SELECTIVE ENCRYPTION OF TUNNELED ENCRYPTED TRAFFIC

    公开(公告)号:US20210021579A1

    公开(公告)日:2021-01-21

    申请号:US16517146

    申请日:2019-07-19

    Abstract: Described embodiments provide systems and methods for selectively encrypting and decrypting portions of a network flow by intermediary devices. A first device may identify a protocol used by a network flow traversing the first device via one or more packets of the protocol. The first device may determine that a level of encryption for the network flow meets a predetermined threshold. The first device may receive networks packets to be communicated between a sender and a receiver. The packets may include a first portion that is encrypted and a second portion that has clear text information. The first device may encrypt the second portion of the one or more packets. The first device may forward the network packets with the first portion and the encrypted second portion via a tunnel to a second device for decryption of the encrypted second portion for forwarding to the receiver.

    WebRTC API redirection with fallbacks

    公开(公告)号:US10855755B2

    公开(公告)日:2020-12-01

    申请号:US16229251

    申请日:2018-12-21

    Abstract: A computing system includes a virtual desktop server and a client computing device. The virtual desktop server includes a real-time media application to provide real-time communications (RTC), a native RTC engine, and an API code redirection module. The API code redirection module redirects original APIs of the real-time media application so that a portion of the real-time media application is to be redirected. The client computing device includes a client RTC API engine reporting to the API code redirection module on capabilities of the client computing device to execute the redirected portion of the real-time media application. The API code redirection module switches to a fallback mode if the client computing device has limited capabilities. In the fallback mode, original APIs are used so that the native RTC engine executes at least part of the portion of the real-time media application.

    Detection and repainting of semi-transparent overlays

    公开(公告)号:US10742725B2

    公开(公告)日:2020-08-11

    申请号:US16228945

    申请日:2018-12-21

    Abstract: A computing system includes a video source to provide a video stream and a virtual desktop server. The virtual desktop server includes a media application to provide media streaming that includes the video stream and an overlay on the video stream. An accelerated content redirection module redirects a portion of the media streaming by providing a placeholder to indicate positioning geometry of the video stream within a media window, with the placeholder to include the overlay. Providing the placeholder includes providing a first color for an underlay of the placeholder at a first time, and providing a second color for the underlay of the placeholder at a second time. A geometry tracking module detects the placeholder and determines positioning geometry associated therewith, and determines a color and an alpha blending factor of the overlay based on calculations involving the first and second colors for the underlays of the placeholder.

    SYSTEMS AND METHODS FOR UPDATING A CONFIGURATION OF AN SD-WAN APPLICATION USING CONNECTIVITY OR USAGE DATA

    公开(公告)号:US20230231768A1

    公开(公告)日:2023-07-20

    申请号:US17580304

    申请日:2022-01-20

    CPC classification number: H04L41/082 H04L41/147

    Abstract: Systems and methods for updating a configuration of an SD-WAN application using connectivity or usage data include a software-defined wide area network (SD-WAN) application executing on a client device receiving one or more of historic or predictive data relating to connectivity or usage of the client device. The SD-WAN application detects an update condition for the SD-WAN application using the one or more historic or predictive data relating to the connectivity or usage of the client device. The SD-WAN application updates a configuration of the SD-WAN application responsive to detecting the update condition. The SD-WAN application transmits application traffic using the updated configuration.

    Selective encryption of tunneled encrypted traffic

    公开(公告)号:US11349820B2

    公开(公告)日:2022-05-31

    申请号:US16517146

    申请日:2019-07-19

    Abstract: Described embodiments provide systems and methods for selectively encrypting and decrypting portions of a network flow by intermediary devices. A first device may identify a protocol used by a network flow traversing the first device via one or more packets of the protocol. The first device may determine that a level of encryption for the network flow meets a predetermined threshold. The first device may receive networks packets to be communicated between a sender and a receiver. The packets may include a first portion that is encrypted and a second portion that has clear text information. The first device may encrypt the second portion of the one or more packets. The first device may forward the network packets with the first portion and the encrypted second portion via a tunnel to a second device for decryption of the encrypted second portion for forwarding to the receiver.

    SYSTEMS AND METHODS FOR MANAGING STREAMS OF PACKETS VIA INTERMEDIARY DEVICES

    公开(公告)号:US20200374238A1

    公开(公告)日:2020-11-26

    申请号:US16588638

    申请日:2019-09-30

    Abstract: Virtual application and desktop delivery may be optimized by supplying application metadata and user intent to the device between a client and a server hosting resources for the delivery. The data packets used to deliver the virtual application or desktop may be also tagged with references to the application. By supplying the metadata and tagging packets with the metadata, an intermediary network device may provide streams of data packets at the target QoS. In addition, the device may apply network resource allocation rules (e.g., firewalls and QoS configuration) for redirected content retrieved by the client out of band relative to a virtual channel such as the Internet. The network resource allocation rules may differ for different types of resources accessed. The device may also control a delivery agent on the server to modify communication sessions established through the virtual channels based on network conditions.

Patent Agency Ranking