On-premises agent for mobile cloud service
First Claim
Patent Images
1. A method of facilitating offsite access to an enterprise computer network, the method comprising:
- initiating, by an agent executing on a computer behind a firewall on an enterprise network, a hypertext transport protocol (HTTP) connection with a cloud-based gateway outside of the firewall;
responsive to initiating the HTTP connection, automatically upgrading the HTTP connection with the cloud-based gateway to a WebSocket protocol connection;
receiving, from the cloud-based gateway, by the agent, over the WebSocket protocol connection, a first request for data stored on a server behind the firewall on the enterprise network, wherein the first request has a WebSocket format compliant for the WebSocket protocol connection;
translating, by the agent, the first request received from the cloud-based gateway into a second request having an HTTP format for communication with the server on the enterprise network, wherein translating includes converting the WebSocket format of the first request to the HTTP format for the second request for communication with the server;
sending, from the agent, the second request to the server on the enterprise network;
receiving, by the agent, a first response to the second request from the server, the first response having the HTTP format;
creating, by the agent, a second response having the WebSocket format, wherein the second response is created based on converting the first response from the HTTP format to the WebSocket format; and
sending, by the agent, over the WebSocket protocol connection, to the cloud-based gateway, the second response.
4 Assignments
0 Petitions
Accused Products
Abstract
Systems, devices, and methods are disclosed for an agent device within a company'"'"'s network firewall to initiate an HTTP connection with a cloud-based gateway and then upgrade the connection to a WebSockets protocol in order to have an interactive session. Over this interactive session, a mobile device, which connects to the cloud-based intermediary, can request data from servers inside the company'"'"'s firewalls. Because the firewall is traversed using HTTP protocols (with WebSockets), it can be as safe as letting employees browse the web from inside the company'"'"'s network.
-
Citations
17 Claims
-
1. A method of facilitating offsite access to an enterprise computer network, the method comprising:
-
initiating, by an agent executing on a computer behind a firewall on an enterprise network, a hypertext transport protocol (HTTP) connection with a cloud-based gateway outside of the firewall; responsive to initiating the HTTP connection, automatically upgrading the HTTP connection with the cloud-based gateway to a WebSocket protocol connection; receiving, from the cloud-based gateway, by the agent, over the WebSocket protocol connection, a first request for data stored on a server behind the firewall on the enterprise network, wherein the first request has a WebSocket format compliant for the WebSocket protocol connection; translating, by the agent, the first request received from the cloud-based gateway into a second request having an HTTP format for communication with the server on the enterprise network, wherein translating includes converting the WebSocket format of the first request to the HTTP format for the second request for communication with the server; sending, from the agent, the second request to the server on the enterprise network; receiving, by the agent, a first response to the second request from the server, the first response having the HTTP format; creating, by the agent, a second response having the WebSocket format, wherein the second response is created based on converting the first response from the HTTP format to the WebSocket format; and sending, by the agent, over the WebSocket protocol connection, to the cloud-based gateway, the second response. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9)
-
-
10. A machine-readable non-transitory medium embodying information indicative of instructions for causing one or more machines to perform operations comprising:
-
initiating, by an agent executing on a computer behind a firewall on an enterprise network, a hypertext transport protocol (HTTP) connection with a cloud-based gateway outside of the firewall; responsive to initiating the HTTP connection, automatically upgrading the HTTP connection with the cloud-based gateway to a WebSocket protocol connection; receiving, from the cloud-based gateway, by the agent, over the WebSocket protocol connection, a first request for data stored on a server behind the firewall on the enterprise network, wherein the first request has a WebSocket format compliant for the WebSocket protocol connection; translating, by the agent, the first request received from the cloud-based gateway into a second request having an HTTP format for communication with the server on the enterprise network, wherein translating includes converting the WebSocket format of the first request to the HTTP format for the second request for communication with the server; sending, from the agent, the second request to the server on the enterprise network; receiving, by the agent, a first response to the second request from the server, the first response having the HTTP format; creating, by the agent, a second response having the WebSocket format, wherein the second response is created based on converting the first response from the HTTP format to the WebSocket format; and sending, by the agent, over the WebSocket protocol connection, to the cloud-based gateway, the second response. - View Dependent Claims (11, 12, 13)
-
-
14. A system for facilitating offsite access to an enterprise computer network, the system comprising:
-
at least one processor; and a memory operatively coupled with the at least one processor, the at least one processor executing instructions from the memory for; initiating, by an agent executing on a computer behind a firewall on an enterprise network, a hypertext transport protocol (HTTP) connection with a cloud-based gateway outside of the firewall; responsive to initiating the HTTP connection, automatically upgrading the HTTP connection with the cloud-based gateway to a WebSocket protocol connection; receiving, from the cloud-based gateway, by the agent, over the WebSocket protocol connection, a first request for data stored on a server behind the firewall on the enterprise network, wherein the first request has a WebSocket format compliant for the WebSocket protocol connection; translating, by the agent, the first request received from the cloud-based gateway into a second request having an HTTP format for communication with the server on the enterprise network, wherein translating includes converting the WebSocket format of the first request to the HTTP format for the second request for communication with the server; sending, from the agent, the second request to the server on the enterprise network; receiving, by the agent, a first response to the second request from the server, the first response having the HTTP format; creating, by the agent, a second response having the WebSocket format, wherein the second response is created based on converting the first response from the HTTP format to the WebSocket format; and sending, by the agent, over the WebSocket protocol connection, to the cloud-based gateway, the second response. - View Dependent Claims (15, 16, 17)
-
Specification