IP Library › Granted Patent US 12,155,635
Granted Patent B1
US 12,155,635 · App. 17/517,747 · Granted Nov 26, 2024

Systems and methods for HTTPS over proxy

Inventor: Tao Wan (Ottawa, CA)
Assignee: Cable Television Laboratories, Inc.
H04L63/0281H04L63/08H04L63/166H04L67/02H04L67/56
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,155,635
App. No.
17/517,747
Granted
Nov 26, 2024
Kind
B1
Abstract

A computer device is provided for HTTPS over Proxy (HoP). The computer device includes a transceiver configured for operable communication with at least one client device of the communication network via a secure connection with a server device, and a processor including a memory configured to store computer-executable instructions. When executed by the processor, the instructions cause the computer device to receive, from a client device via the communication network, a communication request message including a desired domain, determine a communication authentication token associated with the desired domain, transmit, to the client device, the communication authentication token associated with the desired domain, wherein the client device is configured to validate the communication authentication token, and continue communication with the client device if the client device validates the communication authentication token.

Claims (44)

1. A computer device for HTTPS over Proxy (HoP), comprising:

a transceiver configured for operable communication with at least one client device of a communication network and via secure connection with a server device; and

a processor including a memory configured to store computer-executable instructions, which, when executed by the processor, cause the computer device to:

store a plurality of communication authentication tokens each associated with a domain of a plurality of domains, wherein each communication authentication token of the plurality of authentication tokens was issued by the communication corresponding domain of the plurality of domains to assert an identity of the corresponding domain;

receive, from a client device via the communication network, a communication request message including a desired domain associated with the server device;

determine a communication authentication token of the plurality of communication authentication tokens associated with the desired domain of the plurality of domains;

transmit, to the client device, the communication authentication token associated with the desired domain, wherein the client device is configured to validate the communication authentication token; and

continue communication with the client device if the client device validates the communication authentication token.

2. The computer device of claim 1 , wherein the computer device is further programmed to:

determine the communication authentication token of the plurality of communication authentication tokens that originated from the desired domain of the plurality of domains.

3. The computer device of claim 2 , wherein the plurality of communication authentication tokens are HoP tokens including authentication information for the corresponding domain.

4. The computer device of claim 2 , wherein the computer device is a proxy device for the plurality of domains.

5. The computer device of claim 1 , wherein the communication request message is a TLS Hello exchange message.

6. The computer device of claim 1 , wherein the communication request message is an HTTP request message.

7. The computer device of claim 1 , wherein the computer device is further programmed to:

receive, from the server device, a client authentication request;

transmit, to the client device, the client authentication request;

receive, from the client device, a client authentication token; and

transmit, to the server device, the client authentication token, wherein the server device is configured to validate the client authentication token.

8. The computer device of claim 1 , wherein the computer device is further programmed to establish a mutual TLS connection between the client device and the computer device.

9. The computer device of claim 1 , wherein the computer device is further programmed to establish a mutual TLS connection between the computer device and the server device.

10. The computer device of claim 1 , wherein the computer device is a service communication proxy in a 5G network.

11. A method for HTTPS over Proxy (HoP) implemented by a computer device, comprising:

a transceiver configured for operable communication with at least one client device of a communication network and via secure connection with a server device; and

a processor including a memory configured to store computer-executable instructions, the method comprising:

storing a plurality of communication authentication tokens each associated with a domain of a plurality of domains, wherein each communication authentication token of the plurality of communication authentication tokens was issued by the corresponding domain of the plurality of domains to assert an identity of the corresponding domain;

receiving, from a client device via the communication network, a communication request message including a desired domain associated with the server device;

determining a communication authentication token of the plurality of communication authentication tokens associated with the desired domain of the plurality of domains;

transmitting, to the client device, the communication authentication token associated with the desired domain, wherein the client device is configured to validate the communication authentication token; and

continuing communication with the client device if the client device validates the communication authentication token.

12. The method of claim 11 , further comprising:

determining the communication authentication token of the plurality of communication authentication tokens that originated from the desired domain of the plurality of domains.

13. The method of claim 12 , wherein the plurality of communication authentication tokens are HoP tokens including authentication information for the corresponding domain.

14. The method of claim 12 , wherein the computer device is a proxy device for the plurality of domains.

15. The method of claim 11 , wherein the communication request message is a TLS Hello exchange message.

16. The method of claim 11 , wherein the communication request message is an HTTP request message.

17. The method of claim 11 , further comprising:

receiving, from the server device via the communication network, a client authentication request;

transmitting, to the client device, the client authentication request;

receiving, from the client device, a client authentication token; and

transmitting, to the server device, the client authentication token, wherein the server device is configured to validate the client authentication token.

18. The method of claim 11 , further comprising establishing a mutual TLS connection between the client device and the computer device.

19. The method of claim 11 , further comprising establishing a mutual TLS connection between the computer device and the server device.

20. The method of claim 11 , wherein the computer device is a service communication proxy in a 5G network.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 16, 2021
From: WAN, TAO
To: CABLE TELEVISION LABORATORIES, INC.
Reel/Frame 058123/0986 →
Continuity (1)
Provisional Application 63109252 · Nov 3, 2020
Cited By (1)
US 12,470,401