| 摘要 |
A method is presented for managing session identifiers amongst a set of servers. The servers receive resource requests from clients, and the servers maintain sessions having session state information wherein each session is associated with a session identifier. When a server sends a response to a client, the response is accompanied by a first cookie and a second cookie, wherein the first cookie contains a copy of the session identifier and the second cookie contains a copy of the session identifier that has been cryptographically protected using a cryptographic key, wherein each server in the set of servers possesses a copy of the cryptographic key. If a server does not recognize the session identifier in the first cookie, the server decrypts the second cookie, and if the session identifier from the cookies are identical, the server will reuse the session identifier rather than generating a new session identifier.
|
