公开(公告)号：EP4518252A1

公开(公告)日：2025-03-05

申请号：EP24196015.2

申请日：2024-08-22

Applicant: Lemon Inc.

Inventor： TIAN, Zhipeng ,  DU, Mu ,  HAIMANOT, Daniel ,  WU, Keyi ,  FANG, Gan ,  LUO, Zhengqin

IPC: H04L9/40 ,  H04L67/63

Abstract: A third party gateway (230) for validating egress traffic in a computer network system is provided. The third party gateway (230) includes a proxy (240, 250) and a gateway agent (260). The proxy (240, 250) includes a termination proxy and a forward proxy. The proxy (240, 250) is configured to terminate Transport Layer Security communication for the egress traffic. The proxy (240, 250) is further configured to forward the egress traffic to the gateway agent (260). The gateway agent (260) is configured to validate the egress traffic as valid traffic or invalid traffic based on predetermined validation requirements. The proxy (240, 250) is further configured to receive the valid traffic or the invalid traffic from the gateway agent (260), and to forward the valid traffic to a destination service or to block the invalid traffic.

公开(公告)号：EP4518249A1

公开(公告)日：2025-03-05

申请号：EP24195056.7

申请日：2024-08-16

Applicant: Lemon Inc.

Inventor： TIAN, Zhipeng ,  LUO, Zhengqin ,  DU, Mu ,  LEE, Joohwi ,  LUO, Chongxin ,  WANG, Sen ,  ZHANG, Jianqing

IPC: H04L9/40 ,  H04L67/02 ,  H04L67/56

Abstract: A security gateway (360, 460) for validating ingress traffic in a computer network system, and a method for validating the same. The security gateway (360, 460) includes a proxy server (220, 320, 420) and a gateway agent (340, 440). The proxy server receives the ingress traffic and/or the response and forwards the ingress traffic and/or the response to the gateway agent (340, 440). The gateway agent (340, 440) validates the ingress traffic and/or the response as valid ingress traffic and/or valid response or invalid ingress traffic and/or invalid response based on predetermined validation requirements. The proxy server further receives the valid ingress traffic from the gateway agent and forwards the valid ingress traffic to a backend service and/or receives the valid response from the gateway agent and forwards the valid response to a client device or blocks the invalid ingress traffic and/or invalid response.