Method and apparatus for accelerating web service with proxy server

• US 10,084,888 B2
• Filed: 10/25/2013
• Issued: 09/25/2018
• Est. Priority Date: 10/25/2012
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Lee, Ji-Cheol
• Primary Examiner(s): Srivastava, Vivek
• Assistant Examiner(s): Mcbeth, William C
• Application Number:
  US14/063,988
• Publication Number:
  US 20140122578A1
• Time in Patent Office: 1,796 Days
• Field of Search: 709203, 709217, 709219, 709227, 709228, 713150, 713151, 713153, 713168, 713169, 713170, 713171, 713175, 726 12
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/562 Brokering proxy services
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching

Abstract

A method provides a web service. The method includes obtaining authentication information of at least one web server from the at least one web server to establish a session in advance and storing the authentication information in a database; searching the database for authentication information of a particular web server, upon reception of a request from a client for access to the particular web server; and performing web server access acceleration if the particular web server exists.

Claims

1. A method for providing a web service by a proxy server, the method comprising:

obtaining, by the proxy server, authentication information from each of a plurality of web servers, and storing the obtained authentication information of the plurality of the web servers in a database;

receiving, from a terminal, an access request to a web server of the plurality of the web servers;

retrieving, by the proxy server, corresponding authentication information of the web server from the stored authentication information of the plurality of the web servers in the database;

generating, by the proxy server, a proxy random number representing a replacement value of a random number created by the web server;

transmitting, to the terminal, the proxy random number and the corresponding authentication information of the web server;

receiving, from the terminal, an intermediate message comprising client authentication information and web page request information encrypted with a terminal master key;

forwarding, to the web server, the web page request information together with a hypertext transfer protocol (HTTP) accelerator indicator and the intermediate message comprising the client authentication information;

receiving, from the web server, a finished message together with web page response information in response to the web page request information when the forwarded client authentication information is valid,

wherein the terminal master key and the client authentication information are generated using the proxy random number and a pre-master key encrypted with the authentication information of the web server,

wherein the web page request information is decrypted with a web server master key,

wherein the web page response information is generated based on the decrypted web page request information,

wherein the finished message indicates that a connection between the terminal and the web server is completed, and

wherein the HTTP accelerator indicator indicates that the web page request information is forwarded together with the intermediate message comprising the client authentication information.

2. The method of claim 1, wherein the proxy server is included in a mobile communication network.

3. The method of claim 1, further comprising:

obtaining a web access history of the terminal over a mobile communication network; and

selecting the plurality of web servers to establish a session in advance, based on the web access history including previously accessed web pages, wherein the proxy server is included in the mobile communication network.

4. The method of claim 1, wherein the web page response information is encrypted based on the web server master key.

5. A method for receiving a web service by a terminal through a proxy server, the method comprising:

sending, to the proxy server, an access request to a web server;

receiving, from the proxy server, authentication information of the web server and a proxy random number generated by the proxy server, wherein the authentication information of the web server is stored in a database of the proxy server, and wherein authentication information of a plurality of web servers that is selected based on a web access history including previously accessed web pages is included in the database of the proxy server;

generating client authentication information, an intermediate message comprising the client authentication information, and web page request information encrypted with a terminal master key;

transmitting, to the proxy server, the web page request information encrypted with a terminal master key and the intermediate message comprising the client authentication information, wherein the web page request information together with a hypertext transfer protocol (HTTP) accelerator indicator and the intermediate message comprising the client authentication information are forwarded to the web server; and

receiving, from the proxy server, a finished message together with web page response information in response to the web page request information when the forwarded client authentication information is valid,

wherein the terminal master key and the client authentication information are generated using the proxy random number and a pre-master key encrypted with the authentication information of the web server,

wherein the web page request information is decrypted with a web server master key,

wherein the web page response information is generated based on the decrypted web page request information,

wherein the finished message indicates that a connection between the terminal and the web server is completed, and

wherein the HTTP accelerator indicator indicates that the web page request information is forwarded together with the intermediate message comprising the client authentication information.

6. The method of claim 5, wherein the proxy server is included in a mobile communication network.

7. The method of claim 5, wherein the web page response information is encrypted using the web server master key.

8. A proxy server for providing a web service, the proxy server comprising:

a controller configured to;

obtain, by the proxy server, authentication information from each of a plurality of web servers, and store the obtained authentication information of the plurality of the web servers in a database;

receive, from a terminal, an access request to a web server of the plurality of the web servers;

retrieve, by the proxy server, corresponding authentication information of the web server from the stored authentication information of the plurality of the web servers in the database; and

generate, by the proxy server, a proxy random number representing a replacement value of a random number created by the web server; and

a transceiver configured to;

transmit, to the terminal, the proxy random number and the corresponding authentication information of the web server;

receive, from the terminal, an intermediate message comprising client authentication information and web page request information encrypted with a terminal master key;

forward, to the web server, the web page request information together with a hypertext transfer protocol (HTTP) accelerator indicator and the intermediate message comprising the client authentication information; and

receive, from the web server, a finished message together with web page response information in response to the web page request information when the forwarded client authentication information is valid,

wherein the terminal master key and the client authentication information are generated using the proxy random number and a pre-master key encrypted with the authentication information of the web server,

wherein the web page request information is decrypted with a web server master key,

wherein the web page response information is generated based on the decrypted web page request information,

wherein the finished message indicates that a connection between the terminal and the web server is completed, and

wherein the HTTP accelerator indicator indicates that the web page request information is forwarded together with the intermediate message comprising the client authentication information.

9. The proxy server of claim 8, wherein the proxy server is included in a mobile communication network.

10. The proxy server of claim 8, wherein the web page response information is encrypted based on the web server master key.

11. A terminal for receiving a web service through a proxy server, the terminal comprising:

a transceiver configured to;

send, to the proxy server, an access request to a web server; and

receive, from the proxy server, authentication information of the web server and a proxy random number generated by the proxy server, wherein the authentication information of the web server is stored in a database of the proxy server, and wherein authentication information of a plurality of web servers that is selected based on a web access history including previously accessed web pages is included in the database of the proxy server; and

a controller configured to;

generate client authentication information, an intermediate message comprising the client authentication information, and web page request information encrypted with a terminal master key,

wherein the transceiver is further configured to;

transmit, to the proxy server, the web page request information encrypted with a terminal master key and the intermediate message comprising the client authentication information, wherein the web page request information together with a hypertext transfer protocol (HTTP) accelerator indicator and the intermediate message comprising the client authentication information are forwarded to the web server; and

receive, from the proxy server, a finished message together with web page response information in response to the web page request information when the forwarded client authentication information is valid,

wherein the terminal master key and the client authentication information are generated using the proxy random number and a pre-master key encrypted with the authentication information of the web server,

wherein the web page request information is decrypted with a web server master key,

wherein the web page response information is generated based on the decrypted web page request information,

wherein the finished message indicates that a connection between the terminal and the web server is completed, and

wherein the HTTP accelerator indicator indicates that the web page request information is forwarded together with the intermediate message comprising the client authentication information.

12. The terminal of claim 11, wherein the proxy server is included in a mobile communication network.

13. The terminal of claim 11, wherein the web page response information is encrypted using the web server master key.