METHODS AND SYSTEMS FOR PROXYING DATA

• US 20130091350A1
• Filed: 08/23/2012
• Published: 04/11/2013
• Est. Priority Date: 10/07/2011
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Gluck, Yoel
• Granted Patent: US 9,467,424 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: G06F 16/9038 Presentation of query results
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54

Abstract

Methods and systems are provided for proxying data between an application server and a client device. One exemplary application system includes an application server to generate a virtual application and a proxy server coupled to the application server over a network to provide the virtual application to a client device. The proxy server receives input data from the client device and provides the input data to the application server, wherein the application server encodes the input data for an action in response to authenticating the proxy server and provides the data encoded for the action to the proxy server. The proxy server performs the action on the data and provides the result to the client device.

Claims

1. A method of proxying data using a proxy server communicatively coupled to a client device, the method comprising:

receiving, by the proxy server, encrypted data encoded for an action;

decrypting, by the proxy server, the encrypted data to obtain decrypted data;

performing, by the proxy server, the action on the decrypted data; and

providing, by the proxy server, a result of performing the action on the decrypted data to the client device.

2. The method of claim 1, further comprising:

receiving, by the proxy server, input data from the client device;

encrypting, by the proxy server, the input data to obtain the encrypted data; and

providing the encrypted data to an application server, wherein the application server encodes the encrypted data for the action.

3. The method of claim 2, wherein receiving the encrypted data comprises receiving the encrypted data encoded for the action from the application server after providing the encrypted data to the application server.

4. The method of claim 2, further comprising providing, by the proxy server, an identifier associated with the proxy server to the application server, wherein the application server authenticates the proxy server based on the identifier and bypasses performing the action on the encrypted data in response to authenticating the proxy server.

5. The method of claim 2, further comprising decoding, by the proxy server, the encrypted data encoded for the action prior to decrypting the encrypted data based on an encoding authentication protocol established with the application server.

6. The method of claim 5, wherein decoding the encrypted data encoded for the action comprises distinguishing the encrypted data from the encoding based on the encoding authentication protocol.

7. The method of claim 5, wherein decoding the encrypted data encoded for the action comprises converting the encrypted data based on the encoding authentication protocol.

8. A method of communicating data between an application server and a proxy server communicatively coupled to the application server, the method comprising:

receiving, by the application server, the data from the proxy server;

encoding, by the application server, the data for an action in response to authenticating the proxy server; and

providing, by the application server, the encoded data to the proxy server, wherein the proxy server performs the action on the data.

9. The method of claim 8, further comprising bypassing, by the application server, performing the action in response to authenticating the proxy server.

10. The method of claim 8, wherein encoding the data for the action comprises obscuring the data based on an encoding authentication protocol established with the proxy server.

11. The method of claim 8, wherein encoding the data for the action comprises adding an identifier associated with the application server to an operator for the action.

12. The method of claim 8, further comprising generating, by the application server, a virtual application provided to a client device communicatively coupled to the proxy server via the proxy server.

13. The method of claim 12, the proxy server encrypting input data received from the client device, wherein:

encoding the data for the action comprises encoding encrypted input data received from the proxy server for the action; and

providing the encoded data comprises providing the encrypted input data encoded for the action to the proxy server, wherein the proxy server decrypts the encrypted input data before performing the action on the decrypted input data.

14. The method of claim 13, further comprising storing the encrypted input data in a database.

15. A system comprising:

an application server configured to generate a virtual application; and

a proxy server coupled to the application server over a network to provide the virtual application to a client device communicatively coupled to the proxy server and provide data from the client device to the application server, wherein;

the application server is configured to;

encode the data for an action in response to authenticating the proxy server; and

provide the data encoded for the action to the proxy server; and

the proxy server is configured to;

perform the action on the data; and

provide a result of performing the action on the data to the client device.

16. The system of claim 15, wherein the proxy server is configured to encrypt input data from the client device and provide the encrypted input data to the application server, the application server encoding the encrypted input data for the action, wherein the proxy server is configured to decrypt the encrypted input data encoded for the action to obtain decrypted data and perform the action on the decrypted data.

17. The system of claim 15, wherein the application server is configured to authenticate the proxy server based on an authentication protocol established with the proxy server and bypass performing the action on the data in response to authenticating the proxy server.

18. The system of claim 15, wherein the application server is configured to encode the data based on an encoding authentication protocol established with the proxy server.

19. The system of claim 15, further comprising a database coupled to the application server, wherein the application server is configured to store the data in the database.

20. The system of claim 15, wherein the application server is configured to:

update the virtual application in response to receiving the data; and

bypass performing the action on the data while updating the virtual application.