US 11,153,226 B2Granted

Incorporating web applications into web pages at the network level

AssigneeCloudflare, Inc.

InventorsMatthew Browning Prince, Matthieu Philippe François Tourne, Christopher Stephen Joel, John Brinton Roberts, Michael Jonas Sofaer, Jason Thomas Walte Benterou

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

A proxy server automatically includes web applications in web pages at the network level. The proxy server receives, from a client device, a request for a network resource at a domain and is hosted at an origin server. The proxy server retrieves the requested network resource. The retrieved network resource does not include the web applications. The proxy server determines that the web applications are to be installed within the network resource. The proxy server automatically modifies the retrieved network resource to include the web applications. The proxy server transmits a response to the client device that includes the modified network resource. The network resource may remain unchanged at the origin server.

Claims18

Dependent claims

A method for configuring a plurality of web applications to be installed on one or more web pages of a website publisher at a network level, the method comprising:

receiving, through an interface, a selection of the plurality of web applications to be installed on the one or more web pages of the website publisher at the network level;
communicating, to a proxy server, a first set of one or more web application installation rules that indicate that the plurality of web applications are to be installed within the one or more web pages as the one or more web pages are passed through the proxy server and delivered to requesting client computing devices;
responsive to learning that a first one of the plurality of web applications has a vulnerability, communicating, to the proxy server, a second set of one or more web application installation rules that causes the first one of the plurality of web applications not to be installed within the one or more web pages while other ones of the plurality of web applications continue to be installed within the one or more web pages as the one or more web pages are passed through the proxy server and delivered to requesting client computing devices, wherein the learning that the first one of the plurality of web applications has a vulnerability results from a review of the first one of the plurality of web applications;
and
responsive to learning that a second one of the plurality of web applications has been updated, performing the following:
determining that the proxy server is currently installing the second one of the plurality of web applications in web pages, and
responsive to determining that the proxy server is currently installing the second one of the plurality of web applications in web pages, communicating, to the proxy server, the updated web application.

4 more elements

A non-transitory computer-readable storage medium that provides instructions that, when executed by a processor cause said processor to perform operations comprising:

receiving, through an interface, a selection of a plurality of web applications to be installed on one or more web pages of a website publisher at a network level;
communicating, to a proxy server, a first set of one or more web application installation rules that indicate that the plurality of web applications are to be installed within the one or more web pages as the one or more web pages are passed through the proxy server and delivered to requesting client computing devices;
responsive to learning that a first one of the plurality of web applications has a vulnerability, communicating, to the proxy server, a second set of one or more web application installation rules that causes the first one of the plurality of web applications not to be installed within the one or more web pages while other ones of the plurality of web applications continue to be installed within the one or more web pages as the one or more web pages are passed through the proxy server and delivered to requesting client computing devices, wherein the learning that the first one of the plurality of web applications has a vulnerability results from a review of the first one of the plurality of web applications;
and
responsive to learning that a second one of the plurality of web applications has been updated, performing the following:
determining that the proxy server is currently installing the second one of the plurality of web applications in web pages, and
responsive to determining that the proxy server is currently installing the second one of the plurality of web applications in web pages, communicating, to the proxy server, the updated web application.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/272,289Filed 11 Feb 2019 · continuation
Priority: 17 May 2012
Published: US 2019/0253365 A115 Aug 2019
Granted: 19 Oct 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

H04L 67/34
Network arrangements or protocols for supporting network services or applications: involving the movement of software or configuration parameters
G06F 8/61
Software deployment: installation
H04L 47/70
Traffic control in data switching networks: admission control; Resource allocation
H04L 67/02
Protocols: based on web technology, e.g. hypertext transfer protocol [HTTP]

Family

Application13/474,529Parent of this continuation · filed 17 May 2012
Application14/503,297Parent of this continuation · filed 30 Sep 2014
US 8,849,904 B2Parent of this continuation · filed 30 Sep 2014
US 2019/0253365 A1Pre-grant publication · published 15 Aug 2019
US 10,205,674 B2Parent of this continuation
US 2013/0311593 A1Published application
US 2015/0019679 A1Published application
US 11,153,226 B2This patent

From the US filing history. Foreign family members aren’t listed.