Back to results
US 2013/0097656 A1Published application
Methods and systems for providing trusted signaling of domain-specific security policies
OwnerJohn Kennedyinventor
Life of this patent
Estimating the term…
Abstract
Methods and systems for providing trusted signaling of domain-specific security policies. One method includes intercepting a connection request to a remote server from a client device on a domain and returning a security certificate with policy information for regulating the communications with the target server.
Claims16
A method for providing trusted signaling of domain-specific policies comprising:
- storing a replacement certificate at a proxy server on a local domain;
- intercepting by the proxy server a first outbound connection request received from a local application executing on a client computer on the local domain, wherein the request is to connect to a network-based application server outside the local domain;
- initiating a second outbound connection request to the network-based application server;
- facilitating the establishment of a first connection between the proxy server and the network-based application server in response to the second outbound connection request and using a target certificate for verifying the identity of the network-based application server;
- facilitating the establishment of a second connection between the proxy server and the client;
- and
- transmitting the replacement certificate to the client by the proxy server in response to the first outbound connection request;
- wherein the replacement certificate stores a policy for regulating the use of one or more applications being accessed at the network-based application server.
5 more elements
A proxy server on a local domain for providing trusted signaling of domain-specific policies comprising
- a computer storage medium for storing a replacement certificate, which stores a policy for regulating the use of one or more applications being accessed at a network-based application server;
- and
- a network interface for
- intercepting by the proxy server a first outbound connection request received from a local application executing on a client computer on the local domain, wherein the request is to connect to a network-based application server outside the local domain,
- initiating a second outbound connection request to the network-based application server,
- facilitating the establishment of a first connection between the proxy server and the network-based application server in response to the second outbound connection request and using a target certificate for verifying the identity of the network-based application server,
- facilitating the establishment of a second connection between the proxy server and the client, and
- transmitting the replacement certificate to the client by the proxy server in response to the first outbound connection request.
5 more elements
Dependencies are inferred from the claim text.