US 11,451,636 B2Granted

Systems and methods for monitoring cross-domain applications in web environments

AssigneeNasdaq, Inc.

InventorVladimir Mitevski

Life of this patent

Estimating the term…

Loading patent…

Abstract

The described technology provides a capability for web applications from different domains to interact within one application environment. For example, an enterprise web application executing on a client terminal is provided the capability to monitor a second web application from a third party vendor even when the second web application is independently executing within an iframe or the like within the enterprise web applications container or context. In some example embodiments, the communication is enabled by a composite cookie or key that incorporates portions of an enterprise web application cookie or key and also portions of a vendor web application cookie or key.

Claims21

Dependent claims

A system comprising:

a server device comprising a first memory storing first instructions which, when executed by a first processor of the server device, runs a server-side process of a web application operating in an enterprise domain;
and
a client terminal comprising a second memory storing second instructions which, when executed by a second processor of the client terminal, performs operations comprising:
running a first client application operating in the enterprise domain and providing a first client-side portion of the web application to receive data from the server;
running a second client application operating in a vendor domain different from the enterprise domain, the second client application comprising a second client-side portion of the web application;
establishing, by the second client application, a user session with an external server in the vendor domain;
receiving, by the second client application, a vendor session identifier which uniquely identifies the user session at the external server;
storing, by the second client application, a composite cookie in the enterprise domain, the composite cookie comprising the received vendor session identifier;
retrieving, by the first client application, the vendor session identifier from the stored composite cookie;
and
transmitting, by the first client application to the server-side portion of the web application, a request to receive data from the user session, wherein the request includes the retrieved vendor session identifier,
wherein the server device is configured to, in response to receiving the request from the client terminal:
obtain the vendor session identifier from either a message from the request or from the composite cookie;
and
transmit to the external server a message including the vendor session identifier obtained from either the request or from the composite cookie.

12 more elements

A client terminal comprising:

a memory;
and
a processor configured to perform operations comprising:
running a first client application operating in a first domain and providing a first client-side portion of a web application to receive data from a server in a first domain;
running a second client application operating in a second domain different from the first domain and providing a second client-side portion of the web application;
establishing, by the second client application, a user session with an external server in the second domain;
receiving, by the second client application, an external session identifier which uniquely identifies the user session at the external server;
storing, by the second client application, a composite cookie in the first domain, the composite cookie comprising the external session identifier;
retrieving, by the first client application, the stored composite cookie;
and
transmitting, by the first client application to the server-side portion of the web application, a request to receive data from the user session, wherein the request includes the external session identifier obtained from the retrieved composite cookie,
wherein the external session identifier from the transmitted request is included in a request transmitted from the server device to the external server for a connection for the user session.

9 more elements

A method performed by a processor in a client computer terminal comprising:

running a first client application providing a first client-side portion of a web application to receive data from a server device in a first domain, wherein the first client application communicates with a server-side portion of the web application on the server device;
running a second client application providing a second client-side portion of the web application, wherein the second client application communicates with an external server device operating in a second domain different from the first domain;
establishing, by the second client application, a user session to receive data from the external server device;
receiving, by the second client application, an external session identifier which uniquely identifies the user session at the external server device;
storing, by the second client application, a composite cookie in the first domain, the composite cookie comprising the external session identifier;
retrieving, by the first client application, the external session identifier from the stored composite cookie;
and
transmitting, by the first client application to the server-side portion of the web application, a request to receive data from the user session, wherein the request includes the retrieved external session identifier,
wherein the server device includes the external session identifier in a request sent to the external server device.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/158,707Filed 26 Jan 2021 · continuation
Priority: 6 Jul 2016
Published: US 2021/0152645 A120 May 2021
Granted: 20 Sep 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

H04L 67/146
Session management: markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
H04L 63/1441
For detecting or protecting against malicious traffic: countermeasures against malicious traffic
H04L 67/02
Protocols: based on web technology, e.g. hypertext transfer protocol [HTTP]
H04L 67/141
Session management: setup of application sessions

Family

Application62/359,196Us provisional application · filed 6 Jul 2016
Application15/643,066Parent of this continuation · filed 6 Jul 2017
Application16/786,254Parent of this continuation · filed 10 Feb 2020
US 10,587,696 B2Parent of this continuation · filed 10 Mar 2020
US 2021/0152645 A1Pre-grant publication · published 20 May 2021
US 10,917,476 B2Parent of this continuation
US 2018/0013840 A1Published application
US 2020/0252466 A1Published application
US 11,451,636 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key