Systems and methods to protect against information disclosure
US-2024205287-A1 · Jun 20, 2024 · US
US2018198879A1 · US · A1
| Field | Value |
|---|---|
| Publication number | US-2018198879-A1 |
| Application number | US-201715403109-A |
| Country | US |
| Kind code | A1 |
| Filing date | Jan 10, 2017 |
| Priority date | Jan 10, 2017 |
| Publication date | Jul 12, 2018 |
| Grant date | — |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
Described herein are methods and systems for application aware fastpath processing over a data network. In some examples, application fastpath operates to facilitate application specific fastpath processing of data packets transferred between a client device and a server device over a network session of a data network.
Opening claim text (preview).
What is claimed is: 1 . A servicing node comprising: a fastpath module for processing data packets, the fastpath module stored in memory at the servicing node and executed by at least one processor, wherein the fastpath module: receives an application service request data packet from a client device, over a network session between the client device and the servicing node; obtains one or more network addresses from the data packet and matches the obtained one or more network addresses with a session table for the network session between the client device and the servicing node; determines that the one or more network addresses match an ingress session of the session table; stores the application service request data packet into an ingress message; and transmits the data packet to a server using egress session information. 2 . The system of claim 1 , wherein the servicing node is a server load balancer. 3 . The system of claim 1 , wherein the servicing node is an application delivery controller. 4 . The system of claim 1 , wherein the ingress message is an application layer message. 5 . The system of claim 1 , wherein the fastpath module further: processes the application service request data packet according to an application layer protocol used by the network application. 6 . The system of claim 5 , wherein the application layer protocol is one of: HTTP, SIP, FTP, secure HTTP, instant messaging protocol, file transfer protocol, streaming protocol, or real time streaming protocol. 7 . The system of claim 1 , wherein the fastpath module is a high performance TCP stack. 8 . The system of claim 1 , wherein the fastpath module further: transmits the ingress message to a network application in the application service request via fastpath processing. 9 . The system of claim 1 , wherein the fastpath module further: receives a response data packet from the server; determines that the data packet is associated to the egress session; processes the data packet according to egress session information; and sends the processed data packet to the client device using ingress session information. 10 . The system of claim 9 , wherein the egress session information and the ingress session information are stored in the session table. 11 . The system of claim 9 , wherein the egress session and the ingress session are TCP sessions. 12 . The system of claim 9 , wherein the egress session and the ingress session are HTTP sessions. 13 . The system of claim 9 , wherein the egress session and the ingress session are SIP sessions. 14 . A method for processing data packets via a fastpath module stored in memory at a servicing node and executed by at least one processor, the method comprising: receiving an application service request data packet from a client device, over a network session between the client device and the servicing node; obtaining one or more network addresses from the data packet and matches the obtained one or more network addresses with a session table for the network session between the client device and the servicing node; determining that the one or more network addresses match an ingress session of the session table; storing the application service request data packet into an ingress message; and transmitting the data packet to a server using egress session information. 15 . The method of claim 14 , wherein the servicing node is an application delivery controller. 16 . The method of claim 14 , wherein the ingress message is an application layer message. 17 . The method of claim 14 , further comprising: processing the application service request data packet according to an application layer protocol used by the network application. 18 . The method of claim 17 , wherein the application layer protocol is one of: HTTP, SIP, FTP, secure HTTP, instant messaging protocol, file transfer protocol, streaming protocol, or real time streaming protocol. 19 . The method of claim 14 , further comprising: transmitting the ingress message to a network application in the application service request via fastpath processing. 20 . The method of claim 14 , further comprising: receiving a response data packet from the server; determining that the data packet is associated to the egress session; processing the data packet according to egress session information; and sending the processed data packet to the client device using ingress session information.
based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title
Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields · CPC title
Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding · CPC title
Electricity · mapped topic
Electricity · mapped topic
Related publications grouped by family.
Answers are generated from the same data shown on this page.