Patent ID: 8478894

Claim:
A method of controlling data transfer, the method comprising: receiving, by a proxy comprising at least one processor, a first request sent from a Web client to request data from a Web application; sending, by the proxy, the first request to the Web application; receiving, by the proxy, response data from the Web application that is responsive to the first request sent from the Web client, wherein the proxy monitors requests and responses between the Web client and the Web application, and wherein the proxy is configured to be implemented by at least one computer; identifying, by the proxy, application data in the response data that will also be included as part of a second, different request that will be subsequently sent from the Web client to the Web application, wherein the identified application data comprises only a subset of the response data; modifying, by the proxy, the response data to cloak only the identified application data using a cloak algorithm to form cloaked application data configured to pass through a security filter without rejection by the security filter, wherein the proxy communicatively couples the Web application to the security filter, and wherein the cloak algorithm implements character exchange logic to transform one or more characters of the identified application data into one or more other characters or sequences; sending the cloaked application data from the proxy to the Web client via the security filter; subsequent to sending the cloaked application data from the proxy to the Web client, receiving, by the proxy, the second request comprising the cloaked application data from the Web client via the security filter, wherein the second request is distinct from both the response data and from the first request; reverting, by the proxy, the cloaked application data of the second request to a pre-cloak state using an uncloak algorithm, wherein the uncloak algorithm is a reverse operation of the cloak algorithm that was previously used to cloak the identified application data of the response data that was previously received from the Web application, and wherein the uncloak algorithm transforms the one or more other characters or sequences of the cloaked application data back into the one or more characters; and sending the reverted application data comprising the one or more characters from the proxy to the Web application.