Loading patent…
AssigneeCloudflare, Inc.
InventorJohn Graham-Cumming
Estimating the term…
A method and apparatus for delaying responses to requests in a server are described. Upon receipt, from a client device, of a first request for a resource at a first location, a response that includes a redirection instruction to a second location is transmitted. The response includes a first number of redirects to be completed prior to the first request being fulfilled. Upon receipt of a following request including a number of redirects, the remote server determines whether the number of redirects has been performed. When the number of redirects has not been performed the transmission of the redirection instruction is repeated with a number of redirects smaller than the first number of redirects until the receipt of a request indicating that the number of redirects has been performed. When the number of redirects has been performed the request is fulfilled.
A method in a server comprising:
A server comprising:
A non-transitory computer readable storage medium that provide instructions, which when executed by a processor of a server, cause said processor to perform operations comprising:
Dependencies are inferred from the claim text.
Drawings are temporarily unavailable. Open the PDF at USPTO
From the US filing history. Foreign family members aren’t listed.
Provisioning of proxy services: data redirection of data network streams
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: transmitting and receiving…
Routing software: routing instructions carried by the data packet, e.g. active networks
For providing a confidential data exchange among entities communicating through data packet networks: wherein the data content is protected, e.g.…
About 9 years 10 months of term left · ends 6 Sep 2036 (estimated)
Embodiments of the invention relate to the field of network services; and more specifically to protection against attacks on Internet resources.
Attacks on domains hosted on servers (e.g., DoS attacks, bruteforce login attacks (login to a website or to an web API)) are becoming more commonplace on the Internet and are difficult to detect and mitigate. Generally speaking, a DoS attack is launched by sending a large amount of packets to the domain with the intention to cause the domain to be unavailable or respond slowly to legitimate traffic. A brute-force login attack involves systematically transmitting requests to the domain for checking all possible keys or passwords until the correct one is found to access the resources hosted at the domain.
The invention may best be understood by referring to the following description and accompanying drawings that are used to illustrate embodiments of the invention. In the drawings:
FIG. 1A illustrates a block diagram of an exemplary architecture in which a server is operative to cause a delay in processing requests for internet resources received from client devices according to one embodiment.
FIG. 1B illustrates a block diagram of exemplary operations performed when a client device receives a temporary redirect request in accordance with some embodiments.
In the following description, numerous specific details are set forth. However, it is understood that embodiments of the invention may be practiced without these specific details. In other instances, well-known circuits, structures and techniques have not been shown in detail in order not to obscure the understanding of this description. Those of ordinary skill in the art, with the included descriptions, will be able to implement appropriate functionality without undue experimentation.
References in the specification to “one embodiment,” “an embodiment,” “an example embodiment,” etc., indicate that the embodiment described may include a particular feature, structure, or characteristic, but every embodiment may not necessarily include the particular feature, structure, or characteristic. Moreover, such phrases are not necessarily referring to the same embodiment. Further, when a particular feature, structure, or characteristic is described in connection with an embodiment, it is submitted that it is within the knowledge of one skilled in the art to effect such feature, structure, or characteristic in connection with other embodiments whether or not explicitly described. Throughout the following description similar reference numerals have been used to denote similar elements such as components, features of a system and/or operations performed in a system or element of the system, when applicable.
In the following description and claims, the terms “coupled” and “connected,” along with their derivatives, may be used. It should be understood that these terms are not intended as synonyms for each other. “Coupled” is used to indicate that two or more elements, which may or may not be in direct physical or electrical contact with each other, co-operate or interact with each other. “Connected” is used to indicate the establishment of communication between two or more elements that are coupled with each other.