Aspect Communications Corporation

Cisco Technology, Inc.

Citrix Systems, Inc.

Fineground Networks

Aspect Software, Incorporated

Janardhanan Jawahar

Venkatachari Dilip

Balas Natarajan Kausik

Konstantinos Psounis

Murali Vaidyanthan

Shaunak Mistry

Jiawen Su

Prashant Batra

Abbas Mahyari

Daren A Race

Methods and systems for implementing single sign on (SSO) and/or conditional access for client applications are described herein. The system may comprise an identity provider gateway, and the system may authenticate a user of the client application using the identity provider gateway. In some aspects, a secure communication tunnel may be established between the client application and the identity provider gateway, and the secure communication tunnel may use, for example, a client certificate. The identity provider gateway may grant or deny the client application access to one or more resources based on information associated with the client certificate.

Secure single sign on and conditional access for client applications

A user device obtains a set of one or more public key certificates for a server received from a directory service, and a current public key certificate of the server received from the server. The user device compares the current public key certificate received from the server with the set of public key certificates received from the directory service. If the current public key certificate of the server matches one of the public key certificates in the set of public key certificates for the server, the authenticity of the server is confirmed, and communications are permitted between the user device and the server. Communications between the user device and the server may be prevented unless the current public key certificate from the server matches a public key certificate in the set of public key certificates received from the directory service.

Certificate pinning using a directory service

An exemplary method performed by a proxy server located between a content server and a client browser for reducing effects of network latency therebetween comprises intercepting a request from the client browser for a resource at the content server, obtaining a response by the content server to the request, determining that the response would, if unmodified, require a plurality of communications between the content server and the client browser in the absence of the proxy server, modifying the response to reduce a network latency associated with the plurality of communications for accessing information located externally to the response, and transmitting the modified response to the client browser for use thereby.

Reducing the impact of network latency on application performance

Techniques are disclosed for constructing web (or other networked) documents as parameterized forms of other networked documents. For example, a document may be represented as a collection of changes to be applied to a first document which is incorporated by reference in the second document. Instead of delivering the entire document over a slower network connecting the content server to the content browser, the document is delivered as a collection of changes to previously delivered documents that are much closer to the user's content browser. In an exemplary embodiment of the invention, special software is not necessarily required at the end user for reconstructing the second document from the set of base documents and the set of modifications to the base documents.

Method and system for parameterized web documents

Methods and apparatus for enabling collaboration with web pages and other resources is described. A method includes the step of establishing a collaboration session between a first client and a second client. A requested resource is cached with the session host in response to a request having a first uniform resource locator (URL) issued by the first client, if the requested resource is a pre-determined type of resource. A second URL is provided to the second client. The second URL identifies the requested resource or the cached resource in accordance with whether the requested resource is cached. Apparatus for enabling collaboration includes a web server, a cache, and a filter. The web server provides a requested web page in response to a first client's request. The filter stores the requested web page in the cache, if the requested web page is a pre-determined type of web page.

Methods and apparatus for enabling dynamic resource collaboration

A system and method to create a base file for a document class is described. In one example embodiment, the system comprises a monitor to maintain a list of document components for a document class and an associated frequency of requests for the document components; a selector to select a plurality of document components with a highest frequency of request; and an aggregator to aggregate the plurality of document components to create a base file for the document class.

Method and system for class-based management of dynamic content in a networked environment

The present application discloses methods and systems for configuring and managing class-based condensation. One aspect thereof includes an automated mechanism to receive a user request for a document, retrieve the document from a content server, and compare the document to a base file of a document class. If a delta-difference between the requested document and the base file is less than a predetermined threshold value, create a condensed document by abbreviating redundancy in the requested document relative to the base file of the associated document class, associate the document with the document class, and transmit the condensed document to the user. The documents within a document class possess similar layouts.

Techniques are disclosed for anticipating a user's request for documents or other content from a server (typically via a URL), precomputing the anticipated content, and caching the precomputed information at a cache in proximity to the content server. The cache stores the response to the anticipated request, until the user requests the same content. The anticipated requests can be precomputed based on triggers reflecting users' historical access patterns.

Precomputation of web documents

Methods and systems for managing class-based condensation

A proxy implements automated version management of objects embedded in a document to eliminate/reduce network delays associated with requests to validate the objects in a browser (or other) cache. In an exemplary embodiment, the proxy obtains the document, assigns a unique URL to an embedded object, assigns an extended cache life to the object (via a header), updates the object's URL reference in the document, and sends the modified document to the user. When the user requests the object, the proxy obtains the object, attaches the new header, and transmits the object to the user. Because of its extended cache life, the object can subsequently be reused without time-consuming validation with the content server. In another embodiment, storage and validation of objects at the proxy (rather than at the cache) achieves reduced (and faster) validation while allowing refreshing prior to expiration.

Method and system for efficient and automated version management of embedded objects in web documents

Techniques are disclosed for constructing web (or other networked) documents as parameterized forms of other networked documents. For example, a document may be represented as a collection of changes to be applied to a first document which is incorporated by reference in the second document. Instead of delivering the entire document over a slower network connecting the content server to the content browser, the document is delivered as a collection of changes to previously delivered documents that are much closer to the user's content browser. In an exemplary embodiment of the invention, special software is not necessarily required at the end user for reconstructing the second document from the set of base documents and the set of modifications to the base documents. Instead, the second document may be encoded as a program in a scripting (or other form of computer) language that can be readily executed by common content browsers and which, upon execution, causes the second document to be displayed by the content browser.

Methods and apparatus for enabling collaboration with web pages and other resources is described. A method includes the step of establishing a collaboration session between a first client and a second client. A requested resource is cached with the session host in response to a request having a first uniform resource locator (URL) issued by the first client, if the requested resource is a pre-determined type of resource. A second URL is provided to the second client. The second URL identifies the requested resource or the cached resource in accordance with whether the requested resource is cached. Apparatus for enabling collaboration includes a web server, a cache, and a filter. The web server provides a requested web page in response to a first client's request. The filter stores the requested web page in the cache, if the requested web page is a pre-determined type of web page. A number of pre-determined characteristics for caching are described in various embodiments of the methods and apparatus. In one embodiment, the requested resource is cached if it is a dynamic web page. In one embodiment an expiration date of the requested resource determines whether the requested resource should be cached. In another embodiment, a filename associated with the requested resource determines whether the requested resource should be cached. In another embodiment, components of the request determine whether the requested web page should be cached.

We disclose techniques for varying the caching of content provided by a content server as a function of the server's load. When the server is lightly loaded, freshness of the content is maintained. As server load increases, caching time increases, to trade off freshness against transmission time. Similarly, when the server is heavily loaded, users might quickly be served cached content that is only slightly stale&mdash;as opposed to content that was fresh at the time of the request, but which becomes materially stale by the time the server completes serving the response. The server's load can be measured by its response time to a request, or otherwise. Optionally, the system can override the load-based caching by defining classes of requests that automatically trigger updating or refreshing (e.g., cache expiration) of related information in the cache.

Growing community of inventors

San Jose, CA, United States of America

Janardhanan Jawahar