Unify the Code for Session Keeping
The sessions are not being systematically monitored and used. The exceptions are dialogues for sending messages and e-government requests.
Centralised code is needed that will periodically call the dummy operation and discard sessions that fail this dummy request.
This can also solve a problem with stale sessions using Mobile Key authorisation which are often the case when the application/system has been put to sleep for a prolonged time.