Synthetic request injection to generate metadata for cloud policy enforcement
US11178188B1 · kind B1 · utility
Assignee
Inventors
Key dates
| Filing date | Apr 22, 2021 |
| Grant date | Nov 16, 2021 |
| Priority date | — |
| Expiry date | Apr 22, 2041 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/0853
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
The technology disclosed describes a system. The system comprises a network security system interposed between clients and cloud applications. The network security system is configured to receive from a client an incoming request to access a cloud application in an application session. The network security system is further configured to analyze the incoming request and detect absence of at least some metadata required to enforce a security policy on the incoming request. The network security system is further configured to hold the incoming request, generate a synthetic request, and inject the synthetic request into the application session to transmit the synthetic request to the cloud application. The synthetic request is configured to retrieve otherwise absent metadata from the cloud application. The network security system is further configured to receive a response to the synthetic request from the cloud application. The response supplies the otherwise absent metadata.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.