SECURE USER SESSION MANAGING METHOD AND SYSTEM UNDER WEB ENVIRONMENT, RECORDING MEDIUM RECORDED PROGRAM EXECUTING IT

摘要

A method for safely managing a session of a user and a recording medium recording a program by using an authentication algorithm are provided to protect a user session by applying the authentication algorithm to an HTTP(HyperText Transfer Protocol) and use the other storage space for storing a secret key on a web browser. A random number generator(21) produces a client and a shared random number. An authenticator output unit(22) produces s server authenticator. The server authenticator is a result value stored with the generated random number. An authenticator comparison unit(23) is transmitted from a server authenticator and a client. An authentication management unit(24) determines whether to success of transmitter authentication of the client according to a comparison result. In case authentication succeeds in, it is determined as the HTTP request from the suitable client and session is maintained.