SYSTEMS AND METHODS FOR USING AN HTTP-AWARE CLIENT AGENT

• US 20080034417A1
• Filed: 08/03/2006
• Published: 02/07/2008
• Est. Priority Date: 08/03/2006
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Soni, Ajay, Venkatraman, Charu, He, Junxiao
• Granted Patent: US 8,943,304 B2
• Time in Patent Office: Days
• US Class Current: 726/15
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

Systems and methods are described for using a client agent operating in a virtual private network environment to intercept HTTP communications. Methods include: intercepting at the network layer, by a client agent executing on a client, an HTTP request from an application executing on the client; modifying the HTTP request; and transmitting, via a transport layer connection, the modified HTTP request to a server. Additional methods may comprise adding, removing, or modifying at least one cookie in the HTTP request. Still other methods may comprise modifying at least one name-value pair contained in the HTTP request. Corresponding systems are also described.

Claims

1. A method for using a client agent operating in a virtual private network environment to intercept HTTP communications, the method comprising:

(a) intercepting at one of;

the network layer or the transport layer, by a client agent executing on a client, one or more packets comprising an HTTP request from an application executing on the client;

(b) modifying the HTTP request; and

(c) transmitting, via a transport layer connection, the modified HTTP request to a server.

2. The method of claim 1, wherein step (a) comprises intercepting, by a client agent, an HTTP request from a client to a server on a virtual private network.

3. The method of claim 1, wherein step (b) comprises modifying at least one cookie contained in the HTTP request.

4. The method of claim 1, wherein step (b) comprises removing at least one cookie contained in the HTTP request.

5. The method of claim 1, wherein step (b) comprises the steps of:

(b-a) identifying, in the HTTP request, a name-value pair; and

(b-b) modifying the value of the name-value pair.

6. The method of claim 1, wherein step (b) comprises the steps of:

(b-a) identifying, in the HTTP request, a URL; and

(b-b) inserting, in the HTTP request, information identifying a version of the resource identified by the URL currently stored on the client.

7. The method of claim 1, wherein step (b) comprises modifying a URL identified in the HTTP request.

8. The method of claim 1, wherein step (b) comprises the steps of:

(b-a) identifying, in a URL specified by the HTTP request, a name-value pair; and

(b-b) modifying the value of the identified name-value pair.

9. The method of claim 1, wherein step (c) comprises the steps of:

(c-a) determining, in response to a URL specified in the HTTP request, a network layer address corresponding to a server for servicing the request; and

(c-b) transmitting, via a transport layer connection, the modified HTTP request to the determined address.

10. A computer implemented system for using a client agent operating in a virtual private network environment to intercept HTTP communications, the system comprising:

a client computing device; and

a client agent which executes on the client;

intercepts at the network layer an HTTP request from an application executing on the client;

modifies the HTTP request; and

transmits, via a transport layer connection, the modified HTTP request to a server.

11. The system of claim 10, wherein the client agent intercepts an HTTP request from a client to a server on a virtual private network.

12. The system of claim 10, wherein the client agent modifies at least one cookie contained in the HTTP request.

13. The system of claim 10, wherein the client agent removes at least one cookie contained in the HTTP request.

14. The system of claim 10, wherein the client agent identifies, in the HTTP request, a name-value pair;

and modifies the value of the name-value pair.

15. The method of claim 10, wherein the client agent identifies, in the HTTP request, a URL;

and inserts, in the HTTP request, information identifying a version currently stored on the client of the resource identified by the URL.

16. The system of claim 10, wherein the client agent modifies a URL identified in the HTTP request.

17. The system of claim 10, wherein the client agent identifies, in a URL specified by the HTTP request, a name-value pair;

and modifies the value of the identified name-value pair.

18. The system of claim 10, wherein the client agent determines, in response to a URL specified in the HTTP request, a network layer address corresponding to a server for servicing the request;

and transmits, via a transport layer connection, the modified HTTP request to the determined address.