Method of accessing internet resources through a proxy with improved security

• US 20040073629A1
• Filed: 10/02/2003
• Published: 04/15/2004
• Est. Priority Date: 10/10/2002
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Livigni, Fabrice, Bazot, Philippe
• Application Number:
  US10/677,467
• Publication Number:
  US 20040073629A1
• Time in Patent Office: Days
• US Class Current: 709/217
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

Method of accessing Internet resources provided by at least a content server in a data transmission system including a proxy connected to an Internet network, the proxy being provided with authentication means for authenticating a user when receiving a request for Internet resources therefrom, and wherein the proxy transmits the user request to the content server which sends back a response to the proxy together with at least one cookie containing information about the user'"'"'s session. The proxy receiving the response with the cookie stores the cookie in a user context database and transmits this response to the user after the cookie(s) has (have) been removed from the response, so that the user can send all requests for accessing the Internet resources contained in the content server to the proxy.

Claims

1. Method of accessing Internet resources provided by at least a content server in a data transmission system including a proxy connected to an Internet network, said proxy being provided with authentication means for authenticating a user when receiving a request for Internet resources therefrom, and wherein said proxy transmits the user request to said content server which sends back a response to the proxy together with at least one cookie containing information about said user;

said proxy receiving and storing said response in a user context database and transmitting said response to said user after said cookie has been removed from said response, so that said user can send all subsequent requests for accessing said Internet resources contained in said content server to said proxy.

2. Method according to claim 1, wherein said proxy is configured as a reverse proxy establishing a connection to said content server on behalf of said user when receiving said request from said user, and wherein said cookie is transmitted by said reverse proxy to said content server when said user sends other requests for a same URL even if said content server does not belong to a same domain as said reverse proxy.

3. Method according to claim 1, wherein said cookie which has been stored in said user context database is added to all subsequent requests from said user for accessing Internet resources in said content server.

4. Method according to claim 3, wherein the response from said content server to said proxy includes a statement “

set-cookies,”

said statement being removed from said response before transmitting said response to said user.

5. System comprising means adapted for implementing the method according to claim 1.