Brokering state information and identity among user agents, origin servers ...

A

r“ Eifit

A, ”

504,51 504,512 504-51° L5Q4,512 Fig. 5 . § (TRANSPARENT) 5 5 5 PROXY(502 1102 1 '

I PII5>“<"$§l<‘>”¢'I§s I I <°'°“°~AL~ FOR

E FORWARDING AND/OR

E _M@°___ 5 . FAILOVER) 502 1102

E PROCESSOR(S) 5 5

5 6_02 5 s I

LlNK(S) TO CLIENT, I 5 CLIENTIS) Q94 I

5 ORIGIN SERVER 5 5

E L4 ORIGIN SERVER(S) Q I POLICY MODULE I

5 lDENTlFlER(S) @ 5 I

E -‘iii? : :

= 5 ; PROXY & POLICY MAY EACH BE F1III:IIIII$IIIIIIIIIIIIIIIII:> ON A DIFFERENT CQMPUTER POHCY MQDULEISI I I ALTERNATIVELY PROXY &

‘ E 5 POLICY MAY BOTH BE on THE 'ii1:1:1:11:1:1:::::::::::::::::::::::t'" SAME COMPUTER

SECONDPROXY

Fig. 6

POLICY MODULE CLIENT NOT AUTHENTICATE AUTHENTICATES CLIENT KJQ UNAUTHORIZED REQUEST 7

DI
O4

I I

/ BETWEEN CLIENT AND ORIGIN COOKIE WITH ORIGIN SERVE SERVER Zgg L24

R

PROXY CONTINUES PROXY NEGOTIATES A TRANSPARENT FORWARDING SEPARATE STATE TOKEN Fig. 7

ill

804 REDIRECT
TO ID BROKER

m REQUEST

P

USER TRANSPARENT IDENTITY ORIGIN AGENT PROXY BROKER SERVER @ QQZ 800 608 Q2

802 REQUEST

Q FURTHER
INTERACTION

18.1.-1 REQUEST i gag REQUEST I
P

V m FURTHER INTERACTION

Fig. 8

USER NOVEL PROXY LOGIN IDENTITY AGENT 502/1102 SERVER BROKER jQQ 900, 608 800, 608

I Q32 REQUEST

SERVER Q5 LOGIN 4 P @ REDIRECT TO ID BROKER 4 §)0_8 REQUEST P fl

FURTHER ACTIVITY W TH USER AGENT, I\ OVEL PROXY, AND ORIGIN SERVER (SEE FIGURES 8 & 11 STEPS 806-820) I

Fig. 9

SIGNAL PAIR 1000
FIRST SIGNAL 1002
REDIRECTION COMMAND WITH POLICY I

MODULE AS TARGET 1006

T
Fig. 10

EQUEST

USER NOVEL PROXY IDENTITY ORIGIN AGENT KNOWN TO BROKER SERVER JQ USER 1102 aoo eos _1Q_2_

8_0_2 R

P E FURTHER INTERACTION

Fig. 11