System and method for providing client identifying information to a server

• US 20060098645A1
• Filed: 11/09/2004
• Published: 05/11/2006
• Est. Priority Date: 11/09/2004
• Status: Abandoned Application

• Current Assignee: Akamai Technologies, Inc.
• Original Assignee: Akamai Technologies, Inc.
• Inventors: Walkin, Lev
• Application Number:
  US10/984,348
• Publication Number:
  US 20060098645A1
• Time in Patent Office: Days
• US Class Current: 370/389
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A system for providing client identifying information to a server includes a tagger at an intelligent intermediate device configured to create at least one tagged packet including client identifying information to be sent to the server, and an interceptor configured to derive the client identifying information from the at least one tagged packet and to provide the client identifying information to an application at the server. In one embodiment, the tagger is configured to insert the client identifying information into the data portion of the at least one tagged packet. In another embodiment, the tagger is configured to insert the client identifying information into a protocol header of the at least one tagged packet.

Claims

1. A system comprising:

an intelligent intermediate device with an input and an output,

the input of the intelligent intermediate device capable of receiving a client communication, wherein the client communication includes client identifying information,

the output of the intelligent intermediate device capable of sending a server communication,

the intelligent intermediate device including a tagger, the tagger capable of receiving the client identifying information and generating a tagged data stream capable of being included in the server communication, the tagged data stream including derivable client identifying information; and

an interceptor configured to derive the client identifying information from the tagged data stream in the server communication and provide the client identifying information to an application at the server.

2. The system of claim 1, wherein the tagger is configured to insert the client identifying information into a data field of at least one tagged packet.

3. The system of claim 1, wherein the tagger is configured to concatenate the client identifying information to communication data to create the tagged data stream.

4. The system of claim 1, wherein the tagger is configured to insert the client identifying information into a protocol header of at least one tagged packet.

5. The system of claim 4, wherein the tagger is further configured to insert the client identifying information into a TCP header of the at least one tagged packet.

6. The system of claim 4, wherein the tagger is further configured to insert the client identifying information in an IP header of the at least one tagged packet.

7. The system of claim 1, wherein the client identifying information includes a client IP address.

8. The system of claim 1, wherein the interceptor provides the client identifying information to the application by

intercepting a call from the application to an operating system of the server, the call including a request for the identity of the source of the server communication, and

replying to the intercepted call with a response that includes the client identifying information instead of the identity of the source of the server communication.

9. The system of claim 1, wherein the interceptor is further configured to provide communication data in the server communication to the application.

10. An intelligent intermediate device comprising:

a proxy that has as an input a client communication and has as an output a server communication on behalf of a client; and

a tagger that creates at least one tagged packet including derivable client identifying information capable of being included in the server communication.

11. The intelligent intermediate device of claim 10, wherein the tagger is configured to insert the client identifying information into a data field of at least one tagged packet.

12. The intelligent intermediate device of claim 10, wherein the tagger is configured to concatenate the client identifying information to server communication data and to packetize the resulting data such that the client identifying information is inserted into a data field of at least one tagged packet.

13. The intelligent intermediate device of claim 10, wherein the tagger is configured to insert the client identifying information into a protocol header of at least one tagged packet.

14. The intelligent intermediate device of claim 13, wherein the tagger is configured to insert the client identifying information into a TCP header of the at least one tagged packet.

15. The intelligent intermediate device of claim 13, wherein the tagger is configured to insert the client identifying information into an IP header of the at least one tagged packet.

16. The intelligent intermediate device of claim 10, wherein the client identifying information includes a client IP address.

17. A source-identifying server comprising:

an operating system configured to receive a server communication from an intelligent intermediate device, the server communication including at least one tagged packet that includes client identifying information;

an application configured to receive data from the server communication; and

an interceptor configured to derive the client identifying information from the tagged packet;

the interceptor further configured

to intercept a call from the application to the operating system, the call requesting identifying information of the source of the server communication, and

to reply to the intercepted call with a response that includes the client identifying information in place of the identifying information of the source of the server communication.

18. The source-identifying server of claim 17, wherein the application is a web server.

19. The source-identifying server of claim 17, wherein the application is an email server.

20. The source-identifying server of claim 17, wherein the client identifying information includes a client IP address.

21. The source-identifying server of claim 17, wherein the server communication from the intelligent intermediate device includes cryptographically secure data.

22. The source-identifying server of claim 17, wherein the at least one tagged packet includes the client identifying information in a data field.

23. The source-identifying server of claim 17, wherein the at least one tagged packet includes the client identifying information in a protocol header.

24. The source-identifying server of claim 23, wherein the at least one tagged packet includes the client identifying information in a TCP header.

25. The source-identifying server of claim 23, wherein the at least one tagged packet includes the client identifying information in an IP header.

26. The source-identifying server of claim 17, wherein the interceptor is installed within an application processing environment to override at least one standard library function.

27. The source-identifying server of claim 17, wherein the interceptor is installed as a loadable module within the operating system.

28. A method comprising:

creating at least one tagged packet that includes client identifying information as a packet of a communication to be sent to a server;

sending the communication to the server;

recognizing the at least one tagged packet in the communication;

deriving the client identifying information from the at least one tagged packet; and

providing the client identifying information to an application at the server.

29. The method of claim 28, wherein the step of creating at least one tagged packet includes inserting the client identifying information in a data field of the at least one tagged packet.

30. The method of claim 28, wherein the step of creating at least one tagged packet includes concatenating the client identifying information to communication data and packetizing the resulting data such that the client identifying information is inserted into a data field of the at least one tagged packet.

31. The method of claim 28, wherein the step of creating at least one tagged packet includes inserting the client identifying information in a protocol header of the at least one tagged packet.

32. The method of claim 31, wherein the step of creating at least one tagged packet includes inserting the client identifying information in a TCP header of the at least one tagged packet.

33. The method of claim 31, wherein the step of creating at least one tagged packet includes inserting the client identifying information in a IP header of the at least one tagged packet.

34. The method of claim 28, wherein the step of providing the client identifying information to the application includes

intercepting a call from the application to an operating system of the server, the call including a request for the identity of the source of the communication, and

replying to the intercepted call with a response that includes the client identifying information instead of the identity of the source of the communication.

35. The method of claim 28, further comprising providing original communication data to the application.