Ex Parte Casazza - Page 2



            Appeal No. 2006-2228                                                                   
            Application No. 10/231,678                                                             

            The disclosed invention pertains to a method, apparatus, and program                   
            product for providing persistent data during a user session on a networked             
            computer system. A global data cache is divided into three sections: trusted,          
            protected, and unprotected. An authorization mechanism stores and retrieves            
            authorization data from the trusted section of the global data store. A common         
            session manager stores and retrieves data from the protected and unprotected           
            sections of the global data cache. Using the authorization mechanism, software         
            applications may verify that a user is authorized without prompting the user for       
            authorization information. Using the common session manager, software                  
            applications may store and retrieve data to and from the global data store,            
            allowing the sharing of data during a user session. After the user session             
            terminates, the data in the global data cache corresponding to the user session is     
            invalidated.                                                                           
            Representative claim 35 is reproduced as follows:                                      
                  35. A program product comprising:                                                
            (A) a common session manager that stores data in the global data                       
            cache during a user session, and that invalidates the data in the global data          
            cache after the user session is terminated, the global data cache comprising:          
                        (A1) a trusted section that includes authorization information             
                  for a user session;                                                              
                        (A2) a protected section that includes information that may be             
                  accessed only if the user is authorized to access the information stored in      
                  the protected section; and                                                       
                        (A3) an unprotected section that includes information that may             
                  be accessed by any user that has a valid session identifier;                     
                                               -2-                                                 



Page:  Previous  1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  Next 

Last modified: November 3, 2007