Strategy for Checking Session Timing Out

[Dan . C . Wieschhaus]

If the user disables cookies so that every request coming into the
server will create a new session (session.isNew()==true), what strategy
could be used to check if their session has timed out?  

I assume that since every session is new, that using the
session.getLastAccessedTime() method is also of little value.

Dan