Apparatus and methods for transparent handling of browser proxy configurations in a network gateway device

• US 20060031394A1
• Filed: 04/19/2005
• Published: 02/09/2006
• Est. Priority Date: 04/20/2004
• Status: Abandoned Application

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: Tazuma, Stanley K.
• Application Number:
  US11/109,271
• Publication Number:
  US 20060031394A1
• Time in Patent Office: Days
• US Class Current: 709/217
• CPC Class Codes: G06F 16/9566 URL specific, e.g. using aliases, detecting broken or misspelled links
• CPC Class Codes: G06F 16/9574 of access to content, e.g. by caching
• CPC Class Codes: H04B 7/18506 Communications with or from aircraft, i.e. aeronautical mobile service
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/59 using proxies for addressing
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/563 Data redirection of data network streams

Abstract

A method of providing web browsers with access to a foreign network via a network gateway device. The browsers are installed on clients of the gateway device and have different proxy settings. Web requests from a browser are intercepted during a browser pre-login phase. Based on the intercepted web requests, the browser is accommodated in configuring a proxy mode. The method includes intercepting and redirecting web requests from the proxy-mode-configured browser to provide access to the network. These steps are performed for each of a plurality of browsers installed on a single client.

Claims

1. A method of providing a plurality of web browsers with access to a foreign network via a network gateway device, the browsers installed on one or more clients of the network gateway device and having a plurality of different proxy settings, the method comprising the steps of:

intercepting one or more web requests from a given browser during a browser pre-login phase;

based on the one or more intercepted web requests, accommodating the given browser in configuring a proxy mode; and

intercepting web requests from the proxy-mode-configured browser to provide access to the network;

said steps performed for each of a plurality of browsers installed on a single client.

2. The method of claim 1, further comprising using a fake IP address to redirect a web request from the proxy-mode-configured browser for a non-public domain name used for a proxy server.

3. The method of claim 1, performed during a single network session.

4. The method of claim 1, further comprising responding to one or more mapped drive mounting procedure requests associated with a fake IP address.

5. The method of claim 4, wherein responding to one or more mapped drive mounting procedure requests comprises at least one of the following:

sending a reject message in response to an echo request associated with a fake IP address; and

spoofing a server management block request associated with the fake IP address.

6. A computer-readable medium having computer-executable instructions for performing the method of claim 1.

7. A method of providing a plurality of web browsers with access to a foreign network via a network gateway device, the browsers installed on one or more clients of the gateway device and having a plurality of different proxy settings, the method comprising the steps of:

detecting initiation of proxy discovery by a given browser; and

based on the detecting, selectively performing one of the following;

accommodating a proxy configuration request by the given browser while guiding the given browser into staying in a direct access mode configuration, and

accommodating the given browser in a proxy configuration.

8. The method of claim 7, performed for each of a plurality of browsers installed on a single client.

9. The method of claim 7, wherein accommodating a proxy configuration request comprises providing a fake IP address to the browser in response to a non-resolvable domain name used in the proxy configuration request.

10. The method of claim 7, further comprising responding to one or more mapped drive mounting procedure requests associated with a fake IP address.

11. The method of claim 7, further comprising using a fake IP address to redirect a web request from the browser for a non-public domain name used for a proxy server.

12. The method of claim 7, further comprising transparently proxying a web request from a direct-mode browser to the network, said step performed using a web request handler.

13. A computer-readable medium having computer-executable instructions for performing the method of claim 7.

14. A method of providing a plurality of web browsers with access to a foreign network via a network gateway device, the browsers installed on one or more clients of the gateway device and having a plurality of different proxy settings, the method comprising the steps of:

associating a fake IP address with a non-public domain name of a proxy server for a given browser; and

using the fake IP address to redirect the browser in response to a web request by the browser;

said steps performed for each of a plurality of browsers installed on a single client.

15. The method of claim 14, wherein the associating step is performed during a browser pre-login phase.

16. The method of claim 14, further comprising responding to one or more mapped drive mounting procedure requests associated with the fake IP address.

17. The method of claim 14, performed during a single network session.