Boundary separating privilege levels.

Temporary interaction state between client and server.

Domain associated with a cookie.

Identity and permissions associated with execution.

Identifier associated with a session.

URL path associated with a cookie.

Entity that can be authenticated or authorized.

Cookie identifying a web session.

Time when a cookie becomes invalid.

Account used by software services.