Concurrent TLS data streams using a single handshake
AssigneeInternational Business Machines Corporation
InventorsMichael W. Gray, Narayana Aditya Madineni, Leigh S. McLean, Stephen J. McKenzie
Life of this patent
Estimating the term…
Abstract
In an approach to efficient concurrent TLS data streams, a parent connection is established by performing a normal TLS handshake. A concurrent mode of operation is negotiated, where one or more child connections are established without using the TLS handshake. The one or more child connections are associated to the parent connection. Child application traffic secrets are derived for each child connection of the one or more child connections from application traffic secrets of the parent.
Claims20
A computer-implemented method for concurrent Transport Layer Security (TLS) streams, the computer-implemented method comprising:
- establishing, by one or more computer processors, a connection between a client device and a server by performing a normal TLS handshake;
- setting, by the one or more processors, the connection as a parent connection with a new attribute setting to denote a parent/child occurrence;
- negotiating, by the one or more computer processors, a concurrent mode of operation, wherein one or more child connections are established without using the TLS handshake;
- associating, by the one or more computer processors, the one or more child connections to the parent connection;
- and
- deriving, by the one or more computer processors, child application traffic secrets for each child connection of the one or more child connections from application traffic secrets of the parent.
A computer program product for concurrent Transport Layer Security (TLS) streams, the computer program product comprising one or more computer readable storage media and program instructions stored on the one or more computer readable storage media, the program instructions including instructions to:
- establish a connection between a client device and a server by performing a normal TLS handshake;
- set the connection as a parent connection with a new attribute setting to denote a parent/child occurrence;
- negotiate a concurrent mode of operation, wherein one or more child connections are established without using the TLS handshake;
- associate the one or more child connections to the parent connection;
- and
- derive child application traffic secrets for each child connection of the one or more child connections from application traffic secrets of the parent.
A computer system for concurrent Transport Layer Security (TLS) streams, the computer system comprising:
- one or more computer processors;
- one or more computer readable storage media;
- and
- program instructions stored on the one or more computer readable storage media for execution by at least one of the one or more computer processors, the stored program instructions including instructions to:
- establish a connection between a client device and a server by performing a normal TLS handshake;
- set the connection as a parent connection with a new attribute setting to denote a parent/child occurrence;
- negotiate a concurrent mode of operation, wherein one or more child connections are established without using the TLS handshake;
- associate the one or more child connections to the parent connection;
- and
- derive child application traffic secrets for each child connection of the one or more child connections from application traffic secrets of the parent.
Dependencies are inferred from the claim text.