IP Library Granted Patent US 11,956,275
Granted Patent B2
US 11,956,275 · App. 17/283,227 · Granted Apr 9, 2024

Asymmetric-man-in-the-middle capture based application sharing protocol traffic recordation

Inventors: Yang Luo (Shanghai, CN); Jian Zhang (Shanghai, CN); Qian-Ru Zhai (Shanghai, CN); Zhenbin Lin (Shanghai, CN)
Assignee: Micro Focus LLC
H04L63/166H04L63/0823H04L63/102H04L63/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,956,275
App. No.
17/283,227
Granted
Apr 9, 2024
Kind
B2
Abstract

In some examples, with respect to asymmetric-man-in-the-middle capture based application sharing protocol traffic recordation, a dynamic-link library that alters application programming interface calls with respect to communication between an application sharing protocol client and an application sharing protocol server may be injected into the application sharing protocol client. Based on the injected dynamic-link library, data from the communication between the application sharing protocol client and the application sharing protocol server may be ascertained. Further, based on the ascertained data, a test script may be generated to test operation of an application associated with the communication between the application sharing protocol client and the application sharing protocol server.

Claims (71)

1. An apparatus, comprising:

a processor; and

a non-transitory computer readable medium storing machine readable instructions that when executed by the processor cause the processor to:

inject, into an application sharing protocol client, a dynamic-link library that alters application programming interface calls with respect to communication between the application sharing protocol client and an application sharing protocol server;

ascertain, based on the injected dynamic-link library, data from the communication between the application sharing protocol client and the application sharing protocol server; and

generate, based on the ascertained data, a test script to test operation of an application associated with the communication between the application sharing protocol client and the application sharing protocol server,

wherein the application programming interface calls are altered using an altered import address table of the dynamic-link library.

2. The apparatus according to claim 1 , wherein the instructions are further to cause the processor to:

implement Transport Layer Security (TLS) authentication for communication between the apparatus and the application sharing protocol client.

3. The apparatus according to claim 1 , wherein the instructions are further to cause the processor to:

implement Credential Security Support Provider protocol (CredSSP) authentication for communication between the apparatus and the application sharing protocol server.

4. The apparatus according to claim 1 , wherein the instructions to inject, into the application sharing protocol client, the dynamic-link library that alters application programming interface calls with respect to the communication between the application sharing protocol client and the application sharing protocol server are further to cause the processor to:

for communication from the application sharing protocol client to the application sharing protocol server, redirect, based on the dynamic-link library, the communication

from the application sharing protocol client to the apparatus, and

further from the apparatus to the application sharing protocol server.

5. The apparatus according to claim 1 , wherein the instructions to inject, into the application sharing protocol client, the dynamic-link library that alters application programming interface calls with respect to the communication between the application sharing protocol client and the application sharing protocol server are further to cause the processor to:

for communication from the application sharing protocol server to the application sharing protocol client, redirect, based on the dynamic-link library, the communication

from the application sharing protocol server to the apparatus, and

further from the apparatus to the application sharing protocol client.

6. The apparatus according to claim 1 , wherein the instructions to ascertain, based on the injected dynamic-link library, data from the communication between the application sharing protocol client and the application sharing protocol server are further to cause the processor to:

ascertain initiation of the communication between the application sharing protocol client and the application sharing protocol server;

ascertain, based on the initiation of the communication between the application sharing protocol client and the application sharing protocol server, credentials to login to the application sharing protocol server;

utilize the credentials to obtain a token from an authentication server; and

utilize the token for Credential Security Support Provider protocol (CredSSP) authentication to forward the data between the application sharing protocol client and the application sharing protocol server.

7. The apparatus according to claim 1 , wherein the instructions are further to cause the processor to:

implement the dynamic-link library to alter the application programming interface calls that include a socket application programming interface call with respect to the communication between the application sharing protocol client and the application sharing protocol server.

8. The apparatus according to claim 1 , wherein the instructions are further to cause the processor to:

implement the dynamic-link library to alter the application programming interface calls that include a connection application programming interface call with respect to the communication between the application sharing protocol client and the application sharing protocol server.

9. A computer implemented method comprising:

injecting, by a processor and into an application sharing protocol client, a dynamic-link library that alters application programming interface calls with respect to communication between the application sharing protocol client and an application sharing protocol server;

selectively implementing Transport Layer Security (TLS) authentication or Credential Security Support Provider protocol (CredSSP) authentication for communication with the application sharing protocol client or the application sharing protocol server;

ascertaining, based on the injected dynamic-link library, data from the communication between the application sharing protocol client and the application sharing protocol server; and

generating, based on the ascertained data, a test script to test operation of an application associated with the communication between the application sharing protocol client and the application sharing protocol server,

wherein the application programming interface calls are altered using an altered import address table of the dynamic-link library.

10. The computer implemented method according to claim 9 , wherein injecting, into the application sharing protocol client, the dynamic-link library that alters application programming interface calls with respect to the communication between the application sharing protocol client and the application sharing protocol server further comprises:

for communication from the application sharing protocol client to the application sharing protocol server, redirecting, based on the dynamic-link library, the communication

from the application sharing protocol client to an intermediate location, and

further from the intermediate location to the application sharing protocol server.

11. The computer implemented method according to claim 9 , wherein injecting, into the application sharing protocol client, the dynamic-link library that alters application programming interface calls with respect to the communication between the application sharing protocol client and the application sharing protocol server further comprises:

for communication from the application sharing protocol server to the application sharing protocol client, redirecting, based on the dynamic-link library, the communication from the application sharing protocol server to an intermediate location, and further from the intermediate location to the application sharing protocol client.

12. The computer implemented method according to claim 9 , wherein ascertaining, based on the injected dynamic-link library, data from the communication between the application sharing protocol client and the application sharing protocol server further comprises:

ascertaining initiation of the communication between the application sharing protocol client and the application sharing protocol server;

ascertaining, based on the initiation of the communication between the application sharing protocol client and the application sharing protocol server, credentials to login to the application sharing protocol server;

utilizing the credentials to obtain a token from an authentication server; and

utilizing the token for CredSSP authentication to forward the data between the application sharing protocol client and the application sharing protocol server.

13. The computer implemented method according to claim 9 , further comprising:

implementing the dynamic-link library to alter the application programming interface calls that include a socket application programming interface call with respect to the communication between the application sharing protocol client and the application sharing protocol server.

14. The computer implemented method according to claim 9 , further comprising:

implementing the dynamic-link library to alter the application programming interface calls that include a connection application programming interface call with respect to the communication between the application sharing protocol client and the application sharing protocol server.

15. A non-transitory computer readable medium having stored thereon machine readable instructions, the machine readable instructions, when executed, cause a processor to:

inject, into an application sharing protocol client, a dynamic-link library that alters application programming interface calls with respect to communication between the application sharing protocol client and an application sharing protocol server;

ascertain initiation of the communication between the application sharing protocol client and the application sharing protocol server;

ascertain, based on the injected dynamic-link library and the initiation of the communication, data from the communication between the application sharing protocol client and the application sharing protocol server; and

generate, based on the ascertained data, a test script to test operation of an application associated with the communication between the application sharing protocol client and the application sharing protocol server,

wherein the application programming interface calls are altered using an altered import address table of the dynamic-link library.

16. The non-transitory computer readable medium according to claim 15 , wherein the machine readable instructions to ascertain, based on the injected dynamic-link library and the initiation of the communication, data from the communication between the application sharing protocol client and the application sharing protocol server, when executed, further cause the processor to:

ascertain, based on the initiation of the communication between the application sharing protocol client and the application sharing protocol server, credentials to login to the application sharing protocol server;

utilize the credentials to obtain a token from an authentication server; and

utilize the token for Credential Security Support Provider protocol (CredSSP) authentication to forward the data between the application sharing protocol client and the application sharing protocol server.

17. The non-transitory computer readable medium according to claim 15 , wherein the machine readable instructions, when executed, further cause the processor to:

implement Transport Layer Security (TLS) authentication for communication with the application sharing protocol client.

18. The non-transitory computer readable medium according to claim 16 , wherein the machine readable instructions, when executed, further cause the processor to:

implement the CredSSP authentication for communication with the application sharing protocol server.

19. The non-transitory computer readable medium according to claim 15 , wherein the machine readable instructions to inject, into the application sharing protocol client, the dynamic-link library that alters application programming interface calls with respect to communication between the application sharing protocol client and the application sharing protocol server, when executed, further cause the processor to:

for communication from the application sharing protocol client to the application sharing protocol server, redirect, based on the dynamic-link library, the communication

from the application sharing protocol client to an intermediate location, and

further from the intermediate location to the application sharing protocol server.

20. The non-transitory computer readable medium according to claim 15 , wherein the machine readable instructions to inject, into the application sharing protocol client, the dynamic-link library that alters application programming interface calls with respect to communication between the application sharing protocol client and the application sharing protocol server, when executed, further cause the processor to:

for communication from the application sharing protocol server to the application sharing protocol client, redirect, based on the dynamic-link library, the communication

from the application sharing protocol server to an intermediate location, and

further from the intermediate location to the application sharing protocol client.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 19, 2021
From: LUO, YANG; ZHANG, JIAN; ZHAI, QIAN-RU; LIN, ZHENBIN
To: ENTIT SOFTWARE LLC
Reel/Frame 055960/0319 →
CHANGE OF NAME Recorded Apr 19, 2021
From: ENTIT SOFTWARE LLC
To: MICRO FOCUS LLC
Reel/Frame 055966/0979 →
Continuity (1)
Related Publication 20210352106A1 · Nov 11, 2021