Secure data exchange between data processing systems
First Claim
Patent Images
1. A data transfer method, the method comprising:
- receiving a request from a client application that is directed to a server;
retrieving an identifier based on an identity of a user of the client application;
modifying the request to include the retrieved identifier; and
sending the modified request to the server such that the server extracts the retrieved identifier, accesses a storage associated with the server in which user profile information for the user was stored prior to the server receiving the request, retrieves the user profile information from the storage associated with the server based on the extracted identifier, generates a response to the request based on the retrieved user profile information, and sends the response to the client application.
8 Assignments
0 Petitions
Accused Products
Abstract
A data transfer method performed at a proxy server includes intercepting a data request from a client computer that is directed to a target server, encrypting profile information, augmenting the data request by adding the encrypted profile information to the data request, and sending the augmented data request to the target server. A data transfer method that is performed at an information server includes receiving a data request from a proxy server, extracting profile information added to the data request by the proxy server, using the extracted profile information to generate a response, and sending the response to the proxy server.
-
Citations
30 Claims
-
1. A data transfer method, the method comprising:
-
receiving a request from a client application that is directed to a server; retrieving an identifier based on an identity of a user of the client application; modifying the request to include the retrieved identifier; and sending the modified request to the server such that the server extracts the retrieved identifier, accesses a storage associated with the server in which user profile information for the user was stored prior to the server receiving the request, retrieves the user profile information from the storage associated with the server based on the extracted identifier, generates a response to the request based on the retrieved user profile information, and sends the response to the client application. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. A data processing method performed by a server, the method comprising:
-
receiving a modified request, wherein the modified request was created by inserting an identifier corresponding to a user of a client application into a request sent by the client application; accessing a storage associated with the server, wherein profile information for the user of the client application was stored in the storage prior to the server receiving the modified request; extracting the identifier from the modified request; retrieving the user profile information from the storage associated with the server based on the extracted identifier; generating a response to the request based on the retrieved user profile information; and sending the response to the client application. - View Dependent Claims (9, 10, 11, 12, 13, 14)
-
-
15. A machine-readable storage device having a computer program embodied thereon, the computer program comprising instructions for causing a processing device to:
-
receive a request from a client application that is directed to a server; retrieve an identifier based on an identity of a user of the client application; modify the request to include the retrieved identifier; and send the modified request to the server such that the server extracts the retrieved identifier, accesses a storage associated with the server in which user profile information for the user was stored prior to the server receiving the request, retrieves the user profile information from the storage associated with the server based on the extracted identifier, generates a response to the request based on the retrieved user profile information, and sends the response to the client application. - View Dependent Claims (16, 17, 18, 19, 20, 21)
-
-
22. A machine-readable storage device having a computer program embodied thereon, the computer program comprising instructions for causing a server to:
-
receive a modified request, wherein the modified request was created by inserting an identifier corresponding to a user of a client application into a request sent by the client application; access a storage associated with the server, wherein profile information for the user of the client application was stored in the storage prior to the server receiving the modified request; extract the identifier from the modified request; retrieve the user profile information from the storage associated with the server based on the extracted identifier; generate a response to the request based on the retrieved user profile information; and send the response to the client application. - View Dependent Claims (23, 24, 25, 26, 27, 28)
-
-
29. A data transfer method, the method comprising:
-
receiving a request from a client application that is directed to a server; retrieving an identifier based on an identity of a user of the client application; modifying the request to include the retrieved identifier; and sending the modified request to the server such that the server extracts the retrieved identifier, retrieves user profile information from a location other than the modified request based on the extracted identifier, generates a response to the request based on the retrieved user profile information, and sends the response to the proxy server.
-
-
30. A data processing method performed by a server, the method comprising:
-
receiving a modified request, wherein the modified request was created by inserting an identifier corresponding to a user of a client application into a request sent by the client application; extracting the identifier from the modified request; retrieving user profile information from a location other than the received, modified request based on the extracted identifier; generating a response to the request based on the retrieved user profile information; and sending the response to the client application.
-
Specification