diff --git a/src/main/java/org/codelibs/fess/helper/RoleQueryHelper.java b/src/main/java/org/codelibs/fess/helper/RoleQueryHelper.java
index 3026707b6b..5105300df9 100644
--- a/src/main/java/org/codelibs/fess/helper/RoleQueryHelper.java
+++ b/src/main/java/org/codelibs/fess/helper/RoleQueryHelper.java
@@ -234,7 +234,14 @@ protected void addRoleFromCookieMapping(final Set<String> roleNameList, final Co
     protected void parseRoleSet(final String value, final boolean encrypted, final Set<String> roleSet) {
         String rolesStr = value;
         if (encrypted && cipher != null) {
-            rolesStr = cipher.decryptoText(rolesStr);
+            try {
+                rolesStr = cipher.decryptoText(rolesStr);
+            } catch (final Exception e) {
+                if (logger.isDebugEnabled()) {
+                    logger.debug("Failed to decrypt {}", rolesStr, e);
+                }
+                return;
+            }
         }
 
         if (logger.isDebugEnabled()) {
@@ -245,7 +252,7 @@ protected void parseRoleSet(final String value, final boolean encrypted, final S
             final String[] values = rolesStr.split(valueSeparator);
             if (maxAge > 0) {
                 try {
-                    final long time = getCurrentTime() - Long.parseLong(values[0]);
+                    final long time = getCurrentTime() / 1000 - Long.parseLong(values[0]);
                     if (time > maxAge || time < 0) {
                         if (logger.isDebugEnabled()) {
                             logger.debug("role info is expired: {} > {}", time, maxAge);
@@ -253,7 +260,7 @@ protected void parseRoleSet(final String value, final boolean encrypted, final S
                         return;
                     }
                 } catch (NumberFormatException e) {
-                    logger.warn("Invalid role infor: {}", rolesStr, e);
+                    logger.warn("Invalid role info: {}", rolesStr, e);
                     return;
                 }
             }
diff --git a/src/test/java/org/codelibs/fess/helper/RoleQueryHelperTest.java b/src/test/java/org/codelibs/fess/helper/RoleQueryHelperTest.java
index 249c03007a..438f27fb44 100644
--- a/src/test/java/org/codelibs/fess/helper/RoleQueryHelperTest.java
+++ b/src/test/java/org/codelibs/fess/helper/RoleQueryHelperTest.java
@@ -79,7 +79,7 @@ protected long getCurrentTime() {
         assertEquals(0, roleSet.size());
 
         roleQueryHelperImpl.encryptedParameterValue = false;
-        getMockRequest().setParameter("fess1", System.currentTimeMillis() + "\nrole1,role2,role3");
+        getMockRequest().setParameter("fess1", System.currentTimeMillis() / 1000 + "\nrole1,role2,role3");
         roleSet = buildByParameter(roleQueryHelperImpl, getMockRequest());
         assertEquals(3, roleSet.size());
         assertTrue(roleSet.contains("role1"));
@@ -90,7 +90,7 @@ protected long getCurrentTime() {
 
         roleQueryHelperImpl.cipher = cipher;
         roleQueryHelperImpl.encryptedParameterValue = true;
-        getMockRequest().setParameter("fess2", cipher.encryptoText(System.currentTimeMillis() + "\nrole1,role2,role3"));
+        getMockRequest().setParameter("fess2", cipher.encryptoText(System.currentTimeMillis() / 1000 + "\nrole1,role2,role3"));
         roleSet = buildByParameter(roleQueryHelperImpl, getMockRequest());
         assertEquals(3, roleSet.size());
         assertTrue(roleSet.contains("role1"));
@@ -98,12 +98,8 @@ protected long getCurrentTime() {
         assertTrue(roleSet.contains("role3"));
 
         getMockRequest().setParameter("fess2", "fail");
-        try {
-            roleSet = buildByParameter(roleQueryHelperImpl, getMockRequest());
-            fail();
-        } catch (final IllegalBlockSizeRuntimeException e) {
-            // ok
-        }
+        roleSet = buildByParameter(roleQueryHelperImpl, getMockRequest());
+        assertEquals(0, roleSet.size());
 
         roleQueryHelperImpl.parameterKey = "fess3";
 
@@ -143,7 +139,7 @@ protected long getCurrentTime() {
         assertEquals(0, roleSet.size());
 
         roleQueryHelperImpl.encryptedHeaderValue = false;
-        getMockRequest().addHeader("fess1", System.currentTimeMillis() + "\nrole1,role2,role3");
+        getMockRequest().addHeader("fess1", System.currentTimeMillis() / 1000 + "\nrole1,role2,role3");
         roleSet = buildByHeader(roleQueryHelperImpl, getMockRequest());
         assertEquals(3, roleSet.size());
         assertTrue(roleSet.contains("role1"));
@@ -154,7 +150,7 @@ protected long getCurrentTime() {
 
         roleQueryHelperImpl.cipher = cipher;
         roleQueryHelperImpl.encryptedHeaderValue = true;
-        getMockRequest().addHeader("fess2", cipher.encryptoText(System.currentTimeMillis() + "\nrole1,role2,role3"));
+        getMockRequest().addHeader("fess2", cipher.encryptoText(System.currentTimeMillis() / 1000 + "\nrole1,role2,role3"));
         roleSet = buildByHeader(roleQueryHelperImpl, getMockRequest());
         assertEquals(3, roleSet.size());
         assertTrue(roleSet.contains("role1"));
@@ -163,12 +159,8 @@ protected long getCurrentTime() {
 
         roleQueryHelperImpl.headerKey = "fess2x";
         getMockRequest().addHeader("fess2x", "fail");
-        try {
-            roleSet = buildByHeader(roleQueryHelperImpl, getMockRequest());
-            fail();
-        } catch (final IllegalBlockSizeRuntimeException e) {
-            // ok
-        }
+        roleSet = buildByHeader(roleQueryHelperImpl, getMockRequest());
+        assertEquals(0, roleSet.size());
 
         roleQueryHelperImpl.headerKey = "fess3";
 
@@ -212,7 +204,7 @@ protected long getCurrentTime() {
         assertEquals(0, roleSet.size());
 
         roleQueryHelperImpl.encryptedCookieValue = false;
-        cookie = new Cookie("fess1", System.currentTimeMillis() + "\nrole1,role2,role3");
+        cookie = new Cookie("fess1", System.currentTimeMillis() / 1000 + "\nrole1,role2,role3");
         getMockRequest().addCookie(cookie);
         roleSet = buildByCookie(roleQueryHelperImpl, getMockRequest());
         assertEquals(3, roleSet.size());
@@ -224,7 +216,7 @@ protected long getCurrentTime() {
 
         roleQueryHelperImpl.cipher = cipher;
         roleQueryHelperImpl.encryptedCookieValue = true;
-        cookie = new Cookie("fess2", cipher.encryptoText(System.currentTimeMillis() + "\nrole1,role2,role3"));
+        cookie = new Cookie("fess2", cipher.encryptoText(System.currentTimeMillis() / 1000 + "\nrole1,role2,role3"));
         getMockRequest().addCookie(cookie);
         roleSet = buildByCookie(roleQueryHelperImpl, getMockRequest());
         assertEquals(3, roleSet.size());
@@ -238,12 +230,8 @@ protected long getCurrentTime() {
         roleQueryHelperImpl.encryptedCookieValue = true;
         cookie = new Cookie("fess2x", "fail");
         getMockRequest().addCookie(cookie);
-        try {
-            roleSet = buildByCookie(roleQueryHelperImpl, getMockRequest());
-            fail();
-        } catch (final Exception e) {
-            // ok
-        }
+        roleSet = buildByCookie(roleQueryHelperImpl, getMockRequest());
+        assertEquals(0, roleSet.size());
 
         roleQueryHelperImpl.cookieKey = "fess3";
 
@@ -286,13 +274,13 @@ protected long getCurrentTime() {
         assertEquals(0, roleSet.size());
 
         encrypted = false;
-        value = System.currentTimeMillis() + "\nrole1";
+        value = System.currentTimeMillis() / 1000 + "\nrole1";
         roleSet = decodedRoleList(roleQueryHelperImpl, value, encrypted);
         assertEquals(1, roleSet.size());
         assertTrue(roleSet.contains("role1"));
 
         encrypted = false;
-        value = System.currentTimeMillis() + "\nrole1,role2";
+        value = System.currentTimeMillis() / 1000 + "\nrole1,role2";
         roleSet = decodedRoleList(roleQueryHelperImpl, value, encrypted);
         assertEquals(2, roleSet.size());
         assertTrue(roleSet.contains("role1"));
@@ -355,13 +343,13 @@ protected long getCurrentTime() {
         assertEquals(0, roleSet.size());
 
         encrypted = true;
-        value = cipher.encryptoText(System.currentTimeMillis() + "\nrole1");
+        value = cipher.encryptoText(System.currentTimeMillis() / 1000 + "\nrole1");
         roleSet = decodedRoleList(roleQueryHelperImpl, value, encrypted);
         assertEquals(1, roleSet.size());
         assertTrue(roleSet.contains("role1"));
 
         encrypted = true;
-        value = cipher.encryptoText(System.currentTimeMillis() + "\nrole1,role2");
+        value = cipher.encryptoText(System.currentTimeMillis() / 1000 + "\nrole1,role2");
         roleSet = decodedRoleList(roleQueryHelperImpl, value, encrypted);
         assertEquals(2, roleSet.size());
         assertTrue(roleSet.contains("role1"));