US 12,242,599 B1
Fine-grained security policy enforcement for applications
Philip David Hassey, Rye, CO (US); Yanran Zeng, Pittsburgh, PA (US); Brian David Rowe, Portland, OR (US); Kevin David Jamieson, North Vancouver (CA); Patrick David Stephen, Minneapolis, MN (US); and Karim Fanous, Seattle, WA (US)
Assigned to strongDM, Inc., Palo Alto, CA (US)
Filed by strongDM, Inc., Palo Alto, CA (US)
Filed on Sep. 27, 2024, as Appl. No. 18/899,488.
Int. Cl. G06F 21/54 (2013.01); G06F 21/55 (2013.01)
CPC G06F 21/54 (2013.01) [G06F 21/554 (2013.01); G06F 2221/033 (2013.01)] 28 Claims
OG exemplary drawing
 
1. A method for managing interactions with applications in a computing environment using one or more processors that are configured to execute instructions that cause performance of actions, comprising:
generating one or more state elements based on one or more application requests from a client, wherein the one or more state elements each include information associated with the one or more application requests or an application server that is a target of the one or more application requests;
enqueuing the one or more state elements in a state queue to reduce memory consumption that is associated with an application session for the one or more application requests, wherein the one or more application requests are forwarded to the application server; and
employing one or more application responses from the application server to perform further actions, including:
generating one or more message elements based on the one or more application responses, wherein the one or more message elements are enqueued in a message queue to reduce memory consumption associated in the application session;
determining a portion of the one or more state elements in the state queue that are associated the one or more message elements based on an association between the portion of the one or more state elements and the one or more message elements;
updating the portion of the one or more state elements to advance a protocol state based on the one or more message elements that are associated with the portion of the one or more state elements, wherein the one or more application responses are communicated to the client;
dequeing the portion of the one or more state elements from the state queue; and
dequeing the one or more message elements from the message queues.