurality of windows according to the user activity; and
wherein sensitive information in each of the first application window and second application window is made inaccessible in response the first session and second session being terminated.

2. The method of claim 1 , wherein the user activity comprises at least one of a keystroke, mouse click, tough gesture and window scrolling within at least one of the plurality of windows.

3. The method of claim 1 , further comprising storing a time stamp corresponding to a most recent user activity, and wherein the time stamp is accessible to by the first and second applications.

4. The method of claim 3 , further comprising
comparing the time stamp with a current time;
determining that the most recent user activity occurred prior to a pre-determined time period; and
displaying the warning message in each of the plurality of application windows.

5. The method of claim 4 , wherein the warning message includes a countdown timer corresponding to an expiration of the predetermined period of inactivity and a selectable button to stop the countdown timer.

6. The method of claim 5 , further comprising:
receiving user input selecting the selectable button;
removing the warning message from each of the plurality of application windows; and
resetting the user activity time stamp.

7. The method of claim 5 , further comprising:
changing, after the countdown timer reaches zero, the content of each of the plurality of application windows to be different than the content that was being displayed prior to displaying the warning message.

8. The method of claim 1 , further comprising sending, by the client device, based on user inactivity being detected in each of the first application window and the second application window, an inactivity message to the server system, the inactivity message providing an indication that there has been no user activity in the plurality of application windows for a predetermined period of time.

9. The method of claim 1 , further comprising propagating information about the user activity to each of the plurality of application windows.

10. A method, comprising:
generating, by a client device, a plurality of application windows, the plurality of application windows including a first application window and a second application window, the first application window being provided by a first application that has a first session established with a server system, and the second application window being provided by a second application that has a second session established with the server system;
detecting, by the client device, user activity in the first application window;
updating, by the first application, a messaging mechanism configured to indicate user activity or inactivity with information regarding the user activity detected in the first application window;
detecting, by the client device, user inactivity in the second application window;
polling, by the second application, the messaging mechanism to obtain information about user activity in the first application window;
obtaining, by the second application, the information regarding the user activity detected in the first application window via the polling of the messaging mechanism;
sending, by the second application, an activity message to the server system, the activity message based on the detected user activity in the first application window;
maintaining, in response to the activity message being sent by the second application, a synchronous operation of each of the first session and the second session as active despite the user inactivity detected in the second application window;
upon detecting user inactivity in each of the plurality of application windows for a predetermined amount of time, generating a warning message in a portion of each of the plurality of application windows;
wherein the warning message is configured to inform the user that each session between the server system and the plurality of application windows will be disconnected within a time period corresponding to an expiration of the predetermined period of inactivity;
terminating each of the sessions synchronously after a predetermined period of inactivity absent an activity message providing an indication of user activity in any of the plurality of application windows being sent to the server system from the client device; and
receiving, by the client device, a disconnection message from the server system confirming that each session between the plurality of application windows and the server system has been terminated after the expiration of the predetermined period of inactivity;
wherein sensitive information in each of the plurality of application windows is made inaccessible in response to each of the sessions between the plurality of application windows being terminated.

11. The method of claim 10 , wherein the user activity comprises at least one of keystroke, mouse clicks, scrolling and touch gestures within at least one of the one or more of the plurality of application windows.

12. The method of claim 10 , further comprising changing the content of the plurality of application windows after the server system terminates each session with the server system from content that was displayed in the plurality of application windows prior to generating the warning message.

13. The method of claim 10 , further comprising storing time information corresponding to a most recently detected user activity in of the plurality of application windows.

14. The method of claim 13 , further comprising updating the time information to with the latest detected user activity in the plurality of application windows.

Assignees

• Wells Fargo Bank Na

Inventors

• Jasso Manuel
• Versini Arnaud
• Van Oss Ryan

Classifications

• G06F16/00

  Information retrieval; Database structures therefor; File system structures therefor · CPC title

• G06F5/00

  Methods or arrangements for data conversion without changing the order or content of the data handled · CPC title

• G06F2221/2139

  Recurrent verification · CPC title

• G06F3/033

  Pointing devices displaced or positioned by the user {, e.g. mice, trackballs, pens or joysticks}; Accessories therefor (digitisers characterised by the transducing means G06F3/041) · CPC title

• H04L65/1083 Primary

  In-session procedures · CPC title