| 摘要 |
This invention is embodied in an interactive message communication system in a stateless network such as the Internet, providing for resumption of user authentication and restoration of interrupted virtual sessions without loss of data or disruption of workflow. When a user enters the application from any source, he starts a new session by a successful login. The login page includes hidden contextual information describing the initial user request. The hidden contextual information, once submitted together with the proper user ID and password is used to resume the user request and allow the Web server to respond. While in the circumstances where a session is expired or timed-out, when the user completes his message and submits his request, the Web server sends the hidden contextual information included in the request, along with a login page, back to the browser. The user is required to reenter his login information. When he logs in again, all contextual information included in his original request is resubmitted with the login information. An authenticator in the Web server then verifies the login information against the server's database. If the login information is correct, the user is authenticated, and therefore his request is proceeded and the virtual session is restored without loss of data. If the login information is incorrect, the authentication fails, and the login page is returned to the browser. This cycle may be repeated as many times as the user submits incorrect login information. Alternatively, it may be repeated until a predetermined number of attempts is reached, at which point the server refuses to respond further.
|
