Privacy enhancing man-in-the-middle
AssigneeCisco Technology, Inc.
InventorsBlake Harrell Anderson, David McGrew
Life of this patent
Estimating the term…
Abstract
In one embodiment, a device in a network intercepts traffic sent from a first endpoint destined for a second endpoint. The device sends a padding request to the second endpoint indicative of a number of padding bytes. The device receives a padding response from the second endpoint, after sending the padding request to the second endpoint. The device adjusts the intercepted traffic based on the received padding response. The device sends the adjusted traffic to the second endpoint.
Claims20
A method comprising:
- intercepting, by a device in a network, traffic sent from a first endpoint destined for a second endpoint;
- sending, by the device, a padding request to the second endpoint indicative of a number of padding bytes;
- receiving, at the device, a padding response from the second endpoint, after sending the padding request to the second endpoint;
- adjusting, by the device, the intercepted traffic based on the received padding response;
- and
- sending, by the device, the adjusted traffic to the second endpoint.
An apparatus, comprising:
- one or more network interfaces to communicate with a network;
- a processor coupled to the network interfaces and configured to execute one or more processes;
- and
- a memory configured to store a process executable by the processor, the process when executed configured to:
- intercept traffic sent from a first endpoint destined for a second endpoint;
- send a padding request to the second endpoint indicative of a number of padding bytes;
- receive a padding response from the second endpoint, after sending the padding request to the second endpoint;
- adjust the intercepted traffic based on the received padding response;
- and
- send the adjusted traffic to the second endpoint.
A tangible, non-transitory, computer-readable medium storing program instructions that cause a device in a network to execute a process comprising:
- intercepting, by the device in the network, traffic sent from a first endpoint destined for a second endpoint;
- sending, by the device, a padding request to the second endpoint indicative of a number of padding bytes;
- receiving, at the device, a padding response from the second endpoint, after sending the padding request to the second endpoint;
- adjusting, by the device, the intercepted traffic based on the received padding response;
- and
- sending, by the device, the adjusted traffic to the second endpoint.
Dependencies are inferred from the claim text.