IP Library Granted Patent US 9,154,485
Granted Patent B1
US 9,154,485 · App. 13/837,494 · Granted Oct 6, 2015

Authentication revalidation

Inventors: John R. Fallows (Palo Alto, CA); Steven R. Atkinson (Morgan Hill, CA)
Assignee: Kaazing Corporation
H04L63/08G06F21/31H04L63/108H04L63/10
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,154,485
App. No.
13/837,494
Granted
Oct 6, 2015
Kind
B1
Abstract

A WebSocket connection is established. The WebSocket connection was established with a requester of the connection. The authentication of the requester is configured to expire. A request to revalidate the authentication is provided. An update of the authentication is received. The update of the authentication is received without disconnecting the WebSocket connection.

Claims (33)

1. A system, comprising:

a communication interface configured to:

establish a WebSocket connection with a requester of the connection, wherein an authentication of the requester is configured to expire; and a processor coupled with the communication interface and configured to:

provide a request to provide an update of the authentication to revalidate the authentication, wherein the request is included in a WebSocket frame, the request includes a control byte sequence that has been specifically selected for an authentication revalidation functionality and the control byte sequence indicates that the WebSocket frame is to be interpreted as a control message controlling the authentication revalidation functionality extending a WebSocket protocol of the WebSocket connection rather than a normal message of the WebSocket protocol of the WebSocket connection; and

receive the update of the authentication without disconnecting the WebSocket connection;

wherein a same device establishes the WebSocket connection with the requestor of the WebSocket connection, provides the request to provide the update of the authentication to revalidate the authentication, and receives the update of the authentication.

2. The system of claim 1 , wherein establishing the WebSocket connection includes initializing an extension of a WebSocket protocol of the WebSocket connection at least in part by selecting the control byte sequence specifically for the authentication revalidation functionality and providing the control byte sequence to the requestor of the WebSocket connection.

3. The system of claim 1 , wherein the control byte sequence is included in a payload portion of the WebSocket frame and in the event, content to be included a payload portion of a second WebSocket frame to be sent happens to include the control byte sequence but the authentication revalidation functionality is not desired for the second Websocket frame, an indication to temporarily not interpret the control byte sequence as requesting the authentication revalidation functionality is included the second WebSocket frame.

4. The system of claim 1 , wherein the authentication of the requester is configured to expire at a preconfigured time.

5. The system of claim 1 , wherein the authentication of the requester is configured to expire at a time associated with when the authentication is dynamically revoked.

6. The system of claim 1 , wherein the authentication authorizes the requestor to access a service until the authentication expires.

7. The system of claim 1 , wherein the request is provided at a predetermined amount of time before an expiration time when the authentication is configured to expire.

8. The system of claim 1 , wherein the request is provided via the WebSocket connection.

9. The system of claim 1 , wherein the request identifies a location address where the update should be sent.

10. The system of claim 1 , wherein the update includes an authorization credential extending validity of the authorization.

11. The system of claim 1 , wherein the update is provided via the WebSocket connection.

12. The system of claim 1 , wherein the update is provided via a communication connection separate from the established WebSocket connection.

13. The system of claim 1 , wherein the update is received via an HTTP connection.

14. The system of claim 13 , wherein the update includes a cookie provided via the HTTP connection.

15. The system of claim 1 , wherein the update includes an HTTP “GET” request.

16. The system of claim 1 , wherein the processor is further configured to determine validity of the received update.

17. The system of claim 1 , wherein the communication interface is further configured to provide a response indicating whether the authentication has been successfully revalidated using the update.

18. The system of claim 17 , wherein the response includes an HTTP communication status code.

19. A method, comprising:

using a communication interface to establish a WebSocket connection with a requester of the connection, wherein an authentication of the requester is configured to expire;

providing a request to provide an update of the authentication to revalidate the authentication, wherein the request is included in a WebSocket frame, the request includes a control byte sequence that has been specifically selected for an authentication revalidation functionality and the control byte sequence indicates that the WebSocket frame is to be interpreted as a control message controlling the authentication revalidation functionality extending a WebSocket protocol of the WebSocket connection rather than a normal message of the WebSocket protocol of the WebSocket connection; and

receiving the update of the authentication without disconnecting the WebSocket connection;

wherein a same device establishes the WebSocket connection with the requestor of the WebSocket connection, provides the request to provide the update of the authentication to revalidate the authentication, and receives the update of the authentication.

20. A computer program product, the computer program product being embodied in a tangible computer readable non-transitory storage medium and comprising computer instructions for:

establishing a WebSocket connection with a requester of the connection, wherein an authentication of the requester is configured to expire;

providing a request to provide an update of the authentication to revalidate the authentication, wherein the request is included in a WebSocket frame, the request includes a control byte sequence that has been specifically selected for an authentication revalidation functionality and the control byte sequence indicates that the WebSocket frame is to be interpreted as a control message controlling the authentication revalidation functionality extending a WebSocket protocol of the WebSocket connection rather than a normal message of the WebSocket protocol of the WebSocket connection; and

receiving the update of the authentication without disconnecting the WebSocket connection;

wherein a same device establishes the WebSocket connection with the requestor of the WebSocket connection, provides the request to provide the update of the authentication to revalidate the authentication, and receives the update of the authentication.

Assignments (4)
SECURITY INTEREST Recorded Mar 7, 2017
From: KAAZING CORPORATION
To: COMERICA BANK
Reel/Frame 041485/0708 →
SECURITY INTEREST Recorded Jun 15, 2016
From: KAAZING CORPORATION
To: US VC PARTNERS, L.P.
Reel/Frame 038915/0452 →
SECURITY INTEREST Recorded Jun 3, 2016
From: KAAZING CORPORATION
To: SQN VENTURE INCOME FUND, LP
Reel/Frame 038799/0524 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 28, 2013
From: FALLOWS, JOHN R.; ATKINSON, STEVEN R.
To: KAAZING CORPORATION
Reel/Frame 030713/0854 →