Authentication of HTTP applications

• US 7,665,147 B2
• Filed: 02/05/2004
• Issued: 02/16/2010
• Est. Priority Date: 02/05/2004
• Status: Expired due to Fees

• Current Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Original Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Inventors: Sullivan, Bryan
• Primary Examiner(s): Rones; Charles
• Assistant Examiner(s): CAO, PHUONG THAO
• Application Number:
  US10/773,555
• Publication Number:
  US 20050187890A1
• Time in Patent Office: 2,203 Days
• Field of Search: 726/2, 726/12, 726/27, 726/28, 726/29, 726/30, 707/999.006, 713/168, 713/170
• US Class Current: 726/29
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

An apparatus such as an HTTP proxy server compares information of a request by HTTP client logic with a known pattern of information for the client logic. When the information of the request matches the known pattern, the HTTP proxy server causes content and/or software to be communicated to the client in response to the request. Depending upon the results of the comparison, the HTTP proxy may also validate or invalidate the request before communicating it to the server.

Claims

1. A method of authentication, the method comprising:

connecting a wireless network to an HTTP network using an HTTP proxy;

converting wireless network protocols from the wireless network into a protocol supported by the HTTP network;

comparing information, consisting of header types, a header order, and a header content, of a request by client logic with a known pattern of information for the client logic to determine whether a device making the request is authorized to receive at least one of content and software, the comparing accomplished by the HTTP proxy, wherein the header types, the header order, and the header content strongly identify the client logic; and

when the information of the request matches the known pattern, causing the at least one of content and software to be communicated to the client logic in response to the request.

2. The method of claim 1, further comprising:

the known pattern selected according to an identification of the client logic provided with the request.

3. The method of claim 1, further comprising:

the request comprising an HTTP GET request.

4. The method of claim 1, further comprising:

the known pattern of information comprising a value determined by combining information of the request.

5. The method of claim 1, further comprising:

the HTTP proxy causing an HTTP server to communicate the at least one of content and software.

6. The method of claim 1, further comprising:

applying provision information to interpret at least a portion of the information of the request; and

comparing information interpreted from the request to information identifying the client logic.

7. An apparatus for authentication, the apparatus comprising:

a processor; and

logic that, when applied to the processor, results in connecting a wireless network to an HTTP network;

converting wireless network protocols from the wireless network into a protocol supported by the HTTP network;

comparing information, consisting of header types, a header order, and a header content, of a request by client logic with a known pattern of information for the client logic to determine whether a device making the request is authorized to receive at least one of content and software, wherein the header types, the header order, and the header content strongly identify the client logic; and

when the information of the request matches the known pattern, causing the at least one of content and software to be communicated to the client logic in response to the request.

8. The apparatus of claim 7, further comprising:

logic that, when applied to the processor, results in selecting the known pattern according to an identification of the client logic provided with the request.

9. The apparatus of claim 7, further comprising HTTP proxy logic.

10. The apparatus of claim 7, further comprising:

logic that, when applied to the processor, results in combining information of the request to determine a value to represent the pattern of information in the request.

11. The apparatus of claim 9, further comprising:

logic that, when applied to the processor, results in causing an HTTP server to provide the at least one of content and software to the HTTP proxy; and

in the HTTP proxy providing the at least one of content and software to the client logic.

12. The apparatus of claim 7, further comprising:

logic that, when applied to the processor, results in applying provision information to interpret at least a portion of the information of the request; and

comparing interpreted information of the request to information of the request identifying the client logic.

13. A method of authentication, the method comprising:

connecting a wireless network to an HTTP network using an HTTP proxy;

converting wireless network protocols from the wireless network into a protocol supported by the HTTP network;

comparing information, consisting of header types, a header order, and a header content, of a request by client logic with a known pattern of information for the client logic to determine whether a device making the request is authorized to receive at least one of content and software, the comparing accomplished by the HTTP proxy, wherein the header types, the header order, and the header content strongly identify the client logic; and

modifying the request information to either validate or invalidate the request according to whether the information of the request matches the known pattern.

14. The method of claim 13, further comprising:

the known pattern selected according to an identification of the client logic provided with the request.

15. The method of claim 13, further comprising:

the request comprising an HTTP request.

16. The method of claim 13, further comprising:

the known pattern of information comprising a value determined by combining units of information of the request.

17. The method of claim 13, further comprising:

the HTTP proxy causing an HTTP server to communicate at least one of content and software in response to the request.

18. The method of claim 13, further comprising:

applying provision information to interpret at least a portion of the information of the request; and

comparing information interpreted from the request to information identifying the client logic.