Patent ID: 9154484
Filing Date: 2015-10-06
Classification: H04L

Abstract:
1. A method comprising: authenticating an endpoint based on a user identity and a credential; generating a hypertext transfer protocol (HTTP) packet including the user identity in an inline header; sending the HTTP packet including the user identity in the inline header to a policy enforcement device through a network address translation (NAT) device and an edge router, wherein the NAT device does not modify or remove the user identity from the inline header, and wherein the edge router reads the user identity from the inline header and incorporates the user identity into a control portion of the HTTP packet; receiving traffic from the policy enforcement device, wherein the traffic is filtered according the user identity; and sending a subsequent connection request to the policy enforcement device, wherein the subsequent connection request includes a session identifier, wherein the session identifier is included in a user hint transmission control protocol (TCP) option in a synchronization packet as the subsequent connection request.