Services within reverse proxy servers

Patent metadata

Field	Value
Publication number	US-2016088023-A1
Application number	US-201514696432-A
Country	US
Kind code	A1
Filing date	Apr 25, 2015
Priority date	Sep 24, 2014
Publication date	Mar 24, 2016
Grant date	—

Abstract

Embodiments of the invention provide techniques for processing messages transmitted between computer networks. Messages, such as requests from client devices for web services and other web content may be transmitted between multiple computer networks. Intermediary devices or applications such as proxy servers may receive, process, and transmit the messages between the communication endpoints. In some embodiments, a reverse proxy server may be configured to dynamically generate Representational State Transfer (REST) services and REST resources within the reverse proxy server. The REST services and REST resources within the reverse proxy server may handle incoming requests from client devices and invoke backend web services, thereby allowing design abstraction and/or enforcement of various security policies on the reverse proxy server.

First claim

What is claimed is:

1 . A method of transmitting web service requests between computer networks, the method comprising:
receiving, at a proxy server in communication with an internal computer network, a web service request from a client device in an external computer network separate from the internal computer network; identifying a first resource within the web service request; determining that the first resource is exposed by a first Representational State Transfer (REST) web service within the proxy server; invoking the first REST web service within the proxy server; and during execution of the first REST web service within the proxy server, invoking a second web service within a computer server in the internal computer network.

2 . The method of claim 1 , wherein invoking the first REST web service within the proxy server comprises:
determining that the first resource exposed by the first REST web service does not exist within the proxy server; and generating the first resource within the proxy server, wherein the first resource is generated after the web service request is received from the client device.

3 . The method of claim 1 , further comprising:
accessing a Web Application Description Language (WADL) file describing a set of resources provided by the second web service within the computer server in the internal computer network; and generating one or more resources in the first REST web service within the proxy server, using the description in the WADL file of the set of resources provided by the second web service.

4 . The method of claim 3 , wherein generating the resources in the first REST web service within the proxy server comprises:
modifying one or more resource descriptions within the WADL file; creating one or more REST resources based on the modified resource descriptions; and deploying each of the REST resources in the first REST web service within the proxy server.

5 . The method of claim 1 , wherein the second web service is a REST web service within the computer server in the internal computer network.

6 . The method of claim 5 , wherein the first REST web service within the proxy server exposes a plurality of resources, including at least one resource configured to invoke the second REST web service, and including at least one resource configured to invoke a third REST web service exposed by a different computer server in the internal computer network.

7 . The method of claim 5 , wherein the second REST web service exposes a plurality of resources, and wherein the first REST web service within the proxy server exposes a subset of the plurality of resources exposed by the second REST web service.

8 . The method of claim 1 , wherein the second web service is a Simple Object Access protocol (SOAP) web service within the computer server in the internal computer network.

9 . The method of claim 1 , further comprising:
determining a current point in a predetermined processing flow for the web service request within the proxy server; retrieving one or more security policies, based on the determined current point in the predetermined processing flow for the web service request; and processing the web service request in accordance with the security policies, wherein the web service request is processed before invoking the second web service exposed by the computer server in the internal computer network.

10 . A system comprising:
a processing unit comprising one or more processors; and memory coupled with and readable by the processing unit and storing therein a set of instructions which, when executed by the processing unit, causes the processing unit to:
receive a web service request from a client device in an external computer network, wherein the system is configured to operate within a subnetwork of an internal computer network separate from the external computer network;
identify a first resource within the web service request;
determine that the first resource is exposed by a first Representational State Transfer (REST) web service within the system;
invoke the first REST web service within the system; and
during execution of the first REST web service within the system, invoke a second web service within a computer server in the internal computer network.

11 . The system of claim 10 , wherein invoking the first REST web service within the system comprises:
determining that the first resource exposed by the first REST web service does not exist within the memory of the system; and generating the first resource within the memory of the system, wherein the first resource is generated after the web service request is received from the client device.

12 . The system of claim 10 , the memory storing therein further instructions which, when executed by the processing unit, causes the processing unit to:
access a Web Application Description Language (WADL) file describing a set of resources provided by the second web service within the computer server in the internal computer network; and generate one or more resources in the first REST web service within the system, using the description in the WADL file of the set of resources provided by the second web service.

13 . The system of claim 12 , wherein generating the resources in the first REST web service within the system comprises:
modifying one or more resource descriptions within the WADL file; creating one or more REST resources based on the modified resource descriptions; and deploying each of the REST resources in the first REST web service within the system.

14 . The system of claim 10 , wherein the second web service is a REST web service within the computer server in the internal computer network.

15 . The system of claim 14 , wherein the first REST web service within the system exposes a plurality of resources, including at least one resource configured to invoke the second REST web service, and including at least one resource configured to invoke a third REST web service exposed by a different computer server in the internal computer network.

16 . The system of claim 14 , wherein the second REST web service exposes a plurality of resources, and wherein the first REST web service within the system exposes a subset of the plurality of resources exposed by the second REST web service.

17 . A non-transitory computer-readable memory comprising a set of instructions stored therein which, when executed by a processor, causes the processor to:
receive a web service request at a system configured to operate within a subnetwork of an internal computer network, wherein the web service request is received from a client device in an external computer network separate from the internal computer network; identify a first resource within the web service request; determine that the first resource is exposed by a first Representational State Transfer (REST) web service within the system; invoke the first REST web service within the system; and during execution of the first REST web service within the system, invoke a second web service within a computer server in the internal computer network.

18 . The computer-readable memory of claim 17 , wherein invoking the first REST web service within the system comprises:
determining that the first resource exposed by the first REST web service does not exist within the memory of the system; and generating the first resource within the memory of the system, wherein the first resource is generated after the web service request is received from the client device.

Assignees

• Oracle Int Corp

Inventors

• Handa Nitin
• Yamuna Prakash

Classifications

• H04L63/0209

  Architectural arrangements, e.g. perimeter networks or demilitarized zones · CPC title

• H04L41/06

  Management of faults, events, alarms or notifications · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/105

  Multiple levels of security · CPC title

• G06F16/972

  Access to data in other repository systems, e.g. legacy data or dynamic Web page generation · CPC title