Secure data exchange between data processing systems

• US 9,363,237 B2
• Filed: 12/30/2014
• Issued: 06/07/2016
• Est. Priority Date: 06/01/1999
• Status: Expired due to Term

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Inventors: Harada, Larry T., Dolecki, Mark A., Purdum, Christopher S, Hendren, C. Hudson III
• Primary Examiner(s): Najjar, Saleh
• Assistant Examiner(s): Korsak, Oleg
• Application Number:
  US14/586,844
• Publication Number:
  US 20160014086A1
• Time in Patent Office: 525 Days
• Field of Search: 726/12
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/561 Adding application-functional data or data for application control, e.g. adding metadata
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching

Abstract

A data transfer method performed at a proxy server includes intercepting a data request from a client computer that is directed to a target server, encrypting profile information, augmenting the data request by adding the encrypted profile information to the data request, and sending the augmented data request to the target server. A data transfer method that is performed at an information server includes receiving a data request from a proxy server, extracting profile information added to the data request by the proxy server, using the extracted profile information to generate a response, and sending the response to the proxy server.

Claims

1. A method comprising:

intercepting, by a proxy server over a network, a data request from a first computing device that is directed to a web server;

modifying the data request to include user profile information;

sending the modified data request to the web server;

sending information to the web server for controlling a manner for how data sent to the web server is cached in the web server;

receiving, by the proxy server, a response from the web server, wherein the response to the proxy server includes information for controlling a manner for how data received from the web server is cached in the proxy server;

caching the data received from the web server in the proxy server; and

sending at least a portion of the cached data from the proxy server to the first computing device.

2. The method of claim 1, wherein the manner for how data received from the web server is cached includes a time-to-live value specified by the web server.

3. The method of claim 1, wherein the data request to the web server includes an indication that cached data should not be used to satisfy the response to the proxy server.

4. The method of claim 1, wherein the data request from the first computing device is an HTTP data request from a web browser.

5. The method of claim 1, further comprising:

determining an IP address of the first computing device; and

querying a database to determine an identity associated with the IP address in the database.

6. The method of claim 1, wherein the user profile information is encrypted by the proxy server before sending to the web server.

7. The method of claim 1, wherein the user profile information is included in a header of the data request.

8. The method of claim 1, wherein the user profile information includes an IP address of the first computing device.

9. An apparatus comprising:

one or more processors; and

one or more memories operatively coupled to at least one of the one or more processors and having instructions stored thereon that, when executed by at least one of the one or more processors, cause the apparatus to;

intercept over a network a data request from a first computing device that is directed to a web server;

modify the data request to include user profile information;

send the data request to the web server;

send information to the web server for controlling a manner for how data sent to the web server is cached in the web server;

receive a response from the web server, wherein the response includes information for controlling a manner for how data received from the web server is cached;

cache the data received from the web server, and;

send at least a portion of the cached data to the first computing device.

10. The apparatus of claim 9, wherein the manner for how data received from the web server is cached includes a time-to-live value specified by the web server.

11. The apparatus of claim 9, wherein the data request to the web server includes an indication that cached data should not be used to satisfy the response.

12. The apparatus of claim 9, wherein the data request from the first computing device is an HTTP data request sent from a web browser.

13. The apparatus of claim 9, wherein at least one of the one or more memories has further instructions stored thereon that, when executed by at least one of the one or more processors, cause the apparatus to:

determine an IP address of the first computing device; and

query a database to determine an identity associated with the IP address in the database.

14. The apparatus of claim 9, wherein the user profile information is included in a header of the data request.

15. The apparatus of claim 9, wherein the user profile information includes an IP address of the first computing device.

16. The apparatus of claim 9, wherein at least one of the one or more memories has further instructions stored thereon that, when executed by at least one of the one or more processors, cause the apparatus to encrypt the user profile information before sending to the web server.

17. At least one non-transitory computer-readable medium storing computer-readable instructions that, when executed by one or more computing devices, cause at least one of the one or more computing devices to:

intercept over a network a data request from a first computing device that is directed to a web server;

modify the data request to include user profile information;

send the data request to the web server;

send information to the web server for controlling a manner for how data sent to the web server is cached in the web server;

receive a response from the web server, wherein the response includes information for controlling a manner for how data received from the web server is cached;

cache the data received from the web server; and

send at least a portion of the cached data to the first computing device.

18. The at least one non-transitory computer-readable medium of claim 17, wherein the manner for how data received from the web server is cached includes a time-to-live value specified by the web server.

19. The at least one non-transitory computer-readable medium of claim 17, wherein the data request to the web server includes an indication that cached data should not be used to satisfy the response.

20. The at least one non-transitory computer-readable medium of claim 17, wherein the user profile information includes an IP address of the first computing device.