Server using unpredictable scrambled cookie names
View Patent ↗The present invention relates to a server comprising at least an application outputting at least one cookie, the server including a scrambled cookie names generator, a correspondence mechanism associating connections attributes for the application with an unpredictable scrambled cookie name, the scrambled cookie name being the one provided in the cookie sent to client side for use in the next connections to the application.
1. A hardware web application server comprising at least an application outputting at least one http cookie having an application defined cookie name, said server further comprising a front-end reverse proxy comprising a correspondence mechanism associating connections attributes for the application with unpredictable scrambled cookie names and storing the application defined cookie name associated with the connections attributes for the application and an interceptor dedicated to intercept application defined cookie names in any connection messages from said application in the server, to insert a scrambled cookie name instead of an application defined cookie name in a connection message from the application and to send the connection message modified with the scrambled cookie name towards a client side, said scrambled cookie name being a cookie name provided in the at least one cookie sent to the client side for use in next connections to the application, said interceptor being also dedicated to intercept a scrambled cookie name in any connection messages received from the client side, to insert a corresponding application defined cookie name instead of a scrambled cookie name in a connection message and to send the connection message modified with the application defined cookie name towards the application using the connections attributes for the application as stored in the correspondence mechanism, said reverse proxy using an external module comprising a library providing a scrambled cookie names generator for the application to generate unpredictable scrambled cookie names inputted in the correspondence mechanism, said library also serving to check scrambled cookie names when returned from the client side, according to the correspondence mechanism, the external module being an external piece of software developed according to a reverse proxy Application Programming Interface and allowing dynamic loading support and direct usage of the library from any code embedded in the reverse proxy.