Abstract: A new system for gracefully re-establishing an expired user session in which a separate session expiration time cookie is provided to communicate the session expiration time from the Web server to the browser. The Web server further provides the browser with session validation and re-establishment routines that include logic for checking whether a current user session has expired, or is near expiration. These routines are cached by the browser. When a browser user performs an action requiring server action, a determination is made as to whether the current user session has expired, or is near expiration. If either of these cases are true, the user action just invoked is stored, and a separate browser window is opened. A protected page is loaded which closes the browser window. In order to display the protected page, the user first encounters the login page and enters the proper credentials to log-in to the server.