Intercepting File Transfers In Multi-Node Topologies

• US 20110173334A1
• Filed: 01/11/2010
• Published: 07/14/2011
• Est. Priority Date: 01/11/2010
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Shah, Shrey
• Granted Patent: US 9,015,330 B2
• Time in Patent Office: Days
• US Class Current: 709/228
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/288 Distributed intermediate devices, i.e. intermediate devices for interaction with other intermediate devices on the same level

Abstract

A system and method for intercepting and processing a payload sent between clients. A home server determines the roles that are intermediate to the clients by having intermediate servers insert identity information into a message of a session setup protocol. The home server selects a role to be the intercepting role, and sends a notification and aggregate information to a server of the selected role. A server of the intercepting role intercepts and processes the payload when it is sent between the clients. Payload processing may include content inspection or filtering based on any of a number of factors.

Claims

1. A computer-readable non-transitory storage medium comprising computer program instructions for intercepting and processing a payload sent from a sending client to a receiving client, the program instructions executable by one or more processors to perform actions including:

a) receiving, at an intermediate server, a session setup message sent between the sending client and the receiving client in a session setup protocol;

b) inserting identifying information in the session setup message, the identifying information indicating a server role corresponding to the intermediate server;

c) receiving the identifying information in the session setup message and determining an intercept server role based on the identifying information, the intercept server role being a role other than a role corresponding to a home server associated with the sending client or the receiving client;

d) sending an identification of the intercept server role in a subsequent message; and

e) in response to receiving the subsequent message, performing payload intercept actions, the actions including receiving the payload in one or more messages of a secondary protocol, processing the payload, and sending the payload to the receiving client.

2. The computer-readable non-transitory storage medium of claim 1, the session setup protocol is Session Initiation Protocol.

3. The computer-readable non-transitory storage medium of claim 1, the session setup protocol is Session Initiation Protocol (SIP), inserting the identifying information comprising inserting the identifying information in a header field of the session setup message, sending the identification of the intercept server role comprising inserting the identification of the intercept server in a header field of the subsequent message.

4. The computer-readable non-transitory storage medium of claim 1, the intercept actions further comprising establishing a first TCP connection for receiving the payload from the receiving client and a second TCP connection for sending the payload to the receiving client.

5. The computer-readable non-transitory storage medium of claim 1, the actions further including selectively inserting, at another intermediate server, other identifying information into the session setup message, based on at least one of a configuration of the other intermediate server, a load of the other intermediate server, or whether the other intermediate server has received the identifying information from the intermediate server.

6. The computer-readable non-transitory storage medium of claim 1, the actions further including:

a) aggregating information sent between the sending client and receiving client in the session setup protocol, the aggregated information including an address of the sending client, an address of the receiving client, and security data descriptive of a security mechanism to be used for sending the payload; and

b) inserting the aggregated information in the subsequent message.

7. The computer-readable non-transitory storage medium of claim 1, the payload intercept actions further including performing content inspection of the payload.

8. The computer-readable non-transitory storage medium of claim 1, determining the intercepting server role comprising determining the intercepting server role based on at least one of a topological location of each server role, a load of each server role, a capability of each server role, or a configured ordering of servers.

9. The computer-readable non-transitory storage medium of claim 1, the intermediate server is stateless with respect to a session setup transaction that includes the session setup protocol message.

10. A computer-based system for processing and forwarding a payload sent from a sending client to a receiving client in a secondary protocol, the system comprising:

a) a home server that is topologically intermediate between a sending client and a receiving client, the home server receiving client session data descriptive of the sending client, the receiving client, or a session between the sending client and receiving client;

b) one or more intermediate servers that are topologically intermediate between the sending client and receiving client, each intermediate server having a corresponding server role that is different from a server role of the home server;

each of the one or more intermediate servers configured to perform intermediate server actions including;

i. receiving a session setup protocol message sent between the sending client and the receiving client;

ii. inserting, in the session setup protocol message, information identifying the intermediate server role; and

iii. in response to receiving a notification message from the home server, performing payload intercept actions including intercepting the payload sent in the secondary protocol and processing the payload;

the home server configured to perform home server actions including;

i. receiving, from each of the one or more intermediate servers, the information identifying the corresponding intermediate server;

ii. determining, based on the received information, an intercepting server role; and

iii. sending the notification message in the session setup protocol including notification information indicating the determined intercepting server role.

11. The computer-based system of claim 10, the home server actions further comprising inserting the client session information in a header of the notification message;

12. The computer-based system of claim 10, the intermediate server actions further comprising inserting, in the session setup protocol message, information descriptive of at least one of a load of the intermediate server role or a capability of the intermediate server role, determining the intercepting server role is based on at least one of the load of the intermediate server role or the capability of the intermediate server role.

13. The computer-based system of claim 10, the system enabling a first server associated with the intercepting server role to insert the information identifying the intermediate server role, and a second server associated with the intercepting server role to perform the payload intercept actions, the first server and the second server being different servers.

14. A computer-based system for intercepting and processing a payload transmitted from a sending client to a receiving client, comprising:

a) means for determining a set of at least one server role topologically located between the sending client and the receiving client by employing one or more messages of a session setup protocol;

b) means for selecting an intercepting server role to intercept and process the payload based on the set of at least one server role;

c) means for notifying a server of the intercepting server role of the selection; and

d) means for intercepting the payload, processing the payload, and forwarding the payload to the receiving client transmitted in a secondary protocol.

15. The computer-based system of claim 14, the means for determining the set of at least one server comprising a computer-readable non-transitory storage medium comprising computer program instructions executable by a processor to perform actions including inserting, into the one or more messages of the session setup protocol, identifying information that identifies a server role of the at least one server role.

16. The computer-based system of claim 14, further comprising means for enabling the server of the intercepting server role to intercept the payload without having received any of the one or more session setup protocol messages employed to determine the set of at least one server role.

17. The computer-based system of claim 14, the means for notifying the server comprising a computer-readable non-transitory storage medium comprising computer program instructions executable by a processor to perform actions including inserting, into a message of the session setup protocol, notification information and client information received from a previous message of the session setup protocol.

18. The computer-based system of claim 14, the means for intercepting the payload comprising a computer-readable non-transitory storage medium comprising computer program instructions executable by a processor to perform actions including in response to receiving the notification of the section, downloading the payload from the sending client, performing at least one of content inspection or filtering of the payload, and forwarding the payload to the receiving client.

19. The computer-based system of claim 14, the intercepting server role is a director role or an edge role.

20. The computer-based system of claim 14, the means for determining a set of at least one server role comprising a computer-readable non-transitory storage medium comprising computer program instructions executable by a processor to perform actions including inserting into the one or more messages of the session setup protocol, a header that is subsequently removed before being forwarded to the sending client or receiving client.