Cloudflare, Inc.

Nice Systems Technologies UK Limited

Andrew Galloni

John Graham-Cumming

Terin Stock

David Alexander Kitchen

Ben Cartwright-Cox

Sam Howson

Julien Desgats

Albertus Strasheim

Jason Derek McFall

Gareth O'Loughlin

Fiann James Curry-Towneley-O'Hagan

Steven Heron

Maciej Buczkowski

Liam Philip Clancy

Benedikt Christoph Wolters

Panagiotis Belesis

Benjamin Thomas Pickering

Alan Paul Rolleston Phillips

Alex Cruz Farmer

Paul David Mellor

Neil Samuel Ferguson

Alfredo Ramos-Alvarez

A browser receives a web page that includes a script that is configured to control subsequent requests of the browser for at least the web page and caches a first portion of the web page that includes reference(s) to other web resource(s). A subsequent request for the web page is dispatched to the script which returns the cached first portion of the web page to the browser and a request for the full web page is made. Request(s) are also transmitted for the web resource(s) referenced in the first portion of the web page without waiting for the full web page to be received. When the full web page is received, if the first portion of the page matches the corresponding portion of the full page, that corresponding portion is removed from the full page and the remaining page is returned to the browser.

Method and apparatus for reducing loading time of web pages

A process for prioritizing content responses executed by a first server in a distributed cloud platform. The first server including processor, and a non-transitory machine-readable storage medium that provides instructions that, when executed by the processor, causes the first server to perform operations including to receive a request for a plurality of content items from a client device, where the proxy server is in a distributed cloud computing platform, receive a first content item of the plurality of content items from an origin server or a cache, determine a priority scheme for ordering the plurality of content items, where the priority scheme is specific to the plurality of content items and is derived from analysis of a first content item from the plurality of content items, and send a response including the plurality of content items to the client device in an order according to the determined priority scheme.

Site and page specific resource prioritization

A compute server receives a request from a client device, where the plurality of compute servers are part of a distributed cloud computing platform, and wherein the request is a request for a network resource. The compute server executes, by a single process at the first compute server, a response inspector, wherein the response inspector is run in a one of a plurality of isolated execution environments. The compute server receives at least one content item from an origin server in response to the request for the network resource. The compute server detects a protected content marker in the at least one content item that indicates a data breach, and logs information about the request in an inspection log.

Transparent inspection of responses from origin servers to identify protected data

A method and an apparatus of limiting a rate at which traffic is received at an origin server are described. A first request for a resource at an origin server is received at a proxy server from a client device. A first response that includes a refresh instruction, a first refresh time, and a first cryptographic token that is not valid until a first predetermined time is reached is transmitted to the client device. The refresh instruction is to cause the client device to request the resource after the first refresh time has elapsed. As a result of the refresh instruction a second request for the resource is received from the client device. The second request includes the first cryptographic token. Responsive to determining that the first cryptographic token is valid, fulfilling the request.

Method and apparatus for limiting traffic rate to an origin server

A method and an apparatus of limiting a rate at which traffic is received at an origin server are described. A first request for a resource at an origin server is received at a proxy server from a client device. A first response that includes a refresh instruction, a first refresh time, and a first cryptographic token that is not valid until a first predetermined time is reached is transmitted to the client device. The refresh instruction is to cause the client device to request the resource after the first refresh time has elapsed. A value of a first counter is incremented. As a result of the refresh instruction a second request for the resource is received from the client device. The second request includes the first cryptographic token. Responsive to determining that the first cryptographic token is valid, fulfilling the request.

A proxy server receives a request for a web page from a client device. In response to determining that a portion of the web page is available in cache, the proxy server retrieves that portion and transmits it to the client device. The portion of the web page is not the entire web page and is a prediction of the portion of the page that will remain static if the page is reloaded or requested by a different client device. The proxy server transmits a request to an origin server for the full web page. In response to receiving the full web page from the origin server, the proxy server modifies the full web page to remove the portion that was already transmitted to the client device, and transmits the modified web page to the client device.

Methods of storing data records produced from monitoring interactions between external agents and a system are described. The method defines specific interactions that occur between the external agents and the system as events of interest. A chain of interactions occurring during respective interaction sessions between a respective external agent and the system are monitored and events of interest occurring in the chain are determined. Data records from the monitored chain are produced, the respective data record including data identifying determined events of interest and data associated therewith. A profile identity, representative of the external agent, is assigned to each data record produced during an interaction session. Data records of individual events of interest are stored in a way ordered according to the type of event of interest and data records of events of interest occurring during an interaction session are stored in a way ordered according to assigned profile identity.

Method of storing and analysing data produced from interactions between external agents and a system

Growing community of inventors

London, United Kingdom

Andrew Galloni