Loading patent…
AssigneeInternational Business Machines Corporation
InventorsCheng-Ta Lee, Wei-Hsiang Hsiung, Wei-Shiau Suen, Ming-Hsun Wu
Estimating the term…
A network-based appliance includes a mechanism to provide TLS inspection with session resumption, but without requiring that a session cache be maintained. To this end, the inspector is configured to cause the TLS client to participate in maintaining the session context, in effect on behalf of the TLS inspector. In operation, when the inspector first receives the session ticket from the TLS server, and in lieu of caching it, the inspector generates and issues to the client a composited ticket that includes the original ticket and session context information that contains the session key. The composited ticket is encrypted by the inspector to secure the session information. When the TLS client presents the composited session ticket to resume the TLS connection, the inspector decrypts the ticket and retrieves the session context from it directly. The inspector then uses the original session ticket to resume the TLS session.
A method operative within an intermediary positioned between a Transport Layer Security (TLS) client and a TLS server and that provides a TLS inspection function during a TLS session, comprising:
An apparatus positioned between a Transport Layer Security (TLS) client and a TLS server and that provides a TLS inspection function during a TLS session, comprising:
A computer program product in a non-transitory computer readable medium for use in a data processing system positioned between a Transport Layer Security (TLS) client and a TLS server and that provides a TLS inspection function during a TLS session, the computer program product holding computer program instructions executed by the data processing system, the computer program instructions comprising program code configured:
Dependencies are inferred from the claim text.