Enforcing a secure transport protocol with dynamically updated stored data
AssigneeCisco Technology, Inc.
InventorPiotr Jerzy Kupisiewicz
Life of this patent
Estimating the term…
Abstract
In one example embodiment, a proxy server obtains, from a client, a query regarding a server with which the client is attempting to establish a communication session. Based on the query, the proxy server evaluates dynamically updated stored data to determine whether the dynamically updated stored data indicates that the server supports a secure transport protocol. Based on determining that the dynamically updated stored data indicates that the server supports the secure transport protocol, the proxy server provides a response to the client. The response causes the client to provide, to the server, an initial secure transport protocol message in the communication session.
Claims20
A method comprising:
- determining whether a server supports a secure transport protocol by passively monitoring communications to one or more clients from the server for redirections from a non-secure transport protocol to the secure transport protocol;
- in response to determining that the server supports the secure transport protocol, dynamically updating stored data to indicate that the server supports the secure transport protocol;
- obtaining a query regarding the server from a client that is attempting to establish a communication session with the server;
- based on the query, evaluating the stored data to determine whether the stored data indicates that the server supports the secure transport protocol;
- and
- in response to determining that the stored data indicates that the server supports the secure transport protocol, providing a response to the client, wherein the response causes the client to provide, to the server, an initial secure transport protocol message in the communication session.
An apparatus comprising:
- a network interface configured to enable network communications;
- and
- one or more processors in communication with the network interface, wherein the one or more processors are configured to:
- determine whether a server supports a secure transport protocol by passively monitoring communications to one or more clients from the server for security headers;
- in response to determining that the server supports the secure transport protocol, dynamically update stored data to indicate that the server supports the secure transport protocol;
- obtain a query regarding the server from a client that is attempting to establish a communication session with the server;
- based on the query, evaluate the stored data to determine whether the stored data indicates that the server supports the secure transport protocol;
- and
- in response to determining that the stored data indicates that the server supports the secure transport protocol, provide a response to the client, wherein the response causes the client to provide, to the server, an initial secure transport protocol message in the communication session.
One or more non-transitory computer readable storage media encoded with instructions that, when executed by a processor, cause the processor to:
- determine whether a server supports a secure transport protocol by actively providing a probe to the server and obtaining a communication from the server that is responsive to the probe, the communication including a security header;
- in response to determining that the server supports the secure transport protocol, dynamically update stored data to indicate that the server supports the secure transport protocol;
- obtain a query regarding the server from a client that is attempting to establish a communication session with the server;
- based on the query, evaluate the stored data to determine whether the stored data indicates that the server supports the secure transport protocol;
- and
- in response to determining that the stored data indicates that the server supports the secure transport protocol, provide a response to the client, wherein the response causes the client to provide, to the server, an initial secure transport protocol message in the communication session.
Dependencies are inferred from the claim text.