666 results about "Proxy server" patented technology

A method for fetching a content from a web server to a client device is disclosed, using tunnel devices serving as intermediate devices. The tunnel device is selected based on an attribute, such as IP Geolocation. A tunnel bank server stores a list of available tunnels that may be used, associated with values of various attribute types. The tunnel devices initiate communication with the tunnel bank server, and stays connected to it, for allowing a communication session initiated by the tunnel bank server. Upon receiving a request from a client to a content and for specific attribute types and values, a tunnel is selected by the tunnel bank server, and is used as a tunnel for retrieving the required content from the web server, using standard protocol such as SOCKS, WebSocket or HTTP Proxy. The client only communicates with a super proxy server that manages the content fetching scheme.

A method for fetching a content from a web server to a client device is disclosed, using tunnel devices serving as intermediate devices. The tunnel device is selected based on an attribute, such as IP Geolocation. A tunnel bank server stores a list of available tunnels that may be used, associated with values of various attribute types. The tunnel devices initiate communication with the tunnel bank server, and stays connected to it, for allowing a communication session initiated by the tunnel bank server. Upon receiving a request from a client to a content and for specific attribute types and values, a tunnel is selected by the tunnel bank server, and is used as a tunnel for retrieving the required content from the web server, using standard protocol such as SOCKS, WebSocket or HTTP Proxy. The client only communicates with a super proxy server that manages the content fetching scheme.

A method for overcoming intermittent, temporary, or other fetching failures by using multiple attempts for retrieving a content from a web server to a client device is disclosed. The URL fetching may use direct or non-direct fetching schemes, or a combination thereof. The non-direct fetching method may use intermediate devices, such as proxy server, Data-Center proxy server, tunnel devices, or any combination thereof. Upon sensing a failure of a fetching action, the action is repeated using the same or different parameters or attributes, such as by using different intermediate devices, selected based on different parameters or attributes, such as different countries. The repetitions are limited to a pre-defined maximum number or attempts. The fetching attempts may be performed by the client device, by an intermediate device in a non-direct fetching scheme, or a combination thereof. Various fetching schemes may be used sequentially until the content is retrieved.

A system and method for implementing a non-interactive and automatic way of facilitating user authentication with a proxy server is disclosed. At least, the technique disclosed includes determining a request to access a web server by a Hypertext Transfer Protocol (HTTP) agent on a client device, retrieving a proxy configuration file from a Uniform Resource Locator (URL) assigned to the client device, determining, using the proxy configuration file, a host name and a port number of a proxy server corresponding to the request, and routing, from the HTTP agent to the proxy server, the request using the host name and the port number of the proxy server, the proxy server configured to look up a user mapping table using a set of proxy connection information and uniquely identify a user of the client device based on the look up, the set of proxy connection information including a combination of a public Internet Protocol (IP) address of the client device, the host name of the proxy server, and the port number of the proxy server.

Systems and methods are described for providing secure computer sessions using a dedicated browser. The dedicated browser is restricted to accessing a predefined set of one or more webpages. The dedicated browser accesses a respective webpage of the predefined set of one or more webpages through a respective proxy server of a set of one or more proxy servers. While accessing the respective webpage through the set of one or more proxy servers, the dedicated browser monitors whether a specified user is physically adjacent to the computer system using the camera and biometric information for the specified user. In accordance with a determination that the specified user is not physically adjacent to the computer system, the dedicated browser takes a remedial action (e.g., terminates access to the respective webpage).

Systems and methods for management of generative AI. An example method includes intercepting, via a gateway implemented by the system, a client request associated with a tool invocation via a model context protocol (MCP) server, wherein the gateway operates as a proxy server between a plurality of MCP servers and a plurality of agents or consoles utilized by end-users; accessing policy information associated with MCP, the policy information reflecting, at least, an allowlist and a denylist associated with MCP servers and / or tools; implementing the policy information, wherein implementing includes: adjusting the client request to replace an MCP server included in the client request with a different MCP server, or adjusting the client request to update a schema associated with a tool identified in the client request; and forwarding the client request for receipt by an approved MCP server.

Techniques for adaptive sleep virtual machine management are described. A service of a provider network receives a parameter indicating that a first virtual machine can be slept and determines to sleep the first virtual machine based at least in part on the parameter. A state of the first virtual machine is captured, and the first virtual machine is terminated. The service determines to resume the captured state of the first virtual machine based at least in part on an indication. A second virtual machine is launched using the captured state of the first virtual machine and resumes execution of the captured state of the first virtual machine. A proxy server sends traffic to the first virtual machine before the termination of the first virtual machine and to the second virtual machine after the resumption of execution of the captured state of the first virtual machine by the second virtual machine.

The invention relates to a cloud data auditing method based on a block chain, and the method comprises the steps: S1, a key generation center generates system parameters and generates a user part private key based on a user identity, a user generates an authorization private key based on the part private key and sends an authorization request to a proxy server, and the proxy server generates an encryption key pair after verifying the request; s2, a user locally performs block blinding on original data blocks, a proxy server signs the data blocks and generates a Merkel Hash tree based on a bucket structure, and a cloud service provider performs integrity verification on received user files, stores data and uploads Merkel Hash tree root values to a block chain; s3, the third-party auditing mechanism generates a challenge request and sends the challenge request to the cloud service provider after receiving the auditing request of the user, the cloud service provider generates a challenge response according to parameters in a challenge set, and the third-party auditing mechanism judges whether data stored in the cloud are complete or not based on bilinear mapping; and returning the audit result to the user and generating a transaction record on the block chain.

The present technology relates to a computer-implemented method for enhancing enterprise-wide security when using Artificial intelligence (AI) models. Embodiments involve a JavaScript injection process facilitated by a proxy server. This process does not require manual installation as it is automatically injected during operation. The JavaScript injection process operates by intercepting unsecured AI input and output data provided by users interacting with AI websites. The input and output data are sent to a security Application Programming Interface (API) which applies an enterprise security policy to the data in real-time, thereby transforming unsecured input and output into secure data. Embodiments provide a robust framework for safe interaction with Artificial intelligence models while mitigating the risks associated with the transmission of sensitive information over the internet.

Embodiments of the technology described herein identify and mitigate phishing attempts by analyzing user input using a client-side proxy component and a proxy server. Embodiments disclosed herein provide systems, methods, and computer-storage media for employing proxy server capabilities in conjunction with a snapshot capturing an image or video recording of a target action input by a user into a software application. Certain embodiments disclosed herein employ proxy server capabilities to capture a snapshot and / or screen recording based on a user authorization or approval. For example, the proxy server proactively captures the snapshot or screen recording prior to, during, and after the user performing a target action. From the snapshot, certain embodiments extract snapshot features or determine enriched-contextual event data that is used to perform a mitigation action, generate a security mitigation score, or update an administrator portal activity log for an authorized administrator.

A method for overcoming intermittent, temporary, or other fetching failures by using multiple attempts for retrieving a content from a web server to a client device is disclosed. The URL fetching may use direct or non-direct fetching schemes, or a combination thereof. The non-direct fetching method may use intermediate devices, such as proxy server, Data-Center proxy server, tunnel devices, or any combination thereof. Upon sensing a failure of a fetching action, the action is repeated using the same or different parameters or attributes, such as by using different intermediate devices, selected based on different parameters or attributes, such as different countries. The repetitions are limited to a pre-defined maximum number or attempts. The fetching attempts may be performed by the client device, by an intermediate device in a non-direct fetching scheme, or a combination thereof. Various fetching schemes may be used sequentially until the content is retrieved.

The invention belongs to the technical field of Bluetooth indoor positioning, and relates to a Bluetooth AOA and RSSI fusion indoor positioning method based on deep learning, which comprises the following steps: step S10, a Bluetooth positioning base station receives a CTE signal sent by a signal source by using a BGAP protocol, and extracts I / Q data and RSSI data in the CTE signal; step S20, the Bluetooth positioning base station calculates the azimuth angle, the pitch angle and the distance of the signal by extracting the data, and uploads the azimuth angle, the pitch angle and the distance to the proxy server through an MQTT protocol; step S30, the PC subscribes to the proxy server, downloads azimuth angle, pitch angle and distance data, performs Kalman filtering on the angle data, and performs moving average filtering on the distance information; and S40, multiplying the filtered data by own transpose, inputting the data into a deep learning model for training, and finally outputting a label position coordinate. The distance information of the RSSI and the azimuth angle and pitch angle information of the AOA are fused, Kalman filtering and moving average filtering are used for processing data, and the specific position of the label is predicted through a deep learning network.

Systems, methods, and apparatus, including computer programs encoded on a computer storage medium for managing network traffic to and from a server configured to: (i) receive, from a client device, a query in a natural language, and (ii) generate a response to the query in the natural language. In one aspect, a method includes: receiving, from the client device via a network connection, a network message including a new query for the server; processing the new query, using a text encoder, to generate an embedding vector of the new query; identifying, from amongst multiple entries of a vector database, a particular entry based on a similarity metric between: (i) the embedding vector of the new query, and (ii) an embedding vector of a particular query stored in the particular entry; and determining whether the similarity metric is greater than a threshold similarity value.

Embodiments of a method, a non-transitory computer readable medium, and a proxy server are disclosed. In an embodiment, a method for operating a proxy server involves receiving at least one communication between a client and a web server, wherein the proxy server facilitates a secure tunnel between the client and the web server, determining from the at least one communication that access to the web server has been restricted, and implementing a remedial action in response to the restricted access determination.

The invention discloses a method for realizing user authentication and nailing notification of a graph database document site, which belongs to the technical field of computer security, and comprises the following steps of: integrating an Oauth2 authentication module into a reverse proxy server, and docking with an identity authentication service; the external request for accessing the graph database document site is redirected to the identity authentication service for user authentication; after the user authentication is passed, the Oauth2 authentication module executes authentication operation; the identity authentication service captures a user registration event in real time, and when the registration event is monitored, user information corresponding to the registration event is extracted; filling a preset notification template according to the user information to obtain a notification message, and pushing the notification message to a management terminal through a configurable message notification interface; and the reverse proxy server dynamically controls the access authority of the user to the content of the graph database document site based on the authentication result. According to the application, user authentication can be carried out on the graph database document site, and meanwhile, an administrator can be notified of a user registration event through the nailing robot Webhook.

The invention relates to the technical field of online communication, in particular to a multi-network-type intercommunication online communication system which comprises a management information large area, when the system is used, resources in an intranet are mapped to an extranet through an Nginx proxy server, so that remote access of the resources is achieved, and the management information large area is expanded. Data forwarding and load balancing are carried out among different servers by using the Nginx proxy server, the efficiency and stability of data transmission are improved, data can be simultaneously sent and received between two network nodes by using an mqtt protocol, the efficiency and reliability of data interaction are improved, and the data transmission efficiency and reliability are improved. The method is beneficial to providing real-time message transmission and multi-terminal data sharing synchronization of applications such as communication exchange and file storage across two network types, is beneficial to solving the problem that a user cannot perform direct communication exchange and file transmission due to network boundary limitation, crosses regional limitation and time limitation, is beneficial to realizing flexible office, and is convenient to use. The production efficiency is improved.

The invention relates to the technical field of block chains, and particularly discloses a virtual article secure transaction method, device and system, a medium and a server. The method relates to a mobile terminal, a proxy server and an issuing server, is executed by the proxy server and is used for receiving encrypted ciphertext transaction data sent by the mobile terminal and transmitting the data to the issuing server, so that the issuing server issues a virtual article corresponding to the transaction data obtained by decryption to the mobile terminal, and after the issuing server issues the virtual article, the virtual article is sent to the mobile terminal. And the proxy server and the issuing server carry out account checking. According to the method, the transaction data is encrypted by using the fully homomorphic encryption algorithm in the data transmission process, it is ensured that the proxy server cannot obtain plaintext transaction data, and account checking is performed by the proxy server and the issuing server, so that the problem of non-uniform bills is solved.

According to the WeChat operation automation comprehensive service platform provided by the invention, by integrating the firewall architecture module, the unified management module and the user information integration module, safe and efficient management of enterprise WeChat data and seamless integration with enterprise CRM are realized. The firewall architecture module adopts a proxy server technology and intelligent traffic analysis, monitors and filters potential malicious traffic in real time, and ensures data security; the unified management module stores and manages application attributes, main data and public data of enterprise WeChat in a centralized manner by using a structured data warehouse technology, and optimizes a data management process; the user information integration module realizes seamless integration of enterprise WeChat user information and CRM user information through an SSO technology and a data mapping engine; and the operation efficiency and the data management capability of an enterprise on the WeChat platform are greatly improved.

The embodiment of the invention provides an HTTP proxy method and device based on a dynamic certificate, equipment and a medium. The method is applied to a proxy server in which self-visa certificate information of a plurality of web servers is stored. The method comprises the following steps: in response to a first connection request initiated by a client for a target website server, determining whether certificate information of the target website server is matched with self-visa certificate information of any website server; if yes, establishing a first ciphertext communication channel with the target website server and establishing a second ciphertext communication channel with the client according to the self-visa certificate information of the website server; and forwarding an access request initiated by the client for the target website server to the target website server through the first ciphertext communication channel, and forwarding an access response returned by the target website server to the client through the second ciphertext communication channel. According to the embodiment of the invention, the access behavior of the target website server can be monitored under the scene that the private key of the target website server cannot be obtained.

A method for overcoming intermittent, temporary, or other fetching failures by using multiple attempts for retrieving a content from a web server to a client device is disclosed. The URL fetching may use direct or non-direct fetching schemes, or a combination thereof. The non-direct fetching method may use intermediate devices, such as proxy server, Data-Center proxy server, tunnel devices, or any combination thereof. Upon sensing a failure of a fetching action, the action is repeated using the same or different parameters or attributes, such as by using different intermediate devices, selected based on different parameters or attributes, such as different countries. The repetitions are limited to a pre-defined maximum number or attempts. The fetching attempts may be performed by the client device, by an intermediate device in a non-direct fetching scheme, or a combination thereof. Various fetching schemes may be used sequentially until the content is retrieved.

The invention discloses a data processing method, device, equipment, system, medium and program product, and relates to the technical field of data processing. According to the method, an access request message of an access object is obtained, when the access request message comprises a request network mark field, the permission of the access object to access at least one application system is verified, and the access request message is determined by a network layer proxy server based on an access request sent by the access object and the request network mark field; the network source is used for indicating the access request; and when the permission of the access object to access each application system is verified to pass, sending an access request message to each application system. Therefore, the request network mark field can be added in the access request to indicate the network source of the access request, the real network source accessed by a user can be accurately identified, the authority control efficiency of accessing an application system by a visitor is improved, and the authority control cost of a service system is reduced because the authority verification logic is simple and hardware does not need to be improved.

A network device includes one or more memories and one or more processors. The one or more processors and the one or more memories are configured to obtain proxy information set to the network device, and communicate with a management server via a proxy server using the proxy information in a case where an aggregation mode is enabled and the proxy information is information received from the proxy server or in a case where the aggregation mode is not enabled, and not to communicate with the management server in a case where the aggregation mode is enabled and the proxy information is not the information received from the proxy server.

Customers of a software platform, such as a unified communications as a service platform, are enabled to control their own encryption keys used to encrypt and decrypt data from various communication services in the software platform. A key connector service is used to coordinate communications with a key management server for generating plaintext keys for data encryption and encrypted keys based on the plain text keys, and with a key broker server for storing and retrieving copies of the encrypted keys. A context identifier may be associated with an encrypted key and used to track which data has been encrypted with an underlying plaintext key. Examples of data encrypted may include conference recordings, webinar recordings, phone call recordings, voicemails, emails, and calendar tokens.

A monitoring device that is a relay device including a proxy server function of relaying communication between a device management service and a device determines whether or not a device receiving a device management service without using a proxy server function of the relay device has a self-monitoring function for the device management service, performs proxy setting on the device using proxy information of a proxy server function of the relay device in a case where the device has a self-monitoring function, and provides a registration instruction to a device to which the proxy setting has been performed to be re-registered as a device having a self-monitoring function in the device management service.

A digital object architecture infrastructure includes a handle system that stores handle data and a proxy server that caches handle data for rapid access. A client connects to the proxy server to request access to the handle data. When the handle data does not have access restrictions and is currently cached, the proxy server returns the handle data to the client without accessing the handle system. When the handle data does not have access restrictions and is not cached, the proxy server obtains the handle data from the handle system, caches a copy of the handle data for future access, and provides the handle data to the client. The proxy server may cache encrypted handle data that is subject to access restrictions, cannot be decrypted by proxy server, and can be provided to a client determined to be allowed access. The client can then decrypt the encrypted handle data.

The invention provides a government affair data sharing and information retrieval encryption chain method based on proxy re-encryption. The method is suitable for an NTRU lattice public key cryptosystem. In the system, a proxy server generates corresponding public and private key pairs for producers, requesters and themselves, and links operation metadata to ensure the traceability of the operation. A producer encrypts data by using a public key of the producer, and a generated keyword index table is uploaded to a proxy server. The requester interacts with the producer, generates a trapdoor by using the keyword and a private key of the requester, and submits the trapdoor to the proxy server; and the proxy server matches the keyword through a query function, and performs proxy re-encryption processing on the ciphertext. And after re-encryption is completed, the proxy server uploads the ciphertext and the operation record to the private chain, and the credibility and non-tampering property of the information are ensured by using a consensus mechanism of the block chain. And the proxy server transmits the re-encrypted ciphertext to the requester, and the requester decrypts the ciphertext by using a private key of the requester so as to obtain the required data.

Aspects of the subject disclosure may include, for example, deploying a reverse proxy server in front of a first type of web servers and a second type of web servers, where the first type of web servers is compliant with a current version of payment card industry data security standard (PCI DSS) and supports a first version of a transport layer security (TLS) protocol, and where the second type of web servers supports one or more TLS protocols that are older than the first version of TLS protocol, detecting, using the reverse proxy server, a TLS protocol version used in an incoming request, and determining, using the reverse proxy server, routing of the incoming request to one of the first type of web servers and the second type of web servers at least based on the detected TLS protocol version. Other embodiments are disclosed.

The invention discloses an electric power forward gatekeeper reverse penetration method and device, a server, a medium and a product. The method comprises the following steps: splitting target unit data of a production control region into a plurality of byte segments when allowed, and generating a corresponding redundant code for each byte segment; creating a first user-defined header field for each byte segment, and correspondingly creating a second user-defined header field for each redundant code; encoding the byte segments and the redundant codes by using a preset encoding mode, putting the encoded byte segment data into a corresponding first user-defined header field, and putting the encoded redundant code data into a corresponding second user-defined header field, and constructing an HTTP request corresponding to each byte segment, and reversely transmitting the HTTP request to the management information large area proxy service through the forward gatekeeper. Therefore, the sequence and the integrity of the data packets can be ensured, the security risk introduced through a third-party proxy is reduced, meanwhile, a reverse proxy server does not need to be configured and managed, the intermediate links of data transmission are reduced, and the delay is reduced.

The invention discloses an attribute-based access control method for realizing puncture revocation and outsourcing decryption under multiple authorizations, which is characterized in that a certificate issuing mechanism is responsible for initialization of a system and registration of an attribute issuing mechanism and a user, and the attribute issuing mechanism manages part of attributes authorized by the attribute issuing mechanism and generates a conversion key of an agency for outsourcing decryption; the data owner encrypts the data by using attribute-based encryption according to the defined access structure and the label structure; and the proxy server converts the access strategy formulated by the data owner into a puncture strategy and then punctures the conversion key so as to cancel the specified user group. According to the method, puncture revocation and outsourcing decryption attribute-based access control under a multi-authorization mechanism can be realized, and a feasible method is provided for lightweight and fine-grained user revocation under the multi-authorization mechanism.

A system including a server and a wireless RF access node connected to a communication network is provided. The server provides a first publish-subscribe broker of one or more publish-subscribe brokers forming part of a publish-subscribe broker network. The server connects to the wireless RF access node. A first entity connects via the wireless RF access node to the first publish-subscribe broker using a unicast IP address and thereafter publishes data packets. A second entity connects to the publish-subscribe broker network via any of the one or more publish-subscribe brokers. The server provides packet distribution services via the first publish-subscribe broker for the first entity, the publish-subscribe broker network routes communications from the first entity to the second entity when the second entity is subscribed; and the data packets published by the first entity are routed through the publish-subscribe broker to which the second entity is connected.