Patent ID: 9716701
Date: 2017-07-25
CPC Classifications: H04L

Claim:
1. A computer-implemented method for scanning web traffic, the method comprising: receiving, by a local proxy, a first web traffic transmitted by a local client, wherein the local proxy and the local client are separate applications running on a same endpoint computer; the local proxy obtaining a customer identity string that identifies a user of the local client as a paying customer to a software as a service (SaaS) scanning service; the local proxy including the customer identity string in a header of the first web traffic, encrypting the header using a same symmetric encryption key shared by both the local proxy and an SaaS scanning system that provides the SaaS scanning service, and thereafter transmitting the first web traffic to the SaaS scanning system; the SaaS scanning system decrypting the header using the same symmetric encryption key and authenticating the customer identity string included in the first web traffic to verify that the user of the local client is subscribed to the SaaS scanning service; and the SaaS scanning system scanning the first web traffic for web threats, wherein the first web traffic is transmitted by the local client to the local proxy using a first communication protocol that is different from a second communication protocol employed by the local proxy to transmit the first web traffic to the SaaS scanning system.