# US 2021/0344770 A1 · Proxy computer system to provide direct links for bypass > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0344770 A1 - Document ID: US20210344770A1 - Status: Published application - Kind: A1 - Application number: 17/378,443 - Filed: 2021-07-16 - Published: 2021-11-04 - Earliest claimed: 2016-11-09 - Assignees: StratoKey Pty Ltd. - Applicants: StratoKey Pty Ltd. - Inventors: Anthony Scotney - Web page: https://patentgrep.com/patent/US20210344770A1 ## CPC - H04L 63/0281: {Proxies} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/1408: {by monitoring network traffic (monitoring network traffic per se H04L43/00)} - H04L 63/1433: {Vulnerability analysis} - H04L 67/53: using third party service providers - H04L 67/56: Provisioning of proxy services (store-and-forward switching systems in data switching networks H04L12/54) - H04L 67/60: Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources (admission control or resource allocation H04L47/70) - H04L 63/0272: {Virtual private networks} - H04L 63/166: {at the transport layer} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A proxy computer system retrieves content requested by a client computer from a third-party network service. The proxy computer system parses the content to identify a plurality of links including a first link to a first target resource and a second link to a second target resource. The proxy computer system generates modified content comprising (i) a direct link that includes an absolute domain address of the third-party network service that enables the client computer to bypass the proxy service and directly retrieve the first target resource from the third-party network service, and (ii) a proxy link that enables the client computer to retrieve the second target resource via the proxy service implemented by the network computer system. The proxy computer system provides the modified content to the client computer. ## Claims ### Claim 1 A network computer system implementing a proxy service, the network computer system comprising: one or more processors; a memory resource storing instructions that, when executed by the one or more processors, cause the network computer system to: retrieve content requested by a client computer from a third-party network service; parse the content to identify a plurality of links including a first link to a first target resource and a second link to a second target resource; determine to structure the first link using a direct link structure; determine to structure the second link using a proxy link structure; generate modified content comprising (i) a direct link that includes an absolute domain address of the third-party network service that enables the client computer to bypass the proxy service and directly retrieve the first target resource from the third-party network service, and (ii) a proxy link that enables the client computer to retrieve the second target resource via the proxy service implemented by the network computer system; and provide the modified content to the client computer. ### Claim 2 (depends on 1) The network computer system of claim 1, wherein determining to structure the first link using a direct link structure includes determining that the first target resource is of a predetermined resource type. ### Claim 3 (depends on 2) The network computer system of claim 2, wherein the predetermined resource type is a cascading style sheet (CCS) file. ### Claim 4 (depends on 2) The network computer system of claim 2, wherein the predetermined resource type is an image file. ### Claim 5 (depends on 2) The network computer system of claim 2, wherein the predetermined resource type is a script file. ### Claim 6 (depends on 1) The network computer system of claim 1, wherein the instructions, when executed by the one or more processors, cause the network computer system to probe corresponding target resources of the plurality of links to determine a handling of individual links of the plurality of links. ### Claim 7 (depends on 1) The network computer system of claim 1, wherein determining to structure the first link using a direct link structure is based on determining whether certain data fields or data items of the first target resource are sensitive. ### Claim 8 (depends on 1) The network computer system of claim 1, wherein determining to structure the second link using a proxy link structure is based on determining whether certain data fields or data items of the second target resource are sensitive. ### Claim 9 (depends on 1) The network computer system of claim 1, wherein the proxy link includes the second link in an original format provided by the third-party network service. ### Claim 10 (depends on 1) The network computer system of claim 1, wherein the instructions, when executed by the one or more processors, cause the network computer system to: determine a load on the proxy computer system at a plurality of times; and based on an increase in the load on the proxy computer system, increase the number of links of the plurality of links to structure using the direct link structure to increase a number of links handled by the third-party network service without involving the proxy computer system. ### Claim 11 A method for providing a proxy service for a third-party network service, the method being implemented by one or more processors of a network computer system and comprising: implementing a proxy service; retrieving content requested by a client computer from a third-party network service; parsing the content to identify a plurality of links including a first link to a first target resource and a second link to a second target resource; determining to structure the first link using a direct link structure; determining to structure the second link using a proxy link structure; generating modified content comprising (i) a direct link that includes an absolute domain address of the third-party network service that enables the client computer to bypass the proxy service and directly retrieve the first target resource from the third-party network service, and (ii) a proxy link that enables the client computer to retrieve the second target resource via the proxy service implemented by the network computer system; and providing the modified content to the client computer. ### Claim 12 (depends on 11) The method claim 11, wherein determining to structure the first link using a direct link structure includes determining that the first target resource is of a predetermined resource type. ### Claim 13 (depends on 12) The method of claim 12, wherein the predetermined resource type is a cascading style sheet (CCS) file, an image file, or a script file. ### Claim 14 (depends on 11) The method of claim 11, further comprising probing corresponding target resources of the plurality of links to determine a handling of individual links of the plurality of links. ### Claim 15 (depends on 11) The method of claim 11, wherein determining to structure the first link using a direct link structure is based on determining whether certain data fields or data items of the first target resource are sensitive. ### Claim 16 (depends on 11) The method of claim 11, wherein determining to structure the second link using a proxy link structure is based on determining whether certain data fields or data items of the second target resource are sensitive. ### Claim 17 (depends on 11) The method of claim 11, wherein the proxy link includes the second link in an original format provided by the third-party network service. ### Claim 18 (depends on 11) The method of claim 11, further comprising: determining a load on the proxy computer system at a plurality of times; and based on an increase in the load on the proxy computer system, increasing the number of links of the plurality of links to structure using the direct link structure to increase a number of links handled by the third-party network service without involving the proxy computer system. ### Claim 19 A non-transitory computer-readable medium that stores instructions that, when executed by one or more processors of a network computer system, cause the network computer system to provide a proxy service for a client computer to utilize a third-party network service and perform operations that include: retrieving content requested by a client computer from a third-party network service; parsing the content to identify a plurality of links including a first link to a first target resource and a second link to a second target resource; determining to structure the first link using a direct link structure; determining to structure the second link using a proxy link structure; generating modified content comprising (i) a direct link that includes an absolute domain address of the third-party network service that enables the client computer to bypass the proxy service and directly retrieve the first target resource from the third-party network service, and (ii) a proxy link that enables the client computer to retrieve the second target resource via the proxy service implemented by the network computer system; and providing the modified content to the client computer. ### Claim 20 (depends on 19) The non-transitory computer-readable medium of claim 19, wherein the instructions, when executed by one or more processors of a network computer system, cause the network computer system to perform operations that include probing corresponding target resources of the plurality of links to determine a handling of individual links of the plurality of links.