Proxy Server Session State Injection for Virtualized Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Systems lack a mechanism to inject necessary session state data into requests for remote resources, leading to session failures and errors when launching applications from web browsers to view resources like spreadsheets or presentations, causing user confusion.

Innovation Solution

A method and system that provide a modified URL from a proxy server to an application, enabling the proxy server to generate requests with necessary state information, allowing seamless access to protected resources without requiring user credentials or presenting errors.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a direct link is provided from application to external HTTP-based resource, then connection information is simplified, but necessary session state data is lost

Engineering Contradiction:
Improveconnection informationVSAvoidsession state data
Core Design Contradiction:
Ease of operationVSLoss of information

Solution Approach 1:

The patent introduces a proxy server as an intermediary component between the virtualized application and the external HTTP-based resource. The proxy server captures requests from the application, injects the necessary session state data (cookies, authentication information) into these requests, and forwards them to the external resource. This mediator approach allows the application to use simplified connection information while the proxy ensures complete request information is transmitted.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Device complexity

If session state data is not injected into requests, then system complexity is reduced, but session failures occur

Engineering Contradiction:
Improvesystem complexityVSAvoidsession success rate
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The proxy server performs preliminary action by pre-capturing and storing session state data during the initial browser authentication process. This session state information is then automatically injected into subsequent application requests without requiring real-time complexity in the application itself. The preliminary capture and storage of authentication credentials allows reliable session maintenance while keeping the application side simple.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If manual credential entry is required for each request, then security is improved, but user convenience deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system implements self-service by automatically managing authentication credentials through the proxy server. After initial user authentication in the browser, the proxy server captures and stores the session state data, then automatically injects this information into all subsequent application requests. This eliminates the need for users to manually re-enter credentials for each request, providing both security (credentials are managed securely) and convenience (automatic authentication).

Inventive Principle:
Principle #25Self-service

Data Source

PatentEP1955526B1Method and apparatus for providing authentication credentials from a proxy server to a virtualized computing environment to access a remote resource
Publication Date: 2010.05.05 CITRIX SYSTEMS INC
  • EP1955526B1 patent drawingFigure 1
  • EP1955526B1 patent drawingFigure 2A
  • EP1955526B1 patent drawingFigure 2B

AI summary

The present invention relates to a system for providing a modified URL from a proxy server to a virtualized computing environment attempting to access a remote resource. The modified URL may contain information which allows a proxy server which receives a request for the URL to generate a request for the remote resource where the request includes any state information necessary to access the resource. After transmitting the request, the proxy server may receive the requested resource; and transmit the resource to the application.