SECURE DATA EXCHANGE BETWEEN DATA PROCESSING SYSTEMS

• US 20070124471A1
• Filed: 09/25/2006
• Published: 05/31/2007
• Est. Priority Date: 06/01/1999
• Status: Active Grant

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: AOL LLC (Apollo Global Management, Inc.)
• Inventors: Hendren, C., Harada, Larry, Purdum, Christopher, Dolecki, Mark
• Granted Patent: US 7,895,446 B2
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/561 Adding application-functional data or data for application control, e.g. adding metadata
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching

Abstract

A data transfer method performed at a proxy server includes intercepting a data request from a client computer that is directed to a target server, encrypting profile information, augmenting the data request by adding the encrypted profile information to the data request, and sending the augmented data request to the target server. A data transfer method that is performed at an information server includes receiving a data request from a proxy server, extracting profile information added to the data request by the proxy server, using the extracted profile information to generate a response, and sending the response to the proxy server.

Claims

1-32. -32. (canceled)

33. A data transfer method performed by a proxy server, the method comprising:

receiving a request from a client computer that is directed to a server;

retrieving an identifier based on an identity of a user of the client computer;

modifying the request to include the retrieved identifier; and

sending the modified request to the server such that the server extracts the retrieved identifier, retrieves user profile information based on the extracted identifier, generates a response to the request based on the retrieved user profile information, and sends the response to the proxy server.

39. A data processing method performed by a server, the method comprising:

receiving a modified request from a proxy server, wherein the proxy server created the modified request by inserting an identifier into a request intercepted by the proxy server;

using the identifier to retrieve user profile information from a storage associated with the server;

generating a response to the request based on the retrieved user profile information; and

sending the response to the proxy server.

45. A computer-usable medium having a computer program embodied thereon, the computer program comprising instructions for causing a proxy server to:

receive a request from a client computer that is directed to a server;

retrieve an identifier based on an identity of a user of the client computer;

modify the request to include the retrieved identifier; and

send the modified request to the server such that the server extracts the retrieved identifier, retrieves user profile information based on the extracted identifier, generates a response to the request based on the retrieved user profile information, and sends the response to the proxy server.

51. A computer-usable medium having a computer program embodied thereon, the computer program comprising instructions for causing a server to:

receive a modified request from a proxy server, wherein the proxy server created the modified request by inserting an identifier into a request intercepted by the proxy server;

use the identifier to retrieve user profile information from a storage associated with the server;

generate a response to the request based on the retrieved user profile information; and

send the response to the proxy server.