Kaazing Corporation

Frank J Salim

John R Fallows

David Brennan Gaunce

Siddalingaiah Eraiah

A request to establish a bi-directional full-duplex network connection is received. The request conforms to a half-duplex network connection protocol and the half-duplex connection protocol is a HTTP based protocol. The request is processed to determine a decision on whether to allow the bi-directional full-duplex connection. In the event the decision is to allow the bi-directional full-duplex connection, the bi-directional full-duplex network connection is established using the half-duplex network connection protocol. The bi-directional full-duplex connection utilizes a WebSocket communication protocol. Establishing the bi-directional full-duplex connection utilizes a plurality of half duplex connections. A confirmation that the bi-directional full-duplex network connection has been established is provided.

Enterprise client-server system and methods of providing web application support through distributed emulation of websocket communications

A system enabling service communications in distributed Web applications between servers otherwise inaccessible due to cross-origin security restrictions in pre-HTML5 compliant Web-browser clients. A Web-browser client executes a client-side Web application received from a source origin server having a defined source origin and requests connections to request identified Web-application services. Execution of an emulation client library establishes a bidirectional capable HTTP-based communications connection between the Web-browser client and a gateway server, having a target origin outside the scope of the source origin, providing access to the request identified Web-application service. The bidirectional capable HTTP-based communications connection includes a cross-origin communications bridge providing a secure communications path between the source and target origins. The gateway server can establish an HTML5 compliant connection to a target defined service, provided by a target server, having a predefined relation to the request identified Web-application service.

A gateway server interoperates with client and remote server systems to provide stateless security management for a distributed Web application. A Web client application on the client system initiates a WebSocket connection directed to a remote Web service by performing an authentication challenge directed to a user of the Web-browser client where a secure token is not present in a local store instance corresponding to the client application. The authentication challenge obtains the user credentials and then exchanges the user credentials with the gateway server for a secure token. The secure token is then sent in a protocol specific connect message to the gateway server. The gateway server, in response to receipt of the connect message, initiates a WebSocket connection directed to the remote Web service by inspecting the connect message to recover the secure token, evaluating the secure token to obtain user credentials, injecting the secure token with the user credentials, and sending the connect message to the remote Web service.

Growing community of inventors

Mountain View, CA, United States of America

Frank J Salim