On a secure session management method using HTTP-cookie-protocol

摘要

In this paper, we propose an HTTP session management method which can securely track HTTP sessions using HTTP-Cookie-Protocol and JavaScript which called 'Dynamic Cookie Management Client'. Our method can continue the session in the Web service by sharing one-time session ID between Web server and Web browser. Furthermore, as our session management method consider the security holes which exist in the Web browser and affect to HTTP session tracking, it is securere than existent ones using the HTTP-Cookie-Protocol.