# US 12,224,998 B2 · Selection of gateways for reconnection upon detection of reachability issues with backend resources > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,224,998 B2 - Document ID: US12224998B2 - Status: Granted - Kind: B2 - Application number: 17/488,663 - Filed: 2021-09-29 - Published: 2023-03-30 - Granted: 2025-02-11 - Earliest claimed: 2021-09-29 - Applicants: Citrix Systems, Inc. - Inventors: Vinay Kumar Kothiyal; Kevin Brock; Manoj Kumar Andol - Web page: https://patentgrep.com/patent/US12224998B2 ## CPC - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 67/01: Protocols - H04L 67/1008: based on parameters of servers, e.g. available memory or workload (monitoring of computer activity G06F11/30) - H04L 67/101: based on network conditions - H04L 67/30: Profiles - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Described embodiments provide system and methods for selecting a device via which a client is to connect with a server. A client may identify a server and a plurality of devices intermediary to the client and the server via one of which the client is authenticated to connect to access the server using a certificate. The client may detect that the server is unreachable from the client authenticated to use a first connection via a first device of the plurality of devices using the certificate. The client may select, responsive to detecting that the server is unreachable, a second device of the plurality of devices via which the client is to access the server. The client may authenticate, using the certificate used to authenticate with the first device, the client to establish a second connection with the second device to access the server. ## Claims ### Claim 1 A method of selecting a device via which a client is to connect to a server, comprising: identifying, by a client, a server and a plurality of devices intermediary to the client and the server via one of which the client is authenticated to connect to access the server using a certificate; detecting that the server is unreachable from the client authenticated to use a first connection via a first device of the plurality of devices using the certificate; selecting, by the device responsive to detecting that the server is unreachable, a second device of the plurality of devices via which the client is to access the server; and authenticating, by the client using the certificate used to authenticate with the first device, the client to establish a second connection with the second device to access the server. ### Claim 2 (depends on 1) The method of claim 1, further comprising receiving, by the client, for establishing the first connection with the first device, the certificate to authenticate the client to connect with a network for secure communications. ### Claim 3 (depends on 1) The method of claim 1, wherein identifying the server and the plurality of devices further comprises receiving a profile associated with the certificate for the client, the profile identifying a plurality of servers which the client is to access via the plurality of devices. ### Claim 4 (depends on 1) The method of claim 1, wherein detecting that the server is unreachable further comprises monitoring for at least one response from the server to a message transmitted by at least one of the client or the first device. ### Claim 5 (depends on 1) The method of claim 1, wherein detecting that the server is unreachable further comprises receiving, from the first device, an indication that the first device is unable to connect with the server. ### Claim 6 (depends on 1) The method of claim 1, wherein selecting the second device further comprises selecting the second device from the plurality of device in accordance with a profile, the profile identifying a sequence for selection of the plurality of devices. ### Claim 7 (depends on 1) The method of claim 1, wherein selecting the second device further comprises selecting the second device from the plurality of devices based at least on a network load of at least one of the plurality of devices. ### Claim 8 (depends on 1) The method of claim 1, wherein establishing the second connection further comprises re-using the certificate used to authenticate the client in the first connection to authenticate the client for the second connection, without providing a prompt to a user of the client to enter authentication credentials. ### Claim 9 (depends on 1) The method of claim 1, wherein establishing the second connection further comprises providing a prompt to a user of the client to enter authentication credentials for establishing the second connection. ### Claim 10 (depends on 1) The method of claim 1, further comprising: determining, by the client, that the server is unreachable from the client via none of the plurality of devices; and providing, by the client, an indication that the server is unreachable via none of the plurality of devices. ### Claim 11 A system for selecting a device via which a client is to connect to a server, comprising: a client having one or more processors coupled with memory, configured to: identify a server and a plurality of devices intermediary to the client and the server via one of which the client is authenticated to connect to access the server using a certificate; detect that the server is unreachable from the client authenticated to use a first connection via a first device of the plurality of devices using the certificate; select, responsive to detecting that the server is unreachable, a second device of the plurality of devices via which the client is to access the server; and authenticate, using the certificate used to authenticate with the first device, the client to establish a second connection with the second device to access the server. ### Claim 12 (depends on 11) The system of claim 11, wherein the client is further configured to receive a profile associated with the certificate for the client, the profile identifying a plurality of servers which the client is to access via the plurality of devices. ### Claim 13 (depends on 11) The system of claim 11, wherein the client is further configured to select the second device from the plurality of device in accordance with a profile, the profile identifying a sequence for selection of the plurality of devices. ### Claim 14 (depends on 11) The system of claim 11, wherein the client is further configured to select the second device from the plurality of devices based at least on a network load of at least one of the plurality of devices. ### Claim 15 (depends on 11) The system of claim 11, wherein the client is further configured to re-use the certificate used to authenticate the client in the first connection to authenticate the client for the second connection, without providing a prompt to a user of the client to enter authentication credentials. ### Claim 16 (depends on 11) The system of claim 11, wherein the client is further configured to provide a prompt to a user of the client to enter authentication credentials for establishing the second connection. ### Claim 17 (depends on 11) The system of claim 11, wherein the client is further configured to: determine that the server is unreachable from the client via none of the plurality of devices; and provide an indication that the server is unreachable via none of the plurality of devices. ### Claim 18 A non-transitory computer readable medium storing program instructions for causing one or more processors to: identify a server and a plurality of devices intermediary to the client and the server via one of which the client is authenticated to connect to access the server using a certificate; detect that the server is unreachable from the client authenticated to use a first connection via a first device of the plurality of devices using the certificate; select, responsive to detecting that the server is unreachable, a second device of the plurality of devices via which the client is to access the server; and authenticate, using the certificate used to authenticate with the first device, the client to establish a second connection with the second device to access the server. ### Claim 19 (depends on 18) The non-transitory computer readable medium of claim 18, wherein the program instructions further cause the one or more processors to receive a profile associated with the certificate for the client, the profile identifying a plurality of servers which the client is to access via the plurality of devices. ### Claim 20 (depends on 18) The non-transitory computer readable medium of claim 18, wherein the program instructions further cause the one or more processors to re-use the certificate used to authenticate the client in the first connection to authenticate the client for the second connection, without providing a prompt to a user of the client to enter authentication credentials.