Abstract: Method and apparatus that provide tailorable access privileges for services based on session access characteristics. In a session between a user and a software application that provides one or more services, there are various access characteristics that describe the security of the session, for example, user authentication and encryption. Various combinations of access characteristics are defined and security levels are associated with the combinations. Each of the available services also has an associated security level. Access characteristics of a session are established after a user logs in to establish a session and the user is authenticated. When a service request is received, the session's access characteristics are used to determine the session's security level. If the session's security level satisfies the security level required by the requested service, access to the service is granted. Otherwise, access is denied.

Abstract: Method and apparatus for session management in wireless e-commerce. In various embodiments, the invention manages shopping sessions between wireless communication devices and a merchant application. A gateway module generates respective wireless session identifiers upon receipt of initial requests from the wireless communication devices and provides the wireless session identifiers to the merchant application. The merchant application generates respective merchant session identifiers for the wireless session identifiers and provides the merchant session identifiers to the gateway module. The wireless session identifiers and corresponding merchant session identifiers are associated at the gateway module. In response to subsequent communications from the mobile devices to the merchant application, the gateway module transmits to the merchant application the merchant session identifiers. A user authentication module works in conjunction with the gateway module and authenticates users of the wireless devices.