Secure user session managing method under web environment and recording medium recorded program executing it

摘要

secure user session management method in a web environment is described. Calculating a first server authentication value by using a user session management method, the shared key stored in the server, the server random number and the previously generated; Generating a new random number; Calculating a second server authentication value using the shared key stored in the random number and the server; Transmitting to the client an HTTP response (HTTP response) including the random number; And receiving an HTTP request containing cookies (cookie) from (HTTP request) to the client - wherein the cookie comprises a client authentication value, and the client authentication value received is the client and the shared key stored in the client calculated by using a random number included in the HTTP response; And compares the client authentication value and any one of the first server, the second server authentication value and the authentication value, including the step of determining the success or failure of authentication of the sender client. Allowing an error caused by the user's behavior pattern or network situation and time can be flexible sender authentication.