Systems and methods for improving HTTPS security
AssigneeZscaler, Inc.
InventorAjit SINGH
Life of this patent
Estimating the term…
Abstract
A gateway in a cloud system, configured to implement HyperText Transfer Protocol (HTTP) HTTP Strict Transport (HSTS), includes a network interface, a data store, and a processor communicatively coupled to one another; and memory storing computer executable instructions, and in response to execution by the processor, the computer-executable instructions cause the processor to receive a domain request from a user device executing an HSTS application configured to detect the domain request from a browser or application executed on the user device; transmit a response to the user device with support of HTTP Security (HTTPS) by the domain; receive an updated domain request with information removed based on the HTTPS support of the domain; and redirect the user device to the domain.
Claims20
A gateway in a cloud system, configured to implement HyperText Transfer Protocol (HTTP) HTTP Strict Transport (HSTS), the gateway comprising:
- a network interface, a data store, and a processor communicatively coupled to one another;
- and
- memory storing computer executable instructions, and in response to execution by the processor, the computer-executable instructions cause the processor to
- receive a domain request from a user device executing an HSTS application configured to detect the domain request from a browser or application executed on the user device;
- transmit a response to the user device with support of HTTP Security (HTTPS) by the domain;
- receive an updated domain request with information removed based on the HTTPS support of the domain;
- and
- redirect the user device to the domain.
The gateway of claim 7, wherein, to determine the support of HTTPS by the domain, the gateway sends a request to the domain without sensitive information from the domain request and receives a redirect from the domain.
A method implemented in a gateway in a cloud system, configured to implement HyperText Transfer Protocol (HTTP) HTTP Strict Transport (HSTS), the method comprising:
- at the gateway, receiving a domain request from a user device executing an HSTS application configured to detect the domain request from a browser or application executed on the user device;
- transmitting a response to the user device with support of HTTP Security (HTTPS) by the domain;
- receiving an updated domain request with information removed based on the HTTPS support of the domain;
- and
- redirecting the user device to the domain.
A non-transitory computer-readable medium comprising instructions that are executed by a gateway in a cloud system, to implement HyperText Transfer Protocol (HTTP) HTTP Strict Transport (HSTS), the instructions, when executed, cause a processor in the gateway to perform the steps of:
- receiving a domain request from a user device executing an HSTS application configured to detect the domain request from a browser or application executed on the user device;
- transmitting a response to the user device with support of HTTP Security (HTTPS) by the domain;
- receiving an updated domain request with information removed based on the HTTPS support of the domain;
- and
- redirecting the user device to the domain.
Dependencies are inferred from the claim text.