Abstract: Methods and systems for implementing single sign on (SSO) and/or conditional access for client applications are described herein. The system may comprise an identity provider gateway, and the system may authenticate a user of the client application using the identity provider gateway. In some aspects, a secure communication tunnel may be established between the client application and the identity provider gateway, and the secure communication tunnel may use, for example, a client certificate. The identity provider gateway may grant or deny the client application access to one or more resources based on information associated with the client certificate.

Abstract: Methods and systems for implementing single sign on (SSO) and/or conditional access for client applications are described herein. The system may comprise an identity provider gateway, and the system may authenticate a user of the client application using the identity provider gateway. In some aspects, a secure communication tunnel may be established between the client application and the identity provider gateway, and the secure communication tunnel may use, for example, a client certificate. The identity provider gateway may grant or deny the client application access to one or more resources based on information associated with the client certificate.

Abstract: Methods and systems for implementing single sign on (SSO) and/or conditional access for client applications are described herein. The system may comprise an identity provider gateway, and the system may authenticate a user of the client application using the identity provider gateway. In some aspects, a secure communication tunnel may be established between the client application and the identity provider gateway, and the secure communication tunnel may use, for example, a client certificate. The identity provider gateway may grant or deny the client application access to one or more resources based on information associated with the client certificate.

Abstract: A user device obtains a set of one or more public key certificates for a server received from a directory service, and a current public key certificate of the server received from the server. The user device compares the current public key certificate received from the server with the set of public key certificates received from the directory service. If the current public key certificate of the server matches one of the public key certificates in the set of public key certificates for the server, the authenticity of the server is confirmed, and communications are permitted between the user device and the server. Communications between the user device and the server may be prevented unless the current public key certificate from the server matches a public key certificate in the set of public key certificates received from the directory service.

Abstract: Methods and systems for implementing single sign on (SSO) and/or conditional access for client applications are described herein. The system may comprise an identity provider gateway, and the system may authenticate a user of the client application using the identity provider gateway. In some aspects, a secure communication tunnel may be established between the client application and the identity provider gateway, and the secure communication tunnel may use, for example, a client certificate. The identity provider gateway may grant or deny the client application access to one or more resources based on information associated with the client certificate.

Abstract: A user device obtains a set of one or more public key certificates for a server received from a directory service, and a current public key certificate of the server received from the server. The user device compares the current public key certificate received from the server with the set of public key certificates received from the directory service. If the current public key certificate of the server matches one of the public key certificates in the set of public key certificates for the server, the authenticity of the server is confirmed, and communications are permitted between the user device and the server. Communications between the user device and the server may be prevented unless the current public key certificate from the server matches a public key certificate in the set of public key certificates received from the directory service.

Abstract: An exemplary method performed by a proxy server located between a content server and a client browser for reducing effects of network latency therebetween comprises intercepting a request from the client browser for a resource at the content server, obtaining a response by the content server to the request, determining that the response would, if unmodified, require a plurality of communications between the content server and the client browser in the absence of the proxy server, modifying the response to reduce a network latency associated with the plurality of communications for accessing information located externally to the response, and transmitting the modified response to the client browser for use thereby.

Abstract: Techniques are disclosed for constructing web (or other networked) documents as parameterized forms of other networked documents. For example, a document may be represented as a collection of changes to be applied to a first document which is incorporated by reference in the second document. Instead of delivering the entire document over a slower network connecting the content server to the content browser, the document is delivered as a collection of changes to previously delivered documents that are much closer to the user's content browser. In an exemplary embodiment of the invention, special software is not necessarily required at the end user for reconstructing the second document from the set of base documents and the set of modifications to the base documents.

Abstract: Methods and apparatus for enabling collaboration with web pages and other resources is described. A method includes the step of establishing a collaboration session between a first client and a second client. A requested resource is cached with the session host in response to a request having a first uniform resource locator (URL) issued by the first client, if the requested resource is a pre-determined type of resource. A second URL is provided to the second client. The second URL identifies the requested resource or the cached resource in accordance with whether the requested resource is cached. Apparatus for enabling collaboration includes a web server, a cache, and a filter. The web server provides a requested web page in response to a first client's request. The filter stores the requested web page in the cache, if the requested web page is a pre-determined type of web page.

Abstract: A system and method to create a base file for a document class is described. In one example embodiment, the system comprises a monitor to maintain a list of document components for a document class and an associated frequency of requests for the document components; a selector to select a plurality of document components with a highest frequency of request; and an aggregator to aggregate the plurality of document components to create a base file for the document class.

Abstract: The present application discloses methods and systems for configuring and managing class-based condensation. One aspect thereof includes an automated mechanism to receive a user request for a document, retrieve the document from a content server, and compare the document to a base file of a document class. If a delta-difference between the requested document and the base file is less than a predetermined threshold value, create a condensed document by abbreviating redundancy in the requested document relative to the base file of the associated document class, associate the document with the document class, and transmit the condensed document to the user. The documents within a document class possess similar layouts.

Abstract: An exemplary method performed by a proxy server located between a content server and a client browser for reducing effects of network latency therebetween comprises intercepting a request from the client browser for a resource at the content server, obtaining a response by the content server to the request, determining that the response would, if unmodified, require a plurality of communications between the content server and the client browser in the absence of the proxy server, modifying the response to reduce a network latency associated with the plurality of communications for accessing information located externally to the response, and transmitting the modified response to the client browser for use thereby.

Abstract: Techniques are disclosed for anticipating a user's request for documents or other content from a server (typically via a URL), precomputing the anticipated content, and caching the precomputed information at a cache in proximity to the content server. The cache stores the response to the anticipated request, until the user requests the same content. The anticipated requests can be precomputed based on triggers reflecting users' historical access patterns.

Abstract: The present application discloses methods and systems for configuring and managing class-based condensation. One aspect thereof includes an automated mechanism to receive a user request for a document, retrieve the document from a content server, and compare the document to a base file of a document class. If a delta-difference between the requested document and the base file is less than a predetermined threshold value, create a condensed document by abbreviating redundancy in the requested document relative to the base file of the associated document class, associate the document with the document class, and transmit the condensed document to the user. The documents within a document class possess similar layouts.

Abstract: The present application discloses methods and systems for configuring and managing class-based condensation. One aspect thereof includes an automated mechanism to receive a user request for a document, retrieve the document from a content server, and compare the document to a base file of a document class. If a delta-difference between the requested document and the base file is less than a predetermined threshold value, create a condensed document by abbreviating redundancy in the requested document relative to the base file of the associated document class, associate the document with the document class, and transmit the condensed document to the user. The documents within a document class possess similar layouts.

Abstract: A system and method to create a base file for a document class is described. In one example embodiment, the system comprises a monitor to maintain a list of document components for a document class and an associated frequency of requests for the document components; a selector to select a plurality of document components with a highest frequency of request; and an aggregator to aggregate the plurality of document components to create a base file for the document class.

Abstract: A proxy implements automated version management of objects embedded in a document to eliminate/reduce network delays associated with requests to validate the objects in a browser (or other) cache. In an exemplary embodiment, the proxy obtains the document, assigns a unique URL to an embedded object, assigns an extended cache life to the object (via a header), updates the object's URL reference in the document, and sends the modified document to the user. When the user requests the object, the proxy obtains the object, attaches the new header, and transmits the object to the user. Because of its extended cache life, the object can subsequently be reused without time-consuming validation with the content server. In another embodiment, storage and validation of objects at the proxy (rather than at the cache) achieves reduced (and faster) validation while allowing refreshing prior to expiration.

Abstract: Techniques are disclosed for constructing web (or other networked) documents as parameterized forms of other networked documents. For example, a document may be represented as a collection of changes to be applied to a first document which is incorporated by reference in the second document. Instead of delivering the entire document over a slower network connecting the content server to the content browser, the document is delivered as a collection of changes to previously delivered documents that are much closer to the user's content browser. In an exemplary embodiment of the invention, special software is not necessarily required at the end user for reconstructing the second document from the set of base documents and the set of modifications to the base documents.

Abstract: Techniques are disclosed for constructing web (or other networked) documents as parameterized forms of other networked documents. For example, a document may be represented as a collection of changes to be applied to a first document which is incorporated by reference in the second document. Instead of delivering the entire document over a slower network connecting the content server to the content browser, the document is delivered as a collection of changes to previously delivered documents that are much closer to the user's content browser. In an exemplary embodiment of the invention, special software is not necessarily required at the end user for reconstructing the second document from the set of base documents and the set of modifications to the base documents.

Abstract: Methods and apparatus for enabling collaboration with web pages and other resources is described. A method includes the step of establishing a collaboration session between a first client and a second client. A requested resource is cached with the session host in response to a request having a first uniform resource locator (URL) issued by the first client, if the requested resource is a pre-determined type of resource. A second URL is provided to the second client. The second URL identifies the requested resource or the cached resource in accordance with whether the requested resource is cached. Apparatus for enabling collaboration includes a web server, a cache, and a filter. The web server provides a requested web page in response to a first client's request. The filter stores the requested web page in the cache, if the requested web page is a pre-determined type of web page. A number of predetermined characteristics for caching are described in various embodiments of the methods and apparatus.