Patents by Inventor Yan Chun Zhao

Yan Chun Zhao has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Secure session management and authentication for web sites
    Patent number: 7216236
    Abstract: The present invention comprises a system and method for secure session management and authentication between web sites and web clients. The method includes both secure and non-secure communication protocols, means for switching between secure and non-secure communication protocols, a session cookie and an authcode cookie. The session cookie is used for session management and the authcode cookie is used for authentication. The session cookie is transmitted using a non-secure communication protocol when the web client accesses a non-secure web page, whereas, the authcode cookie is transmitted using a secure communication protocol when the web client accesses a secure web page. Session management architecture and usage of two distinct cookies along with both secure and non-secure communication protocols prevents unauthorized users from accessing sensitive web client or web site information.
    Type: Grant
    Filed: March 16, 2001
    Date of Patent: May 8, 2007
    Assignee: International Business Machines Corporation
    Inventors: Wei Dong Kou, Lev Mirlas, Yan Chun Zhao
  • Secure session management and authentication for web sites
    Publication number: 20020099936
    Abstract: The present invention comprises a system and method for secure session management and authentication between web sites and web clients. The method includes both secure and non-secure communication protocols, means for switching between secure and non-secure communication protocols, a session cookie and an authcode cookie. The session cookie is used for session management and the authcode cookie is used for authentication. The session cookie is transmitted using a non-secure communication protocol when the web client accesses a non-secure web page, whereas, the authcode cookie is transmitted using a secure communication protocol when the web client accesses a secure web page. Session management architecture and usage of two distinct cookies along with both secure and non-secure communication protocols prevents unauthorized users from accessing sensitive web client or web site information.
    Type: Application
    Filed: March 16, 2001
    Publication date: July 25, 2002
    Applicant: International Business Machines Corporation
    Inventors: Wei Dong Kou, Lev Mirlas, Yan Chun Zhao