Granted Patent B2

US 12,670,246 · App. 19/335,531 · Granted Jun 30, 2026

Inventors: Philip David Hassey (Rye, CO); Yanran Zeng (Pittsburgh, PA); Brian David Rowe (Portland, OR); Kevin David Jamieson (North Vancouver, CA); Patrick David Stephen (Minneapolis, MN); Karim Fanous (Seattle, WA)

Assignee: Delinea Inc.

G06F21/54G06F21/554G06F2221/033

Abstract

Claims (57)

1 . A method for managing interactions with applications in a computing environment using one or more processors that are configured to execute instructions that cause performance of actions, comprising:

obtaining one or more message elements based on one or more application responses to one or more application requests, wherein the one or more message elements are enqueued in a message queue to reduce memory consumption associated with an application session;

using one or more overlay network policy instructions associated with the application session to enable modification of the one or more application responses;

collecting a portion of one or more state elements in a state queue that are associated with the one or more message elements based on an association between the portion of the one or more state elements and the one or more message elements, wherein the one or more state elements are queued in the state queue to reduce memory consumption that is associated with the application session; and

updating the portion of the one or more state elements to advance a state of one or more protocols based on the one or more message elements that are associated with the portion of the one or more state elements, wherein the one or more application responses are communicated to a client.

2 . The method of claim 1 , further comprising:

obtaining the one or more state elements based on one or more application requests from the client, wherein the one or more state elements each include information associated with the one or more application requests or an application server that is a target of the one or more application requests.

3 . The method of claim 1 , wherein the advancement of the state of the one or more protocols further comprises:

employing one or more protocol maps to validate the one or more protocols based one or more of a rule, an instruction, or a state map associated with one or more security policies.

4 . The method of claim 1 , wherein the update further comprises removal of the portion of the one or more state elements from the state queue and removal of the one or more message elements from the message queue.

5 . The method of claim 1 , further comprising:

validating a sequence of the one or more application requests and another sequence of the one or more application responses that conform to a protocol;

validating content of the one or more application requests and other content of the one or more application responses conforms to the protocol; and

employing a failure to validate the one or more application requests or another failure to validate the one or more application responses to terminate an application session.

6 . The method of claim 1 , wherein the collection of the portion of the one or more state elements in the state queue, further comprises:

collecting one or more features of a protocol that associates an application response with an application request, wherein the one or more features include one or more of a sequence number, a timestamp, the client identity, or a network address; and

collecting the association between the portion of the one or more state elements and the one or more message elements based on the one or more features of the protocol.

7 . The method of claim 1 , wherein the obtainment of the one or more message elements further comprises:

employing an overlay network policy to collect one or more policy instructions associated with an application session; and

modifying the one or more application responses based on the one or more policy instructions.

8 . A network computer for managing interactions with applications, comprising:

a memory that stores at least instructions; and

one or more processors that execute instructions that are configured to cause actions, including:

obtaining one or more message elements based on one or more application responses to one or more application requests, wherein the one or more message elements are enqueued in a message queue to reduce memory consumption associated in an application session;

collecting a portion of one or more state elements in a state queue that are associated with the one or more message elements based on an association between the portion of the one or more state elements and the one or more message elements, wherein the one or more state elements are queued in the state queue to reduce memory consumption that is associated with the application session; and

updating the portion of the one or more state elements to advance a state of one or more protocols based on the one or more message elements that are associated with the portion of the one or more state elements, wherein the one or more application responses are communicated to a client.

9 . The network computer of claim 8 , further comprising:

obtaining the one or more state elements based on one or more application requests from the client, wherein the one or more state elements each include information associated with the one or more application requests or an application server that is a target of the one or more application requests.

10 . The network computer of claim 8 , wherein the advancement of the state of the one or more protocols further comprises:

employing one or more protocol maps to validate the one or more protocols based one or more of a rule, an instruction, or a state map associated with one or more security policies.

11 . The network computer of claim 8 , wherein the update further comprises removal of the portion of the one or more state elements from the state queue and removal of the one or more message elements from the message queue.

12 . The network computer of claim 8 , further comprising:

validating a sequence of the one or more application requests and another sequence of the one or more application responses that conform to a protocol;

validating content of the one or more application requests and other content of the one or more application responses conforms to the protocol; and

employing a failure to validate the one or more application requests or another failure to validate the one or more application responses to terminate an application session.

13 . The network computer of claim 8 , wherein the collection of the portion of the one or more state elements in the state queue, further comprises:

collecting one or more features of a protocol that associates an application response with an application request, wherein the one or more features include one or more of a sequence number, a timestamp, the client identity, or a network address; and

collecting the association between the portion of the one or more state elements and the one or more message elements based on the one or more features of the protocol.

14 . The network computer of claim 8 , wherein the obtainment of the one or more message elements further comprises:

employing an overlay network policy to obtain one or more policy instructions associated with an application session; and

modifying the one or more application responses based on the one or more policy instructions.

15 . A processor readable non-transitory storage media that includes instructions configured for managing interactions with applications in a computing environment, wherein execution of the instructions by one or more processors on one or more network computers causes performance of actions, comprising:

obtaining one or more message elements based on one or more application responses to one or more application requests, wherein the one or more message elements are enqueued in a message queue to reduce memory consumption associated in an application session;

collecting a portion of one or more state elements in a state queue that are associated with the one or more message elements based on an association between the portion of the one or more state elements and the one or more message elements, wherein the one or more state elements are queued in the state queue to reduce memory consumption that is associated with the application session; and

updating the portion of the one or more state elements to advance a state of one or more protocols based on the one or more message elements that are associated with the portion of the one or more state elements, wherein the one or more application responses are communicated to a client.

16 . The processor readable non-transitory storage media of claim 15 , wherein the execution of the instructions causes performance of other actions, further comprising:

obtaining the one or more state elements based on one or more application requests from the client, wherein the one or more state elements each include information associated with the one or more application requests or an application server that is a target of the one or more application requests.

17 . The processor readable non-transitory storage media of claim 15 , wherein the advancement of the state of the one or more protocols further comprises:

employing one or more protocol maps to validate the one or more protocols based one or more of a rule, an instruction, or a state map associated with one or more security policies.

18 . The processor readable non-transitory storage media of claim 15 , wherein the update further comprises removal of the portion of the one or more state elements from the state queue and removal of the one or more message elements from the message queue.

19 . The processor readable non-transitory storage media of claim 15 , wherein the execution of the instructions causes performance of other actions, further comprising:

validating a sequence of the one or more application requests and another sequence of the one or more application responses that conform to a protocol;

validating content of the one or more application requests and other content of the one or more application responses conforms to the protocol; and

employing a failure to validate the one or more application requests or another failure to validate the one or more application responses to terminate an application session.

20 . The processor readable non-transitory storage media of claim 15 , wherein the collection of the portion of the one or more state elements in the state queue, further comprises:

obtaining one or more features of a protocol that associates an application response with an application request, wherein the one or more features include one or more of a sequence number, a timestamp, the client identity, or a network address; and

collecting the association between the portion of the one or more state elements and the one or more message elements based on the one or more features of the protocol.

Assignments (1)

Continuity (3)

References Cited (400)