Systems and methods for client collaborated migration of live TLS connection

A system comprising:

• a processor;
• and
• a memory to hold a set of program code instructions, in which the set of program code instructions comprises program code to perform:
• maintaining a client-server architecture, the client-server architecture comprising a client, a server, and an intermediate server running a first application for handling messages transmitted between the client and the server, wherein the messages transmitted between the client and the intermediate server are secured using an encryption key over a first TCP connection and the messages transmitted between the intermediate server and the server are over a second TCP connection, initiating a move from the first application to a second application, transferring a TCP socket handle used by the first application to the second application by at least detecting a negotiation message sent from the client to the first application, negotiating a new encryption key between the client and the second application, and processing the messages between the client and the second application using the new encryption key by having the second application receive messages using the TCP socket handle transferred from the first application.

A computer program product including a non-transitory computer readable medium having instructions which, when executed by a processor, causes the processor to perform a process, the process comprising:

• maintaining a client-server architecture, the client-server architecture comprising a client, a server, and an intermediate server running a first application for handling messages transmitted between the client and the server, wherein the messages transmitted between the client and the intermediate server are secured using an encryption key over a first TCP connection and the messages transmitted between the intermediate server and the server are over a second TCP connection;
• initiating a move from the first application to a second application;
• transferring a TCP socket handle used by the first application to the second application by at least detecting a negotiation message sent from the client to the first application;
• negotiating a new encryption key between the client and the second application;
• and
• processing the messages between the client and the second application using the new encryption key by having the second application receive messages using the TCP socket handle transferred from the first application.