Communication session resumption
AssigneeAmazon Technologies, Inc.
InventorNima Sharifi Mehr
Life of this patent
Estimating the term…
Abstract
The present document describes a communication session resumption mechanism. A client computer system establishes a communication session to a server computer that is a member of a set of related server computers. As a result of establishing the communication session, the server computer identifies the set of related server computers to the client computer system. The set of related server computers share communication session information with each other, allowing the client computer system to resume the communication session with another server computer belonging to the set of related server computers. The communication session may be specified to the other server computer by the client computer system by providing a session identifier or a session ticket.
Claims20
A non-transitory computer-readable storage medium having stored thereon executable instructions that, when executed by one or more processors, cause the one or more processors to at least:
- establish a cryptographically protected communication session with a first server, the cryptographically protected communication session having session parameters negotiated by the one or more processors and the first server;
- receive a list of servers from the first server, the list of servers identifying a plurality of servers with which the cryptographically protected communication session may be resumed;
- store the session parameters and the list of servers in a database, the session parameters being associated with the list of servers, wherein the session parameters include at least a cryptographic key or a cipher suite;
- determine that a second server is in the list of servers;
- as a result of information that identifies a session associated with the session parameters being provided by the second server, retrieve, from the database, the session parameters associated with the list of servers;
- and
- resume the cryptographically protected communication session with the second server based at least in part on the session parameters such that data is securely communicated to the second server using at least the cryptographic key or the cipher suite of the session parameters.
A system comprising a first server and a second server that at least:
- establishes, between the first server and a client computer, a first communication session in accordance with a first set of session parameters, wherein the first set of session parameters includes a cryptographic key;
- sends, from the first server, to the client computer, first information that identifies additional servers with which the first set of session parameters enable establishment of communication sessions, the additional servers including the second server;
- makes available, to the second server, the first set of session parameters;
- receives, at the second server, from the client computer, a request to establish a second communication session with the second server;
- and
- as a result of the second server providing second information that identifies the first communication session, establishes, between the second server and the client computer, the second communication session in accordance with a second set of session parameters, the second set of session parameters based at least in part on the first set of session parameters, wherein the second communication session enables data to be communicated between the second server and the client computer using at least the cryptographic key of the first set of session parameters.
A computer-implemented method comprising:
- receiving, from a first client computer system, a first request to establish a first communication session;
- responding to the first request by providing, to the first client computer system, information that identifies a set of servers with which the first communication session may be resumed;
- storing, in a data store accessible to the set of servers, information that enables access to a first set of session parameters associated with the first communication session, wherein the first set of session parameters includes at least a cryptographic key or a cipher suite and is determined at least in part by a handshake between the first client computer and a server of the set of servers;
- obtain, by a different server of the set of servers, the cryptographic key or the cipher suite of the first set of session parameters as a result of the different server providing the information that enables access to the first set of session parameters;
- and
- resume the first communication session such that cryptographically protected data is exchanged between the first client computer and the different server of the set of servers based at least in part on the cryptographic key or the cipher suite of the first set of session parameters.
Dependencies are inferred from the claim text.