RELAY PROXY PROVIDING SECURE CONNECTIVITY IN A CONTROLLED NETWORK ENVIRONMENT

• US 20150288661A1
• Filed: 04/07/2014
• Published: 10/08/2015
• Est. Priority Date: 04/07/2014
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Monk, Jason, Borggaard, Geoffrey Allen
• Granted Patent: US 9,736,119 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

A computer system for accessing remote content stored outside of a local network from within the local network comprises a relay proxy and a plurality of applications. The relay proxy receives a first request from a first application and a second request from a second application, the first and second requests identifying first and second remote content items respectively. The relay proxy forwards the first and second requests to a proxy server that manages network traffic entering and leaving the local network. The relay proxy receives responses to the first and second requests, with the response to the first request including the first remote content item and the response to the second request including the second remote content item. The relay proxy forwards the first and second remote content items to the first and second applications respectively.

Claims

1. A computer system for accessing remote content stored outside a network from within the network, the computer system comprising:

a relay proxy, the relay proxy configured to retrieve remote content items via a proxy server, the proxy server managing network traffic entering and leaving the network; and

a plurality of applications, communicatively connected to the relay proxy, each application configured to send a request for a remote content item to the relay proxy and receive the remote content item therefrom.

2. The computer system of claim 1, wherein the proxy server is configured to process content requests received from the relay proxy and block content requests received directly from the plurality of applications.

3. The computer system of claim 1, wherein the relay proxy is further configured to examine the request for the remote content item and insert authentication credentials in the request responsive to determining that the authentication credentials are required.

4. The computer system of claim 3, wherein the relay proxy is further configured to provide a prompt to a user to supply the authentication credentials.

5. The computer system of claim 1, wherein the relay proxy is configured to block a particular request for an unauthorized remote content item responsive to an indication that accessing the unauthorized remote content item from within the network is not permitted.

6. The computer system of claim 5, wherein the indication comprises a resource server that hosts the remote content item appearing on a blacklist, the blacklist identifying resource servers to which access is not permitted from within the network.

7. The computer system of claim 5, wherein the indication comprises a resource server that hosts the remote content item not being included on a whitelist, the whitelist identifying resource servers to which access is permitted from within the network.

12. The method of claim 7, further comprising:

receiving a third request from a third application installed on the user device, the third request identifying a third remote content item;

blocking the third request; and

sending a notification to the third application that the third request has been blocked.

13. The method of claim 12, wherein the relay proxy blocks the third request responsive to a resource server that hosts the third remote content item appearing on a blacklist, the blacklist identifying resource servers to which access is not permitted from within the network.

14. The method of claim 12, wherein the relay proxy blocks the third request responsive to the third remote content item not being included on a whitelist, the whitelist identifying content items to which access is permitted from within the network.

8. A method of accessing remote content stored outside a network from within the network, the method comprising:

receiving, at a relay proxy executing on a user device, a first request from a first application executing on the user device and a second request from a second application executing on the user device, the first request identifying a first remote content item and the second request identifying a second remote content item;

forwarding the first request and the second request to a proxy server that manages network traffic entering and leaving the network;

receiving a first response to the first request and a second response to the second request, the first response including the first remote content item and the second response including the second remote content item; and

forwarding the first remote content item to the first application and the second remote content item to the second application.

9. The method of claim 8, wherein the proxy server is configured to process content requests received from the relay proxy and block content requests received directly from the first or second application.

10. The method of claim 8, further comprising:

examining the first request to determine whether required authentication credentials are present; and

inserting the required authentication credentials into the first request responsive to determining the required authentication credentials are not present.

11. The method of claim 10, further comprising:

providing a prompt to a user to supply the authentication credentials; and

receiving the authentication credentials.

15. A non-transitory computer-readable medium storing executable computer program code for accessing remote content stored outside a network from within the network, the computer program code comprising instructions for:

receiving, at a relay proxy executing on a user device, a first request from a first application executing on the user device and a second request from a second application executing on the user device, the first request identifying a first remote content item and the second request identifying a second remote content item;

forwarding the first request to be delivered to a first resource server, the first resource server hosting the first remote content item;

forwarding the second request to be delivered to a second resource server, the second resource server hosting the second remote content item;

receiving a first response to the first request and a second response to the second request, the first response including the first remote content item and the second response including the second remote content item; and

providing the first remote content item to the first application and the second remote content item to the second application.

16. The non-transitory computer-readable medium of claim 15, wherein the computer program code further comprises instructions for:

examining the first request to determine whether required authentication credentials are present; and

inserting the required authentication credentials into the first request responsive to determining the required authentication credentials are not present.

17. The non-transitory computer-readable medium of claim 16, wherein the computer program code further comprises instructions for:

providing a prompt to a user to supply the authentication credentials; and

receiving the authentication credentials.

18. The non-transitory computer-readable medium of claim 15, wherein the computer program code further comprises instructions for:

receiving a third request from a third application installed on the user device, the third request identifying a third remote content item;

blocking the third request; and

sending a notification to the third application that the third request has been blocked.

19. The non-transitory computer-readable medium of claim 18, wherein the relay proxy blocks the third request responsive to a resource server that hosts the third remote content item appearing on a blacklist, the blacklist identifying resource servers to which access is not permitted from within the network.

20. The non-transitory computer-readable medium of claim 18, wherein relay proxy blocks the third request responsive to the third remote content item not being included on a whitelist, the whitelist identifying content items to which access is permitted from within the network.