SSLVPN Gateway URL Rewriting via Character Transposition

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

SSLVPN implementations face significant processing challenges due to the need for packet-by-packet inspection and breakdown of absolute URLs, which demand substantial computational resources and lengthy buffering.

Innovation Solution

The method involves transposing absolute URLs into relative URLs within SSLVPN gateways, preserving the original packet buffer and reducing the number of scans, by modifying absolute URLs to start with a '/' and replacing the ':' character, thus avoiding the need for component breakdown and minimizing processing intensity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Manufacturing precision

If absolute URLs are processed by breaking down into components and rewriting, then URL rewriting accuracy is improved, but processing capacity and computational demand increase substantially

Engineering Contradiction:

ImproveURL rewriting accuracyVSAvoidprocessing capacity

Core Design Contradiction:

Manufacturing precisionVSProductivity

Solution Approach 1:

Instead of breaking down absolute URLs into components and rewriting them, the patent inverts the approach by directly transposing absolute URLs into relative URLs through character replacement (replacing ':' with '/') and prefix modification (adding '/' at the beginning). This avoids the complex component breakdown process while achieving the same URL rewriting goal, thereby reducing computational demand and improving processing capacity.

Inventive Principle:

Principle #13The other way round (Inversion)

2Manufacturing precision

If packet-by-packet inspection is performed for URL rewriting, then URL rewriting completeness is improved, but processing time and buffering requirements increase

Engineering Contradiction:

ImproveURL rewriting completenessVSAvoidprocessing time

Core Design Contradiction:

Manufacturing precisionVSLoss of time

Solution Approach 1:

The patent extracts only the essential transformation operations needed for URL rewriting (character replacement and prefix modification) from the complete packet inspection process. By focusing on these specific extraction operations rather than comprehensive packet-by-packet inspection, the system achieves URL rewriting completeness while significantly reducing processing time and buffering requirements.

Inventive Principle:

Principle #2Taking out (Extraction)

3Manufacturing precision

If absolute URLs are scanned and buffered for processing, then URL rewriting accuracy is improved, but buffering requirements and memory usage increase

Engineering Contradiction:

ImproveURL rewriting accuracyVSAvoidbuffering requirements

Core Design Contradiction:

Manufacturing precisionVSQuantity of substance

Solution Approach 1:

The patent employs a disposable approach where minimal buffering is used only for the essential transposition operation. Instead of maintaining large buffers for complete URL scanning and component extraction, the system uses small, temporary buffers that are quickly processed and discarded, achieving URL rewriting accuracy with significantly reduced buffering requirements and memory usage.

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

Data Source

PatentEP2002362B1Method and system for providing improved URL mangling performance using fast re-write

Publication Date: 2019.06.12 CISCO TECHNOLOGY INC

Figure 1
Figure 2
Figure 3

AI summary

Method and system for providing improved uniform resource locator (URL) mangling performance using fast re-write including scanning a web page, detecting an absolute URL in the web page, and modifying the detected absolute URL to a corresponding relative URL in the web page, is disclosed.