# US 2016/0366238 A1 · Network advertising system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2016/0366238 A1 - Document ID: US20160366238A1 - Status: Published application - Kind: A1 - Application number: 15/246,033 - Filed: 2016-08-24 - Published: 2016-12-15 - Earliest claimed: 2006-04-21 - Assignees: Fortinet, Inc. - Applicants: Fortinet, Inc - Inventors: Kunhua Lin; Michael Xie - Web page: https://patentgrep.com/patent/US20160366238A1 ## CPC - G06Q 30/0277: {Online advertisement} - G06Q 30/02: Marketing; Price estimation or determination; Fundraising - H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP] - H04L 67/303: Terminal profiles - H04L 67/561: Adding application-functional data or data for application control, e.g. adding metadata - H04L 2101/663: Transport layer addresses, e.g. aspects of transmission control protocol [TCP] or user datagram protocol [UDP] ports - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems and methods for transmitting content to a client via a communication network are provided. An insertion server, running within a firewall device associated with a private IP network, detects establishment of a transport communication protocol connection between a client associated with the network and a destination located external to the network by examining packets as they pass through the network and pass by the insertion server. A content request of an application protocol initiated by the client and directed to the destination is observed by the insertion server. The content request is negated by the insertion server by causing a canceling message of the transport communication protocol to be sent to the destination. Unsolicited content is caused to be selected for delivery to the client by the insertion server. The unsolicited content is sent by the insertion server to the client via the application protocol. ## Claims ### Claim 1 A method comprising: detecting, by an insertion server running within a firewall device associated with a private Internet Protocol (IP) network, establishment of a transport communication protocol connection between a client device associated with the private IP network and a destination device located external to the private IP network by examining packets, by the insertion server, as they pass through the private IP network and pass by the insertion server; observing, by the insertion server, a content request of an application protocol initiated by the client device and directed to the destination device; negating the content request, by the insertion server, by causing a canceling message of the transport communication protocol to be sent to the destination device; causing, by the insertion server, unsolicited content to be selected for delivery to the client device; and sending, by the insertion server, the selected unsolicited content to the client device via the application protocol. ### Claim 2 (depends on 1) The method of claim 1, wherein the transport communication protocol comprises Transmission Communication Protocol (TCP). ### Claim 3 (depends on 2) The method of claim 2, wherein the application protocol comprises Hypertext Transfer Protocol (HTTP). ### Claim 4 (depends on 3) The method of claim 3, wherein a domain identified within the content request is used in connection with selection of the selected unsolicited content for delivery to the client device. ### Claim 5 (depends on 4) The method of claim 4, wherein the selected unsolicited content comprises advertising content. ### Claim 6 (depends on 3) The method of claim 3, wherein a profile associated with the client device is used in connection with selection of the selected unsolicited content for delivery to the client device. ### Claim 7 (depends on 3) The method of claim 3, wherein a profile associated with the destination device is used in connection with selection of the selected unsolicited content for delivery to the client device. ### Claim 8 (depends on 3) The method of claim 3, wherein a Request-URI within the content request or a Host field within a header of the content request are used in connection with selection of the selected unsolicited content for delivery to the client device. ### Claim 9 (depends on 1) The method of claim 1, wherein the private IP network comprises an Internet Service Provider (ISP) network. ### Claim 10 (depends on 1) The method of claim 1, wherein the private IP network comprises a Local Area Network (LAN) or a Wide Area Network (WAN) of a corporation that provides on-premises Internet service to its customers. ### Claim 11 A non-transitory computer-readable storage medium embodying a set of instructions, which when executed by one or more processors of a firewall device of a private Internet Protocol (IP) network, cause the one or more processors to perform a method comprising: detecting establishment of a transport communication protocol connection between a client device associated with the private IP network and a destination device located external to the private IP network by examining packets as they pass through the private IP network; observing a content request of an application protocol initiated by the client device and directed to the destination device; negating the content request by causing a canceling message of the transport communication protocol to be sent to the destination device; causing unsolicited content to be selected for delivery to the client device; and sending the selected unsolicited content to the client device via the application protocol. ### Claim 12 (depends on 11) The non-transitory computer-readable storage medium of claim 11, wherein the transport communication protocol comprises Transmission Communication Protocol (TCP). ### Claim 13 (depends on 12) The non-transitory computer-readable storage medium of claim 12, wherein the application protocol comprises Hypertext Transfer Protocol (HTTP). ### Claim 14 (depends on 13) The non-transitory computer-readable storage medium of claim 13, wherein a domain identified within the content request is used in connection with selection of the selected unsolicited content for delivery to the client device. ### Claim 15 (depends on 14) The non-transitory computer-readable storage medium of claim 14, wherein the selected unsolicited content comprises advertising content. ### Claim 16 (depends on 13) The non-transitory computer-readable storage medium of claim 13, wherein a profile associated with the client device is used in connection with selection of the selected unsolicited content for delivery to the client device. ### Claim 17 (depends on 13) The non-transitory computer-readable storage medium of claim 13, wherein a profile associated with the destination device is used in connection with selection of the selected unsolicited content for delivery to the client device. ### Claim 18 (depends on 13) The non-transitory computer-readable storage medium of claim 13, wherein a Request-URI within the content request or a Host field within a header of the content request are used in connection with selection of the selected unsolicited content for delivery to the client device. ### Claim 19 (depends on 11) The non-transitory computer-readable storage medium of claim 11, wherein the private IP network comprises an Internet Service Provider (ISP) network. ### Claim 20 (depends on 11) The non-transitory computer-readable storage medium of claim 11, wherein the private IP network comprises a Local Area Network (LAN) or a Wide Area Network (WAN) of a corporation that provides on-premises Internet service to its customers.