998 results about "Proxy server" patented technology

A system comprises a communications module; at least one processor coupled with the communications module; and a memory coupled to the at least one processor and storing processor-executable instructions which, when executed by the at least one processor, configure the at least one processor to provide, via the communications module, a first encryption key of an encryption key pair to a client device; receive, via the communications module and from a conversation agent server, a fulfillment request based on a natural language input transmitted from the client device to the conversation agent server; determine that the fulfillment request includes a request for personal data; obtain the requested personal data; encrypt the personal data with a second encryption key of the encryption key pair; and provide, via the communications module and to the conversation agent server, the encrypted personal data for transmission to the client device.

A system comprises a communications module; at least one processor coupled with the communications module; and a memory coupled to the at least one processor and storing processor-executable instructions which, when executed by the at least one processor, configure the at least one processor to provide, via the communications module, a first encryption key of an encryption key pair to a client device; receive, via the communications module and from a conversation agent server, a fulfillment request based on a natural language input transmitted from the client device to the conversation agent server; determine that the fulfillment request includes a request for personal data; obtain the requested personal data; encrypt the personal data with a second encryption key of the encryption key pair; and provide, via the communications module and to the conversation agent server, the encrypted personal data for transmission to the client device.

A method for fetching a content from a web server to a client device is disclosed, using tunnel devices serving as intermediate devices. The tunnel device is selected based on an attribute, such as IP Geolocation. A tunnel bank server stores a list of available tunnels that may be used, associated with values of various attribute types. The tunnel devices initiate communication with the tunnel bank server, and stays connected to it, for allowing a communication session initiated by the tunnel bank server. Upon receiving a request from a client to a content and for specific attribute types and values, a tunnel is selected by the tunnel bank server, and is used as a tunnel for retrieving the required content from the web server, using standard protocol such as SOCKS, WebSocket or HTTP Proxy. The client only communicates with a super proxy server that manages the content fetching scheme.

A method for fetching a content from a web server to a client device is disclosed, using tunnel devices serving as intermediate devices. The tunnel device is selected based on an attribute, such as IP Geolocation. A tunnel bank server stores a list of available tunnels that may be used, associated with values of various attribute types. The tunnel devices initiate communication with the tunnel bank server, and stays connected to it, for allowing a communication session initiated by the tunnel bank server. Upon receiving a request from a client to a content and for specific attribute types and values, a tunnel is selected by the tunnel bank server, and is used as a tunnel for retrieving the required content from the web server, using standard protocol such as SOCKS, WebSocket or HTTP Proxy. The client only communicates with a super proxy server that manages the content fetching scheme.

A method for overcoming intermittent, temporary, or other fetching failures by using multiple attempts for retrieving a content from a web server to a client device is disclosed. The URL fetching may use direct or non-direct fetching schemes, or a combination thereof. The non-direct fetching method may use intermediate devices, such as proxy server, Data-Center proxy server, tunnel devices, or any combination thereof. Upon sensing a failure of a fetching action, the action is repeated using the same or different parameters or attributes, such as by using different intermediate devices, selected based on different parameters or attributes, such as different countries. The repetitions are limited to a pre-defined maximum number or attempts. The fetching attempts may be performed by the client device, by an intermediate device in a non-direct fetching scheme, or a combination thereof. Various fetching schemes may be used sequentially until the content is retrieved.

A system and method for implementing a non-interactive and automatic way of facilitating user authentication with a proxy server is disclosed. At least, the technique disclosed includes determining a request to access a web server by a Hypertext Transfer Protocol (HTTP) agent on a client device, retrieving a proxy configuration file from a Uniform Resource Locator (URL) assigned to the client device, determining, using the proxy configuration file, a host name and a port number of a proxy server corresponding to the request, and routing, from the HTTP agent to the proxy server, the request using the host name and the port number of the proxy server, the proxy server configured to look up a user mapping table using a set of proxy connection information and uniquely identify a user of the client device based on the look up, the set of proxy connection information including a combination of a public Internet Protocol (IP) address of the client device, the host name of the proxy server, and the port number of the proxy server.

Systems and methods are described for providing secure computer sessions using a dedicated browser. The dedicated browser is restricted to accessing a predefined set of one or more webpages. The dedicated browser accesses a respective webpage of the predefined set of one or more webpages through a respective proxy server of a set of one or more proxy servers. While accessing the respective webpage through the set of one or more proxy servers, the dedicated browser monitors whether a specified user is physically adjacent to the computer system using the camera and biometric information for the specified user. In accordance with a determination that the specified user is not physically adjacent to the computer system, the dedicated browser takes a remedial action (e.g., terminates access to the respective webpage).

The invention discloses an automatic network protocol fuzz testing system, particularly relates to the field of automatic network protocol testing, is used for solving the problems of protocol vulnerability detection and security verification, and improves the coverage rate and efficiency of protocol testing through an automatic network protocol fuzz testing system. The method comprises the following steps: firstly, capturing and recording complete communication data, generating an FSA of a protocol, mapping a protocol state and a conversion process by utilizing a proxy server, and performing message clustering and state association analysis and simplifying protocol behavior analysis by generating a GMS; secondly, dynamically analyzing the stability of the protocol state and the difference of the message sequence, intelligently selecting a deterministic or non-deterministic test function, and widely covering a protocol behavior scene; in the testing process, input, output and state information is recorded in real time, and the protocol state is automatically reset or returned when abnormity occurs, so that the continuity and traceability of the test are ensured. The potential vulnerabilities can be found comprehensively, the manual test workload is reduced, and the security and robustness of the protocol are ensured.

Systems and methods for management of generative AI. An example method includes intercepting, via a gateway implemented by the system, a client request associated with a tool invocation via a model context protocol (MCP) server, wherein the gateway operates as a proxy server between a plurality of MCP servers and a plurality of agents or consoles utilized by end-users; accessing policy information associated with MCP, the policy information reflecting, at least, an allowlist and a denylist associated with MCP servers and / or tools; implementing the policy information, wherein implementing includes: adjusting the client request to replace an MCP server included in the client request with a different MCP server, or adjusting the client request to update a schema associated with a tool identified in the client request; and forwarding the client request for receipt by an approved MCP server.

Techniques for adaptive sleep virtual machine management are described. A service of a provider network receives a parameter indicating that a first virtual machine can be slept and determines to sleep the first virtual machine based at least in part on the parameter. A state of the first virtual machine is captured, and the first virtual machine is terminated. The service determines to resume the captured state of the first virtual machine based at least in part on an indication. A second virtual machine is launched using the captured state of the first virtual machine and resumes execution of the captured state of the first virtual machine. A proxy server sends traffic to the first virtual machine before the termination of the first virtual machine and to the second virtual machine after the resumption of execution of the captured state of the first virtual machine by the second virtual machine.

Described is a system for cloud-based processing of backup data for storage onto various types of object storage systems. A specialized cloud-based component (e.g. proxy server) may act as an intermediary when backing up data from a client system to an object storage. For example, the cloud-based component may be provided as part of backup service that operates in conjunction with a client system. Accordingly, the system may allow different clients of a backup service to efficiently and seamlessly interact with the different third-party object storage providers via a single cloud-based component. To provide such object-storage-agnostic functionality, the cloud-based component may include a function library that includes object-storage-specific functions. For example, the cloud-based component may invoke a specific set of operations that interact with a storage API provided by a particular object storage provider.

The invention relates to a cloud data auditing method based on a block chain, and the method comprises the steps: S1, a key generation center generates system parameters and generates a user part private key based on a user identity, a user generates an authorization private key based on the part private key and sends an authorization request to a proxy server, and the proxy server generates an encryption key pair after verifying the request; s2, a user locally performs block blinding on original data blocks, a proxy server signs the data blocks and generates a Merkel Hash tree based on a bucket structure, and a cloud service provider performs integrity verification on received user files, stores data and uploads Merkel Hash tree root values to a block chain; s3, the third-party auditing mechanism generates a challenge request and sends the challenge request to the cloud service provider after receiving the auditing request of the user, the cloud service provider generates a challenge response according to parameters in a challenge set, and the third-party auditing mechanism judges whether data stored in the cloud are complete or not based on bilinear mapping; and returning the audit result to the user and generating a transaction record on the block chain.

The present technology relates to a computer-implemented method for enhancing enterprise-wide security when using Artificial intelligence (AI) models. Embodiments involve a JavaScript injection process facilitated by a proxy server. This process does not require manual installation as it is automatically injected during operation. The JavaScript injection process operates by intercepting unsecured AI input and output data provided by users interacting with AI websites. The input and output data are sent to a security Application Programming Interface (API) which applies an enterprise security policy to the data in real-time, thereby transforming unsecured input and output into secure data. Embodiments provide a robust framework for safe interaction with Artificial intelligence models while mitigating the risks associated with the transmission of sensitive information over the internet.

Embodiments of the technology described herein identify and mitigate phishing attempts by analyzing user input using a client-side proxy component and a proxy server. Embodiments disclosed herein provide systems, methods, and computer-storage media for employing proxy server capabilities in conjunction with a snapshot capturing an image or video recording of a target action input by a user into a software application. Certain embodiments disclosed herein employ proxy server capabilities to capture a snapshot and / or screen recording based on a user authorization or approval. For example, the proxy server proactively captures the snapshot or screen recording prior to, during, and after the user performing a target action. From the snapshot, certain embodiments extract snapshot features or determine enriched-contextual event data that is used to perform a mitigation action, generate a security mitigation score, or update an administrator portal activity log for an authorized administrator.

A method for overcoming intermittent, temporary, or other fetching failures by using multiple attempts for retrieving a content from a web server to a client device is disclosed. The URL fetching may use direct or non-direct fetching schemes, or a combination thereof. The non-direct fetching method may use intermediate devices, such as proxy server, Data-Center proxy server, tunnel devices, or any combination thereof. Upon sensing a failure of a fetching action, the action is repeated using the same or different parameters or attributes, such as by using different intermediate devices, selected based on different parameters or attributes, such as different countries. The repetitions are limited to a pre-defined maximum number or attempts. The fetching attempts may be performed by the client device, by an intermediate device in a non-direct fetching scheme, or a combination thereof. Various fetching schemes may be used sequentially until the content is retrieved.

The invention belongs to the technical field of Bluetooth indoor positioning, and relates to a Bluetooth AOA and RSSI fusion indoor positioning method based on deep learning, which comprises the following steps: step S10, a Bluetooth positioning base station receives a CTE signal sent by a signal source by using a BGAP protocol, and extracts I / Q data and RSSI data in the CTE signal; step S20, the Bluetooth positioning base station calculates the azimuth angle, the pitch angle and the distance of the signal by extracting the data, and uploads the azimuth angle, the pitch angle and the distance to the proxy server through an MQTT protocol; step S30, the PC subscribes to the proxy server, downloads azimuth angle, pitch angle and distance data, performs Kalman filtering on the angle data, and performs moving average filtering on the distance information; and S40, multiplying the filtered data by own transpose, inputting the data into a deep learning model for training, and finally outputting a label position coordinate. The distance information of the RSSI and the azimuth angle and pitch angle information of the AOA are fused, Kalman filtering and moving average filtering are used for processing data, and the specific position of the label is predicted through a deep learning network.

Systems, methods, and apparatus, including computer programs encoded on a computer storage medium for managing network traffic to and from a server configured to: (i) receive, from a client device, a query in a natural language, and (ii) generate a response to the query in the natural language. In one aspect, a method includes: receiving, from the client device via a network connection, a network message including a new query for the server; processing the new query, using a text encoder, to generate an embedding vector of the new query; identifying, from amongst multiple entries of a vector database, a particular entry based on a similarity metric between: (i) the embedding vector of the new query, and (ii) an embedding vector of a particular query stored in the particular entry; and determining whether the similarity metric is greater than a threshold similarity value.

Embodiments of a method, a non-transitory computer readable medium, and a proxy server are disclosed. In an embodiment, a method for operating a proxy server involves receiving at least one communication between a client and a web server, wherein the proxy server facilitates a secure tunnel between the client and the web server, determining from the at least one communication that access to the web server has been restricted, and implementing a remedial action in response to the restricted access determination.

The invention discloses a method for realizing user authentication and nailing notification of a graph database document site, which belongs to the technical field of computer security, and comprises the following steps of: integrating an Oauth2 authentication module into a reverse proxy server, and docking with an identity authentication service; the external request for accessing the graph database document site is redirected to the identity authentication service for user authentication; after the user authentication is passed, the Oauth2 authentication module executes authentication operation; the identity authentication service captures a user registration event in real time, and when the registration event is monitored, user information corresponding to the registration event is extracted; filling a preset notification template according to the user information to obtain a notification message, and pushing the notification message to a management terminal through a configurable message notification interface; and the reverse proxy server dynamically controls the access authority of the user to the content of the graph database document site based on the authentication result. According to the application, user authentication can be carried out on the graph database document site, and meanwhile, an administrator can be notified of a user registration event through the nailing robot Webhook.

A security gateway for validating ingress traffic and / or a response to the ingress traffic in a computer network, and a method for validating the same. The security gateway includes a proxy server and a gateway agent. The proxy server receives the ingress traffic and / or the response and forwards the ingress traffic and / or the response to the gateway agent. The gateway agent validates the ingress traffic and / or the response as valid ingress traffic and / or valid response or invalid ingress traffic and / or invalid response based on predetermined validation requirements. The proxy server further receives the valid ingress traffic from the gateway agent and forwards the valid ingress traffic to a backend service and / or receives the valid response from the gateway agent and forwards the valid response to a client device or blocks the invalid ingress traffic and / or invalid response.

The invention provides a method and a system for uploading a cloud storage platform, electronic equipment and a readable storage medium, and aims to create a temporary access credential with limited authority and timeliness for an uploading task through temporary authorization, thereby avoiding direct use of a long-term effective fixed long-term credential at a front end. The temporary authorization needs to be acquired from the security server, and the security server is an identity-based secret and encryption management system and can safely store, manage and access the temporary authorization, so that the security and availability of the temporary authorization are ensured. According to the technical scheme, the proxy server is used for requesting the temporary authorization, the URL signature is generated in the proxy server according to the temporary authorization, the proxy server returns the URL signature to the client, the client cannot obtain the temporary authorization in the process, isolation of the client and the temporary authorization is achieved, and therefore safety is improved. Moreover, according to the scheme, identity verification is uniformly used as a voucher in the project, the uploading path is unified, and the uniqueness of the project uploading path is ensured.

The invention relates to the technical field of online communication, in particular to a multi-network-type intercommunication online communication system which comprises a management information large area, when the system is used, resources in an intranet are mapped to an extranet through an Nginx proxy server, so that remote access of the resources is achieved, and the management information large area is expanded. Data forwarding and load balancing are carried out among different servers by using the Nginx proxy server, the efficiency and stability of data transmission are improved, data can be simultaneously sent and received between two network nodes by using an mqtt protocol, the efficiency and reliability of data interaction are improved, and the data transmission efficiency and reliability are improved. The method is beneficial to providing real-time message transmission and multi-terminal data sharing synchronization of applications such as communication exchange and file storage across two network types, is beneficial to solving the problem that a user cannot perform direct communication exchange and file transmission due to network boundary limitation, crosses regional limitation and time limitation, is beneficial to realizing flexible office, and is convenient to use. The production efficiency is improved.

The invention discloses a multi-level cache-based data acquisition method and device, equipment and a storage medium, and relates to the technical field of big data, the method comprises the following steps: after a data acquisition request is received, determining a data type and a data identifier of to-be-acquired data by analyzing the data acquisition request; when the data type is static data, acquiring target data corresponding to the data acquisition request in a first cache module; when the data type is dynamic data, target data corresponding to the data obtaining request is obtained in a multi-level cache system, and the multi-level cache system is composed of a second cache module, a local cache and a backup cache. According to the technical scheme, the acquisition speed of the static data and the dynamic data is increased, and the static data and part of the dynamic data are acquired only in the reverse proxy servers corresponding to the first cache module and the second cache module, so that the access pressure of a back-end server is reduced, and the access efficiency and the access stability are improved.

The embodiment of the invention provides an acquisition probe management system and method. The method can be used in distributed fields. The system comprises an acquisition probe deployment page management end, an acquisition proxy server end and an acquisition proxy end, the acquisition probe deployment page management end is used for providing a man-machine interaction function so as to create an operation task corresponding to operation task information based on the operation task information for an acquisition probe obtained by man-machine interaction; and sending the operation task to a collection agent server corresponding to the node, and displaying an execution state of the operation task, the acquisition agent server side is used for triggering the node to execute the operation task, and the acquisition agent side is deployed in the node; and the acquisition agent end is used for executing the operation task aiming at the acquisition probe. The method is used for achieving the effect of quickly deploying the corresponding acquisition probes to a plurality of servers and realizing unified management of the acquisition probes.

The invention relates to the technical field of block chains, and particularly discloses a virtual article secure transaction method, device and system, a medium and a server. The method relates to a mobile terminal, a proxy server and an issuing server, is executed by the proxy server and is used for receiving encrypted ciphertext transaction data sent by the mobile terminal and transmitting the data to the issuing server, so that the issuing server issues a virtual article corresponding to the transaction data obtained by decryption to the mobile terminal, and after the issuing server issues the virtual article, the virtual article is sent to the mobile terminal. And the proxy server and the issuing server carry out account checking. According to the method, the transaction data is encrypted by using the fully homomorphic encryption algorithm in the data transmission process, it is ensured that the proxy server cannot obtain plaintext transaction data, and account checking is performed by the proxy server and the issuing server, so that the problem of non-uniform bills is solved.

According to the WeChat operation automation comprehensive service platform provided by the invention, by integrating the firewall architecture module, the unified management module and the user information integration module, safe and efficient management of enterprise WeChat data and seamless integration with enterprise CRM are realized. The firewall architecture module adopts a proxy server technology and intelligent traffic analysis, monitors and filters potential malicious traffic in real time, and ensures data security; the unified management module stores and manages application attributes, main data and public data of enterprise WeChat in a centralized manner by using a structured data warehouse technology, and optimizes a data management process; the user information integration module realizes seamless integration of enterprise WeChat user information and CRM user information through an SSO technology and a data mapping engine; and the operation efficiency and the data management capability of an enterprise on the WeChat platform are greatly improved.

The embodiment of the invention provides an HTTP proxy method and device based on a dynamic certificate, equipment and a medium. The method is applied to a proxy server in which self-visa certificate information of a plurality of web servers is stored. The method comprises the following steps: in response to a first connection request initiated by a client for a target website server, determining whether certificate information of the target website server is matched with self-visa certificate information of any website server; if yes, establishing a first ciphertext communication channel with the target website server and establishing a second ciphertext communication channel with the client according to the self-visa certificate information of the website server; and forwarding an access request initiated by the client for the target website server to the target website server through the first ciphertext communication channel, and forwarding an access response returned by the target website server to the client through the second ciphertext communication channel. According to the embodiment of the invention, the access behavior of the target website server can be monitored under the scene that the private key of the target website server cannot be obtained.

A method for overcoming intermittent, temporary, or other fetching failures by using multiple attempts for retrieving a content from a web server to a client device is disclosed. The URL fetching may use direct or non-direct fetching schemes, or a combination thereof. The non-direct fetching method may use intermediate devices, such as proxy server, Data-Center proxy server, tunnel devices, or any combination thereof. Upon sensing a failure of a fetching action, the action is repeated using the same or different parameters or attributes, such as by using different intermediate devices, selected based on different parameters or attributes, such as different countries. The repetitions are limited to a pre-defined maximum number or attempts. The fetching attempts may be performed by the client device, by an intermediate device in a non-direct fetching scheme, or a combination thereof. Various fetching schemes may be used sequentially until the content is retrieved.

The invention discloses a data processing method, device, equipment, system, medium and program product, and relates to the technical field of data processing. According to the method, an access request message of an access object is obtained, when the access request message comprises a request network mark field, the permission of the access object to access at least one application system is verified, and the access request message is determined by a network layer proxy server based on an access request sent by the access object and the request network mark field; the network source is used for indicating the access request; and when the permission of the access object to access each application system is verified to pass, sending an access request message to each application system. Therefore, the request network mark field can be added in the access request to indicate the network source of the access request, the real network source accessed by a user can be accurately identified, the authority control efficiency of accessing an application system by a visitor is improved, and the authority control cost of a service system is reduced because the authority verification logic is simple and hardware does not need to be improved.

The invention discloses a communication method, equipment and a communication system, relates to the technical field of communication, and can reduce the power consumption of terminal equipment while ensuring the user experience. According to the application, the proxy server can be indicated to adopt an adaptive strategy to perform downlink transmission of the application message based on the perceived use state of the terminal equipment. For example, the proxy server can adopt a specific strategy to send a downlink application message to the terminal equipment according to the message type of the application message when the terminal equipment is in a non-use state, such as forwarding a second type of application message in real time, and forwarding a first type of application message in a centralized manner after caching. For example, the proxy server can no longer cache the application message when the terminal device is in the use state. Therefore, on the premise of ensuring that important application messages timely arrive at the terminal equipment, unnecessary power consumption and disturbance to the terminal equipment due to frequent wakeup of the terminal equipment caused by the application messages with low importance can be reduced to the maximum extent.