Sun Microsystems, Inc.

Tarantella, Inc.

Andrew Shaw

Karl Richard Burgess

Michael Thomas McEwen

Systems and methods are described for authentication of tunneled connections. A method includes establishing a first connection (C) from an inner agent to an outer agent including making a first TCP connection from the inner agent to the outer agent, negotiating a first SSL/TLS session (SSLSession) between the inner agent and the outer agent over the first TCP connection and applying the second SSL/TLS session (SSLSession) between the inner agent and the outer agent over the first TCP connection; establishing a second connection (C) from a client and the outer agent including making a second TCP connection from the client to the outer agent, negotiating a second SSL/TLS session (SSLSession) between the client and the outer agent over the second TCP connection and applying the second SSL/TLS session (SSLSession) between the client and the outer agent over the second TCP connection; and then negotiating a third SSL/TLS session (SSLSession) between the client and the inner agent via both the first SSL/TLS session (SSLSession) and the second SSL/TLS session (SSLSession) and applying the third SSL/TLS session (SSLSession) between the client and the inner agent layered over both the first SSL/TLS session (SSLSession) and the second SSL/TLS session (SSLSession), wherein negotiating the second SSL/TLS session (SSLSession) includes verifying at the outer agent that the client possesses a certificate signed with a certificate associated with the inner agent.

Authentication of tunneled connections

Systems and methods are described for a secure tunnel. A method includes establishing a first connection (C) from an inner agent to an outer agent including making a first TCP connection from the inner agent to the outer agent, negotiating a first SSL/TLS session (SSLSession) between the inner agent and the outer agent over the first TCP connection and applying the first SSL/TLS session (SSLSession) between the inner agent and the outer agent over the first TCP connection; establishing a second connection (C) from a client to the outer agent including making a second TCP connection from the client to the outer agent, negotiating a second SSL/TLS session (SSLSession) between the client and the outer agent over the second TCP connection and applying the second SSL/TLS session (SSLSession) between the client and the outer agent over the second TCP connection; and then negotiating a third SSL/TLS session (SSLSession) between the client and the inner agent via both the first SSL/TLS session (SSLSession) and the second SSL/TLS session (SSLSession) and applying the third SSL/TLS session (SSLSession) between the client and the inner agent layered over both the first SSL/TLS session (SSLSession) and the second SSL/TLS session (SSLSession).

Three component secure tunnel

In a client-server architecture, data transmission performance enhancing features are described, including a color quality approach and a packet shaping approach. A method includes a color quality data transformation including: selecting a quality level to apply to a set of image data having a number of significant color bits defining an initial number of possible colors; applying a pixel mask to the set of image data, the initial number of possible colors reduced to a smaller number of possible colors as a function of the quality level; loading the set of image data into an output buffer; and sending the set of image data from the output buffer to a display engine. Another method includes a packet shaping data structure transformation including if i) a total network time, defined by a total time of requests in a pending request queue, is equal to or greater than a current round trip time, defined by twice a current latency, and ii) a total request time, defined by a sum of a total time of requests in the pending request queue and a total time of requests in a transmitted request queue, minus the total network time is equal to or less than half a preset limit, then forming a shaped packet by associating a first data portion with a second data portion and a header.

Color quality and packet shaping features for displaying an application on various client devices

In a client-server architecture, data transmission performance enhancing features and mechanisms are described, including a color quality approach and a packet shaping approach. A method includes a color quality data transformation including: selecting a quality level to apply to a set of image data having a number of significant color bits defining an initial number of possible colors; applying a pixel mask to the set of image data, the initial number of possible colors reduced to a smaller number of possible colors as a function of the quality level; loading the set of image data into an output buffer; and sending the set of image data from the output buffer to a display engine. Another method includes a packet shaping data structure transformation including if i) a total network time, defined by a total time of requests in a pending request queue, is equal to or greater than a current round trip time, defined by twice a current latency, and ii) a total request time, defined by a sum of a total time of requests in the pending request queue and a total time of requests in a transmitted request queue, minus the total network time is equal to or less than half a preset limit, then forming a shaped packet by associating a first data portion with a second data portion and a header.

Growing community of inventors

Liversedge, United Kingdom

Andrew Shaw