System and method for acceleration of a secure transmission over satellite

• US 9,723,055 B2
• Filed: 05/07/2014
• Issued: 08/01/2017
• Est. Priority Date: 02/15/2000
• Status: Expired due to Term

• Current Assignee: Gilat Satellite Networks Limited
• Original Assignee: Gilat Satellite Networks Limited
• Inventors: Guimaraes, Roberto, Chatterjee, Aditya N., Kadrichu, Hanny P., Bowers, Steven
• Primary Examiner(s): MACILWINEN, JOHN MOORE JAIN
• Application Number:
  US14/271,937
• Publication Number:
  US 20150288738A1
• Time in Patent Office: 1,182 Days
• CPC Class Codes: G06F 16/9574 of access to content, e.g. by caching
• CPC Class Codes: H04B 7/18519 Operations control, administration or maintenance
• CPC Class Codes: H04B 7/1858 Arrangements for data transmission on the physical system, i.e. for data bit transmission between network components
• CPC Class Codes: H04B 7/18582 Arrangements for data linking, i.e. for data framing, for error recovery, for multiple access
• CPC Class Codes: H04B 7/18586 Arrangements for data transporting, e.g. for an end to end data transport or check
• CPC Class Codes: H04B 7/18593 Arrangements for preventing unauthorised access or for providing user protection arrangements for secret or secure communication H04L9/00
• CPC Class Codes: H04L 12/1836 with heterogeneous network architecture
• CPC Class Codes: H04L 12/189 in combination with wireless systems selective distribution or broadcast in wireless communication networks H04W4/06
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/288 Distributed intermediate devices, i.e. intermediate devices for interaction with other intermediate devices on the same level
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 67/5681 Pre-fetching or pre-delivering data based on network characteristics
• CPC Class Codes: H04L 67/5683 Storage of data provided by user terminals, i.e. reverse caching
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04W 80/06 Transport layer protocols, e.g. TCP [Transport Control Protocol] over wireless transmission control protocol/Internet protocol [TCP/IP] or user datagram protocol [UDP] H04L69/16
• CPC Class Codes: H04W 84/06 Airborne or Satellite Networks space-based or airborne stations H04B7/185

Abstract

A broadband communication system with improved latency is disclosed. The system employs acceleration of secure web-based communications over a satellite communication network. In accordance with aspects of the invention, secure protocol acceleration is employed such that required protocol signals transmitted from a computer employing a web browser may be intercepted by a remote terminal. To insure that the browser will continue transmitting data, the remote terminal generates required acknowledgment and security signals to continue the secure communication, which may then transmitted back to the computer. Meanwhile, the received protocol signals may be converted by the remote terminal for transmission through the satellite communications system in a format appropriate for that communication medium. Aspects of the invention further include a hub or similar device for communicating with the satellite communications system.

Claims

1. A method, comprising:

receiving, at a device, a data page request from a remote station via a satellite link, the data page request indicating a data page to be retrieved, the data page request including a cookie comprising information related to the remote station;

identifying, by the device, a network address associated with the data page;

establishing a connection with a second device associated with the network address;

requesting, by the device, the data page from the second device associated with the network address;

receiving, at the device, the data page from the second device;

requesting, by the device, a plurality of objects referenced in the data page, wherein at least one of the plurality of objects is associated with the cookie;

compiling the plurality of objects into a data cluster;

compressing the data cluster;

transmitting the data cluster to the remote station;

receiving, from the remote station via the satellite link, a second data page request, the second data page request indicating a second data page to be retrieved, the second data page request not including the cookie;

requesting the second data page, the requesting the second data page comprising transmitting the cookie;

receiving the second data page; and

transmitting the second data page to the remote station.

2. The method of claim 1, wherein the identifying the network address comprises:

generating and transmitting, by the device, a DNS request; and

receiving, at the device, an internet protocol (IP) address in response to the DNS request.

3. The method of claim 1, wherein the identifying the network address comprises:

searching, by the device, a locally stored DNS table for an internet protocol (IP) address corresponding to the requested data page; and

retrieving, by the device, the IP address corresponding to the requested data page.

4. The method of claim 1, further comprising storing, in a local cache, the cookie included within the data page request.

5. The method of claim 4, wherein the local cache is included within the device.

6. The method of claim 1, wherein the transmitting the data cluster comprises transmitting the data cluster as a multicast transmission.

7. The method of claim 1, further comprising parsing the data page to determine the plurality of objects to be requested.

8. The method of claim 1, further comprising assembling the plurality of objects to be requested into a plurality of lists.

9. The method of claim 8, wherein the assembling comprises assembling the plurality of objects to be requested into the plurality of lists based on a web server associated with each object such that separate lists include objects associated with separate web servers.

10. The method of claim 9, wherein the requesting the plurality of objects further comprises transmitting at least one of the lists to a respective web server.

11. The method of claim 1, further comprising:

establishing a tunnel over the satellite link between the device and the remote station,

wherein transmitting the data cluster comprises;

encapsulating the data cluster in a container having a network address associated with the remote station; and

transmitting the container to the remote station via the tunnel.

12. The method of claim 11, further comprising:

using a first encryption to encrypt data for transmission through the tunnel; and

using a second encryption to encrypt data for transmission through the connection with the second device, the second encryption being different from the first encryption.

13. The method of claim 1, further comprising:

prior to the transmitting the data cluster, multicasting the data page to the remote station.

14. The method of claim 13, further comprising:

evaluating contents of the data page; and

marking the data page as a page to be multicasted based on a result of the evaluating.

15. The method of claim 1, further comprising:

receiving, at the device, a message indicating a particular page being accessed by the remote station, wherein the requesting the plurality of objects is responsive to the message.

16. The method of claim 1, further comprising:

transmitting, from the device to the remote station, an index marker indicating whether content in a cache at the remote station is up-to-date.

17. The method of claim 1, further comprising processing a script included in the data page, wherein the plurality of objects referenced in the data page comprises one or more objects referenced by the script.

18. An apparatus, comprising:

a processor; and

memory storing computer-executable instructions that, when executed by the processor, cause the apparatus to;

receive a data page request from a remote station via a satellite link, the data page request indicating a data page to be retrieved, the data page request including a cookie comprising information related to the remote station;

identify a network address associated with the data page;

establish a connection with a second device associated with the network address;

request the data page from the second device associated with the network address;

receive the data page from the second device;

request a plurality of objects referenced in the data page, wherein at least one of the plurality of objects is associated with the cookie;

compile the plurality of objects into a data cluster;

compress the data cluster; and

transmit the data cluster to the remote station;

receive, from the remote station via the satellite link, a second data page request, the second data page request indicating a second data page to be retrieved, the second data page request not including the cookie;

request the second data page, the requesting the second data page comprising transmitting the cookie;

receive the second data page; and

transmit the second data page to the remote station.

19. One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by a processor, cause a device to:

receive a data page request from a remote station via a satellite link, the data page request indicating a data page to be retrieved, the data page request including a cookie comprising information related to the remote station;

identify a network address associated with the data page;

establish a connection with a second device associated with the network address;

request the data page from the second device associated with the network address;

receive the data page from the second device;

request a plurality of objects referenced in the data page, wherein at least one of the plurality of objects is associated with the cookie;

compile the plurality of objects into a data cluster;

compress the data cluster;

transmit the data cluster to the remote station;

receive, from the remote station via the satellite link, a second data page request, the second data page request indicating a second data page to be retrieved, the second data page request not including the cookie;

request the second data page, the requesting the second data page comprising transmitting the cookie;

receive the second data page; and

transmit the second data page to the remote station.