JP2010140351A - Information processor, session management method, program and recording medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To take up Cookie information of a Web browser to a smart client in a state that an advantage of the smart client is secured without introducing a proxy program to the client or in a state that security is secured without directly using a URL parameter for delivery of information important on the security included in HTTP Cookie information. <P>SOLUTION: When started (S801), a smart client application 304 obtains an identifier (e.g. a session ID) designated from a start-up source (S802), specifies a Web application 302 that is the start-up source (S804, S805), obtains the HTTP Cookie information held by the Web application 302 from the specified Web application 302 (S806), and accesses a Web server by use of the obtained HTTP Cookie information. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to session management control of a server / client system using the HTTP protocol.

  In recent years, in a server / client system using the HTTP protocol, there are many systems in which a load distribution device distributes a load to a server.

  Originally, since the HTTP protocol is stateless communication, a session between the server and the client cannot be maintained. However, even in such a system, a mechanism for authenticating a user who uses a client and holding connection information between the server and client is required for ensuring security and user convenience.

  In general, for example, session maintenance using HTTP cookies is often used as a solution.

  Patent Document 1 describes a method for taking over session information between different application servers.

  Even in the load balancer described above, it is necessary to correctly distribute requests from clients to servers to be processed. As this mechanism, there are a method of using an HTTP Cookie, a method of holding and processing a client source IP address, and the like.

  However, the method of judging based on the source IP address of the client cannot be used in a NAT (Network Address Translation) environment because the IP address is hidden.

  In addition, when a mechanism for realizing single sign-on is introduced in the authentication server, the authentication server receives communication from the client and checks whether it has been authenticated. If it has not been authenticated, an authentication screen is transmitted to the client to prompt authentication. On the other hand, if authenticated, access to the server is permitted through the load balancer. As described above, in the authentication server, the HTTP Cookie is often used even in the process of checking whether or not the authentication is completed.

  In the server / client system as described above, a Web application using a Web browser is generally used. On the other hand, a client incorporating the ease of introduction and operation that is an advantage of a Web application such as a smart client. / Server-type application technology exists.

  A smart client is a type of rich client proposed by Microsoft.

  A rich client is a client that has the advantages of both a thin client that has a minimum number of functions and manages main resources by a server, and a fat client that is sophisticated but difficult to manage.

  The following points can be mentioned as features of the smart client.

-A client application installed on the client.

-Modules are managed in a batch on the server and can be easily installed / updated.

・ Local resources can be used.

-Resources on the network can be used.

A Web service is basically used as a server / client communication protocol.

  The smart client is a technology that eliminates the trouble of introduction, which is a problem of conventional applications, and eliminates the poor interface, which is a problem of Web applications. It is also possible to install and start via.

  An example of smart client implementation is one that uses ClickOnce technology provided by Microsoft, for example.

  However, a smart client generally requires a higher development cost than a Web application. Therefore, it is more efficient to use the Web application and smart client properly depending on the usage scene.

  For example, a user authentication part, a menu part, a part that displays a data list list, and the like are implemented by a Web application, and a part that requires a complicated GUI such as data input and check processing is implemented by a smart client. In this case, it is more convenient for the user to handle the web application part and the smart client part in the same session without making them independent. However, a mechanism for transferring session information from a Web application to a smart client is not considered much.

For example, a method of adding session information as a character string as a URL parameter as a method of taking over session information to a smart client activated from a Web browser, or in Reference 1, a proxy program is introduced to a client to monitor network data. A method for adding authentication information as necessary is introduced.
JP 2000-47971 A “MSDN: Managing ClickOnce deployment” (http://www.microsoft.com/japan/msdn/net/winforms/admincodep.aspx)

  However, in the case of the server / client system as described above, not only the session information of the web server but also the cookie information added by the load balancer and the cookie information added by the authentication server are transferred from the web browser to the smart client. There is a need.

  However, when the URL parameter is used for the information included in the HTTP Cookie information, the security important information is displayed in the HTML source or URL display field of the browser, and the security important information is displayed. There is a case.

  The security problem is, for example, falsification by the user, and can easily occur with URL parameters that are easily exposed to the user's eyes. In addition, there is a possibility of leakage from a record in the cache or log, and there is a risk of interception by another server due to the Referer header information.

  On the other hand, the introduction of the proxy program to the client requires that the program be introduced to the client in advance, which is contrary to the reduction of installation work, which is an advantage of the smart client.

  The present invention has been made to solve the above problems. An object of the present invention is to use a URL parameter directly for passing security-critical information included in HTTP Cookie information, without security, and without introducing a proxy program to the client. It is to provide a mechanism capable of handing over cookie information of a Web browser to a smart client while taking advantage of the advantages of the client.

  The present invention provides a first Web client unit that accesses a Web server and holds HTTP Cookie information issued from the Web server, and a second Web client that is activated from the first Web client unit and accesses the Web server. The second Web client unit includes: a specifying unit that specifies the first Web client unit that is an activation source; and the second Web client unit that is specified by the specifying unit. Cookie information acquisition means for acquiring HTTP Cookie information held by the first Web client means from one Web client means, and access to the Web server using the HTTP Cookie information acquired by the cookie information acquisition means Access means.

  According to the present invention, the first Web client means (Web browser) is used without passing URL parameters directly for passing security-critical information included in the HTTP Cookie information and without introducing a proxy program to the client. ) HTTP Cookie information can be transferred to the second Web client means (smart client).

[First Embodiment]
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a system configuration diagram showing an example of a server / client system to which a session management method for an information processing apparatus according to the present invention can be applied.

  The system according to the present embodiment is a server / client system using an HTTP protocol, and Web servers 101 to 103 are connected to a load balancer 104 and a network 108 as shown in FIG. The load balancer 104 receives requests from the Web clients 106 to 107, centrally manages the received requests, recognizes a session using HTTP Cookie information, and processes the request as a Web to be processed. It distributes to the servers 101 to 103 and distributes the load of the servers 101 to 103.

  An authentication server 105 is installed between the load balancer 104 and the Web clients 106 to 107 via the network 109.

  The authentication server 105 is a mechanism for realizing single sign-on. The authentication server 105 receives communication from the client and checks whether it is authenticated by using an HTTP cookie. If it has not been authenticated, an authentication screen is transmitted to the client to prompt authentication. On the other hand, when authenticated, access to the server is permitted through the load balancer.

  FIG. 2 is a block diagram illustrating an example of a hardware configuration of the servers 101 to 103 and the clients 106 to 107 illustrated in FIG.

  In FIG. 2, reference numeral 201 denotes a CPU, which comprehensively controls each device connected to the system bus 204. The ROM 203 or the external memory 211 stores an operating system (OS) that is a control program of the CPU 201 and programs for realizing various functions described later of each server or each client. The RAM 202 functions as a main memory, work area, temporary save area, and the like for the CPU 201.

  The input controller 205 controls input from the input unit 209. Examples of the input unit 209 include a pointing device such as a keyboard and a mouse in a terminal such as a server or a client. In a printing apparatus or the like, examples of the input unit 209 include a touch panel, buttons, and switches.

  The output controller 206 controls the display of the output unit 210. Examples of the output unit 210 include a CRT and a liquid crystal display.

  The external memory controller 207 controls access to the external memory 211 that stores a boot program, various applications, font data, user files, edit files, printer drivers, and the like. In addition, the external memory controller 207 stores various tables and parameters for realizing various functions of each server or each client.

  Examples of the external memory 211 include a hard disk (HD), a floppy (registered trademark) disk (FD), a compact flash (registered trademark) connected to a PCMCIA card slot via an adapter, and smart media.

  The communication I / F controller 208 executes communication control processing with external devices via the networks 108 and 109.

  The program 212 is a program for realizing the present invention. The program 212 is recorded in the external memory 211 and is executed by the CPU 201 by being loaded into the RAM 202 as necessary.

  FIG. 3 is a block diagram showing a functional configuration realized in the clients 106 to 107 shown in FIG.

  As shown in FIG. 3, the clients 106 to 107 are equipped with a Web browser 301 and a ClickOnce loader 303. The web application 302 operates on the web browser 301. The ClickOnce loader 303 receives a request for starting a smart client application (client program) 304 from the user via the Web browser 301, determines whether update is necessary by checking the version of the program, and if necessary, the smart client 304 from the server. After downloading the program, start up processing.

  The smart client (client program) 304 includes a communication unit 305 that performs communication with the server, an identifier management unit 306 that receives and manages an identifier via the communication unit 305, and a process of a caller program based on the received identifier. It has a caller process acquisition unit 307 to be identified, and an HTTP cookie management unit 308 that acquires HTTP cookies from the caller process and manages HTTP cookies used for communication with the server.

  Note that the Web browser 301, the ClickOnce loader 303, and the client program 304 correspond to functions realized by the CPU 201 of the clients 106 to 107 reading out the program stored in the external memory 211 to the RAM 202 and executing it.

  The operation of the server / client system to which the session management method of the information processing apparatus of the present invention can be applied will be described below with reference to FIGS.

  FIG. 4 is a sequence diagram for explaining the operation of the server / client system to which the session management method for the information processing apparatus according to the present invention can be applied. In this sequence diagram, the client is described as the client 106 and the Web server is described as the Web server 101. However, the same applies to the client 107 and the Web servers 102 and 103. Note that S4101 to S4104 indicate user operations.

  S4201 to S4205 indicate processing of the Web application 302. S4301 to S4304 indicate processing of the ClickOnce loader 303. S4401 to S4403 indicate processing of the smart client application 304. That is, S4201 to S4205, S4301 to S4304, and S4401 to S4403 are realized by the CPU 201 of the client 106 reading out the program stored in the external memory 211 to the RAM 202 and executing it.

  S4501 to S4507 indicate processing of the authentication server 105. That is, S4501 to S4507 are realized by the CPU 201 of the authentication server 105 reading out the program stored in the external memory 211 to the RAM 202 and executing it.

  S4601 to S4604 indicate processing of the Web server 101. That is, S4601 to S4604 are realized by the CPU 201 of the Web server 101 reading out the program stored in the external memory 211 to the RAM 202 and executing it.

  Hereinafter, the process will be described.

  First, when the user 401 performs a start operation of the Web application 302 from the Web browser 301 of the client 106 (S4101), the Web browser 301 detects this operation and starts the Web application 302. Then, the activated Web application 302 performs server access (S4201).

  The authentication server 105 analyzes the access from the Web application 302, confirms whether the authentication ticket is included in the HTTP Cookie information, and checks whether the login has been completed (S4501). If it is determined that the user has not logged in, the authentication server 105 returns a login screen to the Web application 302 (S4502).

  The Web application 302 displays a login screen as shown in FIG. 5 (S4202) and prompts a login operation.

  FIG. 5 is a diagram illustrating an example of a login screen.

  When the user 401 performs a login operation from this login screen (S4102), the Web application 302 detects this operation and makes a login request to the authentication server 105 (S4203).

  The authentication server 105 performs a login check based on this login request (S4503). If it is determined that the authentication is successful, the authentication server 105 generates an authentication ticket (S4504) and sends the login request to the Web server 101 (S4505).

  The Web server 101 generates a session in response to the login request (S4601), and returns the menu screen content as shown in FIG. 6 and the session ID to the authentication server 105 as HTTP Cookie information (S4602).

  The authentication server 105 adds the authentication ticket as HTTP cookie information to the menu screen content and HTTP Cookie information (including the session ID) returned from the Web server 101 and returns them to the Web application 302 (S4506).

  The Web application 302 receives the menu screen content and HTTP Cookie information (including the session ID and authentication ticket) returned from the authentication server 105, and displays a menu screen as shown in FIG. 6 (S4204).

  FIG. 6 is a diagram illustrating an example of a menu screen returned from the Web server 101.

  When the user selects a menu for starting the smart client from the menu in the menu screen, for example, the “application for transportation expenses” menu in FIG. 6 (S4103) (S4103), the Web application 302 detects this operation and smartly clicks on the ClickOnce loader 303. A client activation request is made (S4205). At this time, the Web application 302 designates an identifier for specifying the calling Web browser (starting source) as a URL parameter. The identifier for identifying the caller's Web browser is a unique identifier for identifying the caller program, and may be any identifier. For example, a session ID or other identifier for identifying a session may be used. It may be information. In general, a 64-bit hash value is used as the session ID used as the session identification information.

  When the ClickOnce loader 303 receives the activation request, the ClickOnce loader 303 requests the smart server module version information from the Web server 101 (S4301). It is assumed that the URL of the Web server 101 used at this time is also included in the URL parameter.

  When the Web server 101 receives a request for version information of the smart client module, the Web server 101 returns the version information to the ClickOnce loader 303.

  The ClickOnce loader 303 checks the version information returned from the Web server 101 and the version information of the modules arranged in the client 106 (S4302).

  If the ClickOnce loader 303 determines that the version information returned from the Web server 101 is new, the ClickOnce loader 303 sends a download request for the smart client application to the Web server 101 (S4303).

  When receiving the download request for the smart client application, the Web server 101 distributes the smart client application to the ClickOnce loader 303 (S4604).

  The ClickOnce loader 303 activates the smart client application 304 received from the Web server 101 (S4304), and passes the URL parameter received from the Web application 302 to the smart client application.

  The activated smart client application 304 performs activation processing (S4401). Here, the activation process (S4401) will be described with reference to FIG.

  FIG. 7 is a flowchart showing an example of the startup process in the session management apparatus of the present invention. Note that the process of this flowchart is executed by the smart client application 304. That is, the CPU 201 of the clients 106 to 107 reads the program stored in the external memory 211 into the RAM 202 and executes it.

  When the smart client application 304 starts the activation process (S808), the identifier (for example, session ID) described above is acquired from the URL parameter received from the ClickOnce loader 303 (S802).

  Next, the smart client application 304 acquires a list of processes activated on the client (process list), and searches the process list until a caller Web application is found (S803 to S807). FIG. 8 is a diagram illustrating an example of a process list.

  Hereinafter, the loop processing of S803 to S807 will be described in detail.

  The smart client application 304 selects one of the processes from the process list, and determines whether the selected process is a browser application (S804). If it is determined that the selected process is not a browser application, the smart client application 304 repeats the process of S804.

  On the other hand, if it is determined in S804 that the selected process is a browser application, the smart client application 304 compares the identifier of the selected process with the identifier acquired in S802 (S805). . If the smart client application 304 determines that the identifier of the selected process does not match the identifier acquired in S802, the smart client application 304 returns the process to S804.

  On the other hand, if it is determined in S805 that the identifier of the selected process matches the identifier acquired in S802, the smart client application 304 exits the loop and proceeds to step S806.

  In step S806, the smart client application 304 recognizes the selected process as a caller application, acquires and copies HTTP Cookie information from the caller application (S806), and ends the activation process (S808).

  When acquiring the HTTP Cookie information, the smart client application 304 analyzes the URL parameter received from the ClickOnce loader 303, acquires the server information, and copies only the HTTP Cookie information for a specific server or domain. You may comprise. Thereby, unnecessary cookie information can be excluded and only necessary cookie information can be acquired.

  Returning to the description of the sequence diagram of FIG.

  The smart client application 304 that has completed the activation process of S4401 (FIG. 7) displays an input screen for “transportation application” as shown in FIG. 9, and prompts the user to perform an operation (S4402).

  FIG. 9 is a diagram illustrating an example of a screen displayed by the smart client application 304.

  Then, when the user operates the smart client application 304 from the input screen (S4104), the smart client application 304 detects this operation, and if it is necessary to access the server, along with the HTTP cookie information, A processing request is made (S4403).

  The authentication server 105 receives the above processing request from the smart client application 304 and checks whether it has been authenticated (S4506).

  If the authentication server 105 determines that an authentication ticket exists in the HTTP cookie information received from the smart client application 304, the authentication server 105 determines that the authentication has been completed and passes the processing request to the Web server 101 (S4507).

  As described above, the smart client application 304 can operate in the same session as the session of the Web application 302 by using the HTTP cookie information copied from the calling browser. Therefore, even in the environment where the authentication server 105 exists, the same HTTP Cookie information is inherited from the Web application 302 to the smart client application 304 in the same manner. Can be realized.

  Similarly, when accessing the server via the load balancer 104 using HTTP Cookie information, the session is recognized by the Cookie information and is correctly distributed to the processing target server.

  As described above, HTTP Cookie information can be inherited when HTTP Cookie information is not shared among a plurality of applications that use HTTP Cookie information.

  When handing over HTTP Cookie information, URL parameters are not used directly for passing security-critical information included in HTTP Cookie information (such as setting security-sensitive information included in HTTP Cookie information in the URL parameter). Without using a direct method) and without introducing a proxy program to the client, the cookie information of the Web browser can be transferred to the smart client. Therefore, the cookie information of the Web browser can be handed over to the smart client in a state in which security is ensured and without losing the advantages of the smart client without introducing a complicated proxy program.

  By using such a session management apparatus for various systems that require session management, it can be applied to access to any server that uses session information.

  Although the embodiments have been described in detail above, the present invention can take an embodiment as, for example, a system, an apparatus, a method, a program, or a storage medium, and specifically includes a plurality of devices. The present invention may be applied to a system that is configured, or may be applied to an apparatus that includes a single device.

  It should be noted that the configuration and contents of the various data described above are not limited to this, and it goes without saying that the various data and configurations are configured according to the application and purpose.

  Although one embodiment has been described above, the present invention can take an embodiment as, for example, a system, apparatus, method, program, or recording medium, and specifically includes a plurality of devices. The present invention may be applied to a system including a single device.

  As described above, according to the present invention, in an environment where a load balancer using HTTP cookies and an authentication server exist, a session between a caller program such as a web browser and a rich client such as a smart client is performed. Information can be taken over, load distribution can be performed, and authenticated information can be used.

  The configuration of a computer-readable recording medium that records a program for causing a computer to execute the session management method according to the present invention will be described below with reference to the memory map shown in FIG.

  FIG. 10 is a diagram for explaining a memory map of a computer-readable recording medium (storage medium) on which a program for causing a computer to execute the session management method according to the present invention is recorded.

  Although not specifically shown, information for managing a program group stored in the recording medium, for example, version information, creator, etc. is also stored, and information depending on the OS on the program reading side, for example, a program is identified and displayed. Icons may also be stored.

  Further, data depending on various programs is also managed in the directory. In addition, when a program or data to be installed is compressed, a program to be decompressed may be stored.

  The functions shown in FIGS. 4 and 7 in this embodiment may be performed by a host computer by a program installed from the outside. In this case, the present invention is applied even when an information group including a program is supplied to the output device from a recording medium such as a CD-ROM, a flash memory, or an FD, or from an external recording medium via a network. Is.

  As described above, a recording medium in which a program code of software for realizing the functions of the above-described embodiments is recorded is supplied to the system or apparatus, and the computer (or CPU or MPU) of the system or apparatus is stored in the recording medium. It goes without saying that the object of the present invention can also be achieved by reading and executing the program code.

  In this case, the program code itself read from the recording medium realizes the novel function of the present invention, and the recording medium storing the program code constitutes the present invention.

  As a recording medium for supplying the program code, for example, a flexible disk, hard disk, optical disk, magneto-optical disk, CD-ROM, CD-R, DVD-ROM, magnetic tape, nonvolatile memory card, ROM, EEPROM, A silicon disk or the like can be used.

  Further, by executing the program code read by the computer, not only the functions of the above-described embodiments are realized, but also an OS (operating system) or the like running on the computer based on the instruction of the program code. It goes without saying that a case where the function of the above-described embodiment is realized by performing part or all of the actual processing and the processing is included.

  Furthermore, after the program code read from the recording medium is written in a memory provided in a function expansion board inserted in the computer or a function expansion unit connected to the computer, the function expansion is performed based on the instruction of the program code. It goes without saying that the case where the CPU or the like provided in the board or the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

  Further, the present invention may be applied to a system composed of a plurality of devices or an apparatus composed of a single device. Needless to say, the present invention can be applied to a case where the present invention is achieved by supplying a program to a system or apparatus. In this case, by reading a recording medium storing a program represented by software for achieving the present invention into the system or apparatus, the system or apparatus can enjoy the effects of the present invention.

  Furthermore, by downloading a program represented by software for achieving the present invention from a server, database, etc. on a network using a communication program and reading it, the system or apparatus can enjoy the effects of the present invention. It becomes.

  In addition, all the structures which combined each embodiment mentioned above and its modification are also included in this invention.

  By using the session management apparatus of the present invention for various systems that require session management, it can be applied to access to any server that uses session information.

1 is a system configuration diagram illustrating an example of a server / client system to which a session management method for an information processing apparatus according to the present invention is applicable. FIG. 2 is a block diagram illustrating an example of a hardware configuration of servers 101 to 103 and clients 106 to 107 illustrated in FIG. 1. It is a block diagram which shows the function structure implement | achieved in the clients 106-107 shown in FIG. It is a sequence diagram explaining operation | movement of the server / client system which can apply the session management method of the information processing apparatus of this invention. It is a figure which shows an example of a login screen. It is a figure which shows an example of the menu screen returned from the Web server. It is a flowchart which shows an example of the starting process in the session management apparatus of this invention. It is a figure which shows an example of the list of processes. It is a figure which shows an example of the screen which the smart client application 304 displays. It is a figure explaining the memory map of the computer-readable recording medium (storage medium) which recorded the program for making a computer perform the session management method concerning this invention.

Explanation of symbols

101 to 103 Web application server 104 Load balancer 105 Authentication server 106, 107 Client 108, 109 Network 301 Web browser 302 Web application 303 ClickOnce loader 304 Client program 305 Communication unit 306 Identifier management unit 307 Caller program acquisition unit 308 HTTP Cookie Management Department

Claims (12)

A first Web client unit that accesses the Web server and holds HTTP Cookie information issued from the Web server, and a second Web client unit that is activated from the first Web client unit and accesses the Web server An information processing apparatus having
The second Web client means includes
Specifying means for specifying the first Web client means to be an activation source;
Cookie information acquisition means for acquiring HTTP Cookie information held by the first Web client means from the first Web client means specified by the specification means;
Access means for accessing the Web server using the HTTP Cookie information acquired by the cookie information acquisition means,
An information processing apparatus characterized by that. Access to a Web system having a plurality of Web servers having equivalent functions and a load balancer that centrally manages requests to the Web server and distributes requests to the Web server using HTTP Cookie information A first Web client unit that holds HTTP Cookie information issued from any one of the Web servers; and a second Web client unit that is activated from the first Web client unit and accesses the Web system. An information processing apparatus,
The second Web client means includes
Specifying means for specifying the first Web client means to be an activation source;
Cookie information acquisition means for acquiring HTTP Cookie information held by the first Web client means from the first Web client means specified by the specification means;
Access means for accessing the Web system using the HTTP Cookie information acquired by the cookie information acquisition means,
An information processing apparatus characterized by that. First Web client means for accessing a Web system having a Web server and an authentication server that determines whether or not the Web client has been authenticated using HTTP Cookie information and holding HTTP Cookie information issued from the Web server And a second Web client unit that is activated from the first Web client unit and accesses the Web system,
The second Web client means includes
Specifying means for specifying the first Web client means to be an activation source;
Cookie information acquisition means for acquiring HTTP Cookie information held by the first Web client means from the first Web client means specified by the specification means;
Access means for accessing the Web system using the HTTP Cookie information acquired by the cookie information acquisition means,
An information processing apparatus characterized by that.   The cookie information acquisition unit acquires HTTP Cookie information related to a Web server included in a specific URL held by the first Web client unit from the first Web client unit specified by the specifying unit. The information processing apparatus according to any one of claims 1 to 3. The first Web client means is activated by designating an identifier for identifying an activation source when activating the second Web client means,
The second Web client means has an identifier acquisition means for acquiring the identifier designated from the activation source,
The specifying unit specifies the first Web client unit serving as an activation source based on the identifier acquired by the identifier acquiring unit;
The information processing apparatus according to claim 1, wherein the information processing apparatus is an information processing apparatus. A first Web client unit that accesses the Web server and holds HTTP Cookie information issued from the Web server, and a second Web client unit that is activated from the first Web client unit and accesses the Web server A session management method in an information processing apparatus comprising:
A specifying step in which the second Web client means specifies the first Web client means as an activation source;
A cookie information acquisition step in which the second Web client means acquires HTTP Cookie information held by the first Web client means from the first Web client means specified in the specifying step;
An access step in which the second Web client means accesses the Web server using the HTTP Cookie information acquired by the cookie information acquisition means;
A session management method characterized by comprising: Access to a Web system having a plurality of Web servers having equivalent functions and a load balancer that centrally manages requests to the Web server and distributes requests to the Web server using HTTP Cookie information A first Web client unit that holds HTTP Cookie information issued from any one of the Web servers; and a second Web client unit that is activated from the first Web client unit and accesses the Web system. A session management method in an information processing apparatus,
The second Web client means includes
Specifying means for specifying the first Web client means to be an activation source;
Cookie information acquisition means for acquiring HTTP Cookie information held by the first Web client means from the first Web client means specified by the specification means;
Access means for accessing the Web system using the HTTP Cookie information acquired by the cookie information acquisition means,
A session management method. First Web client means for accessing a Web system having a Web server and an authentication server that determines whether or not the Web client has been authenticated using HTTP Cookie information and holding HTTP Cookie information issued from the Web server A session management method in an information processing apparatus comprising: and a second Web client unit that is activated from the first Web client unit and accesses the Web system,
A specifying step in which the second Web client means specifies the first Web client means as an activation source;
A cookie information acquisition step in which the second Web client means acquires HTTP Cookie information held by the first Web client means from the first Web client means specified in the specifying step;
An access step in which the second Web client means accesses the Web system using the HTTP Cookie information acquired in the cookie information acquisition step;
A session management method characterized by comprising:   The cookie information acquisition step acquires HTTP Cookie information related to a Web server included in a specific URL held by the first Web client unit from the first Web client unit specified by the specifying step. The session management method according to any one of claims 6 to 8. The first Web client means is activated by designating an identifier for identifying an activation source when activating the second Web client means,
The second Web client means includes an identifier acquisition step of acquiring the identifier specified from the activation source;
The specifying step specifies the first Web client unit serving as an activation source based on the identifier acquired by the identifier acquiring step.
The session management method according to any one of claims 6 to 9, wherein:   The program for making a computer perform the session management method described in any one of Claims 6 thru | or 10.   A computer-readable recording medium on which the program according to claim 11 is recorded.

Images