CN1363068A - 用于代理服务器甜点程序的方法和设备 - Google Patents

用于代理服务器甜点程序的方法和设备 Download PDF

Info

Publication number
CN1363068A
CN1363068A CN00808248A CN00808248A CN1363068A CN 1363068 A CN1363068 A CN 1363068A CN 00808248 A CN00808248 A CN 00808248A CN 00808248 A CN00808248 A CN 00808248A CN 1363068 A CN1363068 A CN 1363068A
Authority
CN
China
Prior art keywords
session
response
dessert
program
page
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN00808248A
Other languages
English (en)
Inventor
劳伦斯·崔
马克·V·马丘科夫
法恩·T·沃
阿纽拉格·门德赫卡
莫汉·维什瓦纳思
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Yahoo Inc
Original Assignee
Yahoo Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Yahoo Inc filed Critical Yahoo Inc
Publication of CN1363068A publication Critical patent/CN1363068A/zh
Pending legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F17/00—Digital computing or data processing equipment or methods, specially adapted for specific functions
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/90—Details of database functions independent of the retrieved data types
    • G06F16/95—Retrieval from the web
    • G06F16/955—Retrieval from the web using information identifiers, e.g. uniform resource locators [URL]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F13/00—Interconnection of, or transfer of information or other signals between, memories, input/output devices or central processing units
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/56—Provisioning of proxy services
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/02—Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Signal Processing (AREA)
  • Databases & Information Systems (AREA)
  • Physics & Mathematics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Data Mining & Analysis (AREA)
  • Mathematical Physics (AREA)
  • Software Systems (AREA)
  • Computer And Data Communications (AREA)
  • Information Transfer Between Computers (AREA)

Abstract

处理客户请求的响应网页中的甜点程序的方法和设备。一种方法包括步骤:(a)生成会话标识以识别新会话;(b)从响应网页的响应头标中剥除外部网站所设置的任何甜点程序;(c)将会话标识附加到所有嵌于响应网页的链接中;和(d)用新的头标,将经修改的响应页发送给客户。

Description

用于代理服务器甜点程序的方法和设备
                          发明背景
本发明总的涉及万维网技术，更具体地说，涉及用于代理服务器甜点程序(cookies)的方法和设备。
甜点程序已经用在万维网(Web)中以跟踪访问者的会话(session)状态。可是，运行在具有有限存储器容量的装置上的许多浏览器不接受或不能接受甜点程序。另外，由于个人的原因，许多浏览器还禁用它们的浏览器的甜点程序处理机构。结果，这些浏览器不能访问委托甜点程序处理的网页。
因此，需要有在万维网中处理甜点程序的另外的方法。
                          发明内容
本发明是关于能为具有有限存储容量的装置处理甜点程序的方法和设备。
在一个实施例中，这由服务器来进行，该服务器集中了多个客户机上的浏览器的甜点程序处理。本发明不仅解决了浏览器不能处理甜点程序的问题，还通过隐藏冲浪者的身份保护了他们的隐私。
                       发明的详细描述
本发明的一个实施例是基于动态会话的概念上的，当浏览器向代理服务器发送新请求以访问万维网上的信息时该动态会话开始。
在本发明中，万维网被定义为使用诸如HTTP、FTP或TCP/IP标准协议公布信息的计算机网络。动态会话被定义为代理服务器不具有优先存储的请求。
当开始一个新会话时，可以生成唯一的会话标识(id)。在同一个会话内，可以用相同的会话标识标记响应页中的所有嵌入链接。会话请求被定义为除了该请求本身外，具有会话标识信息的请求。代理服务器可以通过会话标识将会话请求与会话相关。只要用户处于第一页的链接中或从第一页的链接生成的页的链接中，会话就会持续。当它的时间到达服务器所设置的寿命时会话终止。会话寿命是可以通过配置参数进行配置的。由于会话的动态特性，用户不必登录进提供所集中的甜点程序处理服务的代理服务器中。相同的用户可以在相同的时间开始多个会话。
在一个实施例中，客户发送对一具体URL的新请求到代理服务器。代理服务器首先检查请求头标(header)以确定客户的浏览器是否能够处理甜点程序。如果浏览器接受甜点程序，并且如果浏览器不想禁止甜点程序处理能力，则代理服务器不提供甜点程序服务。否则，代理服务器首先生成一个会话标识以识别新会话。
然后，代理服务器将请求发送给作为目标的外部网站以得到响应页。在得到响应页后，代理服务器首先从响应头标中剥除外部网站所设置的任何甜点程序。由具体会话所拥有并由会话标识所识别的甜点程序典型地存储于甜点程序库中，用于会话内的后续请求。
在一个实施例中，会话标识，或它的编码或加密的版本，位于URL的配置中，或网络浏览器识别的地址中。
然后代理服务器将会话标识或它的经编码的或经加密的版本附加到嵌于响应页的所有链接中。然后，代理服务器用新的头标将经修改的响应页发送给对应的客户。
在一个实施例中，当收到会话请求时，代理服务器首先从该请求URL中检索和剥除会话标识。然后，会话标识和URL被用于从甜点程序库中检索甜点程序。然后，代理服务器用检索到的甜点程序生成甜点程序头标。然后新的甜点程序头标被附加到原始请求头标。会话信息被从URL中移除。然后，该请求被发送到外部网站以取得网页。在从外部网站收到网页后，使用与处理新请求相同的过程处理头标和网页。

Claims (1)

1.一种处理客户请求的响应网页中的甜点程序的方法，包括步骤：生成会话标识以识别新会话；从响应网页的响应头标中剥除外部网站所设置的任何甜点程序；将会话标识附加到所有嵌于响应网页的链接中；以及用新的头标，将经修改的响应页发送给客户。
CN00808248A 1999-05-10 2000-05-08 用于代理服务器甜点程序的方法和设备 Pending CN1363068A (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US09/309,161 1999-05-10
US09/309,161 US6910180B1 (en) 1999-05-10 1999-05-10 Removing cookies from web page response headers and storing the cookies in a repository for later use

Publications (1)

Publication Number Publication Date
CN1363068A true CN1363068A (zh) 2002-08-07

Family

ID=23196953

Family Applications (1)

Application Number Title Priority Date Filing Date
CN00808248A Pending CN1363068A (zh) 1999-05-10 2000-05-08 用于代理服务器甜点程序的方法和设备

Country Status (7)

Country Link
US (1) US6910180B1 (zh)
EP (1) EP1208468A2 (zh)
JP (1) JP2002544594A (zh)
KR (1) KR100708913B1 (zh)
CN (1) CN1363068A (zh)
AU (1) AU4991600A (zh)
WO (1) WO2000068823A2 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101984778A (zh) * 2008-01-26 2011-03-09 思杰系统有限公司 用于细粒度策略驱动的cookie代理的系统和方法

Families Citing this family (31)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2000070838A2 (en) * 1999-05-14 2000-11-23 Pivia, Inc. Client-server independent intermediary mechanism
US7725307B2 (en) 1999-11-12 2010-05-25 Phoenix Solutions, Inc. Query engine for processing voice based queries including semantic decoding
US6633846B1 (en) 1999-11-12 2003-10-14 Phoenix Solutions, Inc. Distributed realtime speech recognition system
US6665640B1 (en) 1999-11-12 2003-12-16 Phoenix Solutions, Inc. Interactive speech based learning/training system formulating search queries based on natural language parsing of recognized user queries
US9076448B2 (en) 1999-11-12 2015-07-07 Nuance Communications, Inc. Distributed real time speech recognition system
US7801766B2 (en) 2000-03-31 2010-09-21 You Technology Brand Services, Inc. Method, system, and computer readable medium for facilitating a transaction between a customer, a merchant and an associate
US7209959B1 (en) * 2000-04-04 2007-04-24 Wk Networks, Inc. Apparatus, system, and method for communicating to a network through a virtual domain providing anonymity to a client communicating on the network
US7475404B2 (en) 2000-05-18 2009-01-06 Maquis Techtrix Llc System and method for implementing click-through for browser executed software including ad proxy and proxy cookie caching
US7127514B2 (en) * 2000-12-28 2006-10-24 Microsoft Corporation Stateless distributed computer architecture with server-oriented state-caching objects maintained on network or client
US20020161904A1 (en) * 2001-04-30 2002-10-31 Xerox Corporation External access to protected device on private network
US7873734B1 (en) * 2001-05-17 2011-01-18 Computer Associates Think, Inc. Management of multiple user sessions and user requests for multiple electronic devices
FR2841416B1 (fr) * 2002-06-20 2005-01-28 Cegetel Groupe Procede de gestion d'informations de contexte par serveur intermediaire
US20040098229A1 (en) * 2002-06-28 2004-05-20 Brett Error Efficient click-stream data collection
US20040044741A1 (en) * 2002-08-30 2004-03-04 Kelly Declan Patrick Disc specific cookies for web DVD
JP4209712B2 (ja) * 2003-04-15 2009-01-14 株式会社リコー 情報処理装置及びセッション管理方法
US7913251B2 (en) * 2003-12-12 2011-03-22 International Business Machines Corporation Hypervisor virtualization of OS console and operator panel
GB2427717A (en) * 2005-06-29 2007-01-03 Nucleus Ltd Monitoring and modifying web site content data through web server
US8380855B2 (en) * 2005-12-12 2013-02-19 Answer Financial, Inc. HTTP header intermediary for enabling session-based dynamic site searches
US20080155013A1 (en) * 2006-12-20 2008-06-26 Morris Robert P Methods And Systems For Providing For Responding Without At Least One Of Scripts And Cookies To Requests Based On Unsolicited Request Header Indications
US20080155024A1 (en) * 2006-12-20 2008-06-26 Morris Robert P Methods And Systems For Providing For Responding To Messages Without Non-Accepted Elements Of Accepted MIME Types Based On Specifications In A Message Header
US7925694B2 (en) * 2007-10-19 2011-04-12 Citrix Systems, Inc. Systems and methods for managing cookies via HTTP content layer
US8893259B2 (en) 2008-01-26 2014-11-18 Citrix Systems, Inc. Systems and methods for fine grain policy driven clientless SSL VPN access
US20120011223A1 (en) * 2010-07-12 2012-01-12 Lmr Inventions, Llc Centralized web browsing profile
EP2495670B1 (en) 2010-11-29 2019-08-07 Hughes Network Systems, LLC Computer networking system and method with javascript execution for pre-fetching content from dynamically-generated url and javascript injection to modify date or random number calculation
US8695069B1 (en) * 2012-01-31 2014-04-08 Intuit Inc. Session management between a web application and a CRM system
JP6476995B2 (ja) * 2015-02-24 2019-03-06 沖電気工業株式会社 中継装置、コンテンツ配信システム、中継方法およびプログラム
US10165075B1 (en) 2016-04-01 2018-12-25 Google Llc Retrieving shared content by proxy
US10938915B1 (en) * 2016-08-16 2021-03-02 United Services Automobile Association (Usaa) Session data isolation and management
US10778684B2 (en) 2017-04-07 2020-09-15 Citrix Systems, Inc. Systems and methods for securely and transparently proxying SAAS applications through a cloud-hosted or on-premise network gateway for enhanced security and visibility
US10949486B2 (en) 2017-09-20 2021-03-16 Citrix Systems, Inc. Anchored match algorithm for matching with large sets of URL
US10565106B2 (en) 2017-11-29 2020-02-18 International Business Machines Corporation Garbage collection of nuisance cookies

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5704029A (en) * 1994-05-23 1997-12-30 Wright Strategies, Inc. System and method for completing an electronic form
JP2798119B2 (ja) * 1995-05-23 1998-09-17 日本電気株式会社 電子書籍表示装置
WO1998032066A1 (en) * 1997-01-20 1998-07-23 British Telecommunications Public Limited Company Data access control
US6085224A (en) * 1997-03-11 2000-07-04 Intracept, Inc. Method and system for responding to hidden data and programs in a datastream
US6256739B1 (en) * 1997-10-30 2001-07-03 Juno Online Services, Inc. Method and apparatus to determine user identity and limit access to a communications network
US6330566B1 (en) * 1998-06-22 2001-12-11 Microsoft Corporation Apparatus and method for optimizing client-state data storage
US6507911B1 (en) * 1998-07-22 2003-01-14 Entrust Technologies Limited System and method for securely deleting plaintext data
US6397253B1 (en) * 1998-10-06 2002-05-28 Bull Hn Information Systems Inc. Method and system for providing high performance Web browser and server communications
US6460141B1 (en) * 1998-10-28 2002-10-01 Rsa Security Inc. Security and access management system for web-enabled and non-web-enabled applications and content on a computer network

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101984778A (zh) * 2008-01-26 2011-03-09 思杰系统有限公司 用于细粒度策略驱动的cookie代理的系统和方法
US8769660B2 (en) 2008-01-26 2014-07-01 Citrix Systems, Inc. Systems and methods for proxying cookies for SSL VPN clientless sessions
CN101984778B (zh) * 2008-01-26 2014-08-13 思杰系统有限公司 用于细粒度策略驱动的cookie代理的系统和方法
US9059966B2 (en) 2008-01-26 2015-06-16 Citrix Systems, Inc. Systems and methods for proxying cookies for SSL VPN clientless sessions

Also Published As

Publication number Publication date
WO2000068823A8 (en) 2006-11-09
WO2000068823A3 (en) 2002-03-21
JP2002544594A (ja) 2002-12-24
KR100708913B1 (ko) 2007-04-18
KR20020022661A (ko) 2002-03-27
EP1208468A2 (en) 2002-05-29
US6910180B1 (en) 2005-06-21
WO2000068823A2 (en) 2000-11-16
AU4991600A (en) 2000-11-21

Similar Documents

Publication Publication Date Title
CN1363068A (zh) 用于代理服务器甜点程序的方法和设备
EP1346548B1 (en) Secure session management and authentication for web sites
US9307036B2 (en) Web access using cross-domain cookies
US8819109B1 (en) Data network communication using identifiers mappable to resource locators
EP0844767A1 (en) User controlled browser
US20090313136A1 (en) Stateless Methods for Resource Hiding and Access Control Support Based on URI Encryption
US20070198823A1 (en) Methods for conducting server-side encryption/decryption-on-demand
US7581218B2 (en) Transaction processing in a distributed data processing system
US6738909B1 (en) Method and apparatus for automatic configuration for internet protocol security tunnels in a distributed data processing system
GB2355827A (en) Universal user ID and password management for Internet connected devices
JPWO2007110951A1 (ja) ユーザ確認装置、方法及びプログラム
CN107566323B (zh) 一种应用系统登录方法和装置
CN102594813A (zh) 多账号登录方法及装置
JP2011100489A (ja) ユーザ確認装置、方法及びプログラム
CN101978665B (zh) 对网络通信请求的选择性过滤
CN1319810A (zh) 用于操作提供加密内容的因特网站点的方法
JP5347429B2 (ja) ユニフォームリソースロケータ書換方法及び装置
US20050267981A1 (en) System and method for server side detection of client side popup blocking
US20050131831A1 (en) Web-based digital rights management (DRM) encoder
CN110290097B (zh) 数据的处理方法、装置、存储介质和电子装置
CN107026828A (zh) 一种基于互联网缓存的防盗链方法及互联网缓存
JPH10107843A (ja) 電子データ信号送信方法および装置
WO2011013617A1 (ja) クッキー処理装置、クッキー処理方法、クッキー処理プログラム、クッキー処理システム及び情報通信システム
US20050144479A1 (en) Method, medium, and apparatus for processing cookies
JP2003316743A (ja) ネットワークアクセス方法およびクライアント

Legal Events

Date Code Title Description
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C06 Publication
PB01 Publication
C02 Deemed withdrawal of patent application after publication (patent law 2001)
WD01 Invention patent application deemed withdrawn after publication