Client Agent HTTP Cookie Management in VPNs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies face challenges in managing HTTP cookies for user authentication in virtual private networks, particularly when multiple connections are made simultaneously, as different browsers have varying cookie management policies, and web browsers may not be available for non-HTTP connections.
Innovation Solution
A client agent intercepts and modifies HTTP communications at the network layer, adding, removing, or modifying cookies as needed, to facilitate secure authentication across various browsers and connection types, including non-HTTP communications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If web browsers are used to manage HTTP cookies for authentication, then authentication can be performed across multiple connections, but different browser cookie management policies (expiration time, accessibility) cause inconsistent authentication behavior
Solution Approach 1:
The patent introduces a client agent as an intermediary component that sits between the application and the web browser. This agent intercepts HTTP requests and responses, manages cookies independently of browser policies, and provides consistent authentication behavior across different connections. The agent acts as a mediator that translates between application requirements and browser cookie management, eliminating the inconsistency caused by varying browser policies.
2Adaptability or versatility
If web browsers are used to manage authentication cookies, then HTTP authentication can be achieved, but authentication fails for non-HTTP connections where browsers are not available
Solution Approach 1:
The client agent is designed to provide universal authentication support across multiple connection types (HTTP, non-HTTP, mobile, fixed). It implements a unified cookie management mechanism that works independently of the underlying connection type or browser availability, making the authentication system multi-functional and adaptable to various network environments.
3Productivity
If multiple simultaneous connections are made to a virtual private network, then network utilization is improved, but authentication cookies from the first connection are not automatically reused in subsequent connections
Solution Approach 1:
The client agent performs preliminary actions by intercepting and storing authentication cookies from the first connection before they expire or become inaccessible. It proactively manages the cookie cache and prepares authentication credentials in advance, so that when subsequent connections are established, the agent can immediately reuse the stored cookies without requiring user reauthentication, thus eliminating reauthentication time.
Data Source
AI summary
Systems and methods are described for using a client agent to manage HTTP authentication cookies. One method includes intercepting, by a client agent executing on a client, a connection request from the client; establishing, by the client agent, a transport layer virtual private network connection with a network appliance; transmitting, by the client agent via the established connection, an HTTP request comprising an authentication cookie; and transmitting, by the client agent via the connection, the connection request. A second method includes intercepting, by a client agent executing on a client, an HTTP communication comprising a cookie from an appliance on a virtual private network to the client; removing, by the client agent, the cookie from the HTTP communication; storing, by the client agent, the received cookie; transmitting, by the client agent, the modified HTTP communication to an application executing on the client; intercepting, by the client agent, an HTTP request from the client; inserting, by the client agent in the HTTP request, the received cookie; and transmitting the modified HTTP request to the appliance. Corresponding systems are also described.