Web Control Adaptation for VPN Integration via Custom Scheme Hooking

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Operating systems often restrict complete integration between applications and systems on a computing device, limiting the ability of web control applications to support and interact with certain scheme types like HTTP or HTTPS, preventing seamless integration with VPN logic.

Innovation Solution

A client application modifies the scheme support function of a web control application to indicate non-support for specific scheme types, allowing a custom scheme function to intercept and handle requests, which are then transmitted through a VPN for integration with VPN logic, enabling web control adaptation and hooking for previously unsupported scheme types.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If the web control application uses default scheme support functions, then it can handle standard web protocols, but it cannot intercept or integrate with VPN logic for custom scheme types

Engineering Contradiction:
Improvescheme type supportVSAvoidintegration complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent introduces a custom scheme function as an intermediary layer between the web control application and VPN logic. This custom scheme function acts as a mediator that the web control application does not natively support, enabling interception of requests and integration with VPN encryption without modifying the core web control application architecture. The intermediary handles the complexity of VPN integration while maintaining compatibility with standard web protocols.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If the scheme support function returns true for a scheme type, then the web control application handles it natively, but custom scheme functions cannot intercept the requests

Engineering Contradiction:
Improverequest handlingVSAvoidhooking capability
Core Design Contradiction:
Ease of operationVSAdaptability or versatility

Solution Approach 1:

The patent inverts the traditional approach by having the custom scheme function registered first, before the web control application's native scheme support is activated. By registering the custom scheme function with a specific scheme type that the web control application does not natively support (returning false), the system enables interception capability. This inversion allows the custom function to capture requests that would otherwise pass through untouched.

Inventive Principle:
Principle #13The other way round (Inversion)

3Reliability

If the web control application integrates with VPN logic, then secure communication is enabled, but the application loses ability to freely access non-VPN resources

Engineering Contradiction:
Improvesecure communicationVSAvoidresource accessibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent segments the network communication into distinct pathways: VPN-protected traffic and non-VPN traffic. The custom scheme function intercepts only specific scheme types that require VPN protection, while allowing other scheme types to access resources freely without VPN overhead. This segmentation enables selective application of VPN encryption based on the scheme type, maintaining both security and resource accessibility.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS11729250B2Web adaptation and hooking for virtual private integration systems and methods
Publication Date: 2023.08.15 CITRIX SYSTEMS INC
  • US11729250B2 patent drawing
  • US11729250B2 patent drawing
  • US11729250B2 patent drawing

AI summary

Systems and method for web control adaptation and hooking for virtual private network integration are provided herein. A client application executing on a client device can modify a scheme support function of a web control application to return a first value in response to a first scheme type. The first value can indicate that the web control application does not support the first scheme type. A custom scheme function can be registered to handle the first scheme type and can intercept requests of the first scheme type. The custom scheme function can transmit the requests to one or more URLs corresponding to one or more applications through a virtual private network (VPN). The custom scheme function can forward, to the web control application for rendering on the client device, the data corresponding to the application retrieved by the custom scheme function through the VPN.