Altering cipher and key within an established session
AssigneeInternational Business Machines Corporation
InventorsSachin C. Punadikar, Pushkaraj B. Thorat, Sasikanth Eda, Sandeep R. Patil
Life of this patent
Estimating the term…
Abstract
An encrypted link is established with multiple ciphers. During a handshake protocol when establishing a secure session, at least two sets of cipher suites are transmitted to a server by a client. A choice cipher suite for each set of the at least two sets of cipher suites are received by the client from the server. The client selects a first choice cipher suite from among the choice cipher suites received from the server. The client establishes a connection with the server using the first choice cipher suite to encrypt the connection.
Claims20
A system for providing an encrypted link comprising:
- a memory containing two or more sets of cipher suites;
- and
- a processor in communication with the memory, wherein the computer system is configured to perform a method, the method comprising:
- sending, during a handshake, at least two sets of cipher suites to a server;
- receiving, from the server, a choice cipher suite for each set of the at least two sets of cipher suites;
- selecting a first choice cipher suite from a first set of cipher suites of the at least two sets of cipher suites;
- establishing a session with the server using the first choice cipher suite to encrypt the session;
- communicating with the server during the session using the first choice cipher suite to encrypt the session;
- detecting a status change for the session;
- changing to a second choice cipher suite from a second set of cipher suites of the at least two sets of cipher suites;
- and
- continuing communication with the server during the session using the second choice cipher suite to encrypt the session.
A method of establishing an encrypted link comprising:
- sending, during a handshake, at least two sets of cipher suites to a server;
- receiving, from the server, a choice cipher suite for each set of the at least two sets of cipher suites;
- selecting a first choice cipher suite from a first set of cipher suites of the at least two sets of cipher suites;
- establishing a session with the server using the first choice cipher suite to encrypt the session;
- communicating with the server during the session using the first choice cipher suite to encrypt the session;
- detecting a status change for the session;
- changing to a second choice cipher suite from a second set of cipher suites of the at least two sets of cipher suites;
- and
- continuing communication with the server during the session using the second choice cipher suite to encrypt the session.
A method of establishing an encrypted link comprising:
- receiving, during a handshake, at least two sets of cipher suites from a client;
- selecting a choice cipher suite for each set of the at least two sets of cipher suites;
- transmitting the choice cipher suites to the client;
- establishing a session with the client using a first choice cipher suite to encrypt the session, the first choice cipher suite selected from a first set of cipher suites of the at least two sets of cipher suites;
- communicating with the client during the session using the first choice cipher suite to encrypt the session;
- detecting a status change for the session;
- changing to a second choice cipher suite from a second set of cipher suites of the at least two sets of cipher suites;
- attempting to decrypt a portion of data transmitted via the session with one or more of the first choice cipher suite and the second choice cipher suite;
- and
- continuing communication with the client during the session using the second choice cipher suite to encrypt the session.
Dependencies are inferred from the claim text.