# US 12,010,143 B2 · Bulk data transfers via transport layer security protocol

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,010,143 B2
- Document ID: US12010143B2
- Status: Granted
- Kind: B2
- Application number: 17/445,842
- Filed: 2021-08-25
- Published: 2023-03-16
- Granted: 2024-06-11
- Earliest claimed: 2021-08-25
- Assignees: International Business Machines Corporation
- Applicants: International Business Machines Corporation
- Inventors: Michael W. Gray; Narayana Aditya Madineni; Leigh S. McLean; Luvita Burgess
- Web page: https://patentgrep.com/patent/US12010143B2

## CPC

- H04L 63/166: {at the transport layer}
- H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)}
- H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)}
- H04L 67/06: specially adapted for file transfer, e.g. file transfer protocol [FTP]
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Establishing a transfer mode between devices for large bulk records over a TLS protocol by fragmenting an encrypted bulk record into a set of pre-defined block sizes for convenient transfer. The pre-defined block sizes are specifically sized to indicate a beginning and an end of the transfer of the associated blocks making up the large bulk record. A middle box is unaware of the association between the blocks and permits transfer according to the maximum transmission unit of the transport layer security (TLS) protocol. The fragmented bulk record is reconstructed and decrypted for use after the transfer.

## Claims

### Claim 1

A computer-implemented method comprising:
dividing an encrypted record into a set of fragments including equal-size fragments exactly a size of a maximum transmission unit (MTU) according to a transfer layer security (TLS) protocol, the encrypted record exceeding the size of the MTU;
causing a last fragment of the set of fragments to be an unequal size fragment;
establishing a transmission mode for transmitting records exceeding the size of the MTU by a handshake operation between a first device and a second device;
transmitting each fragment of the set of fragments according to the transmission mode indicating an order of transmission from the first device to the second device via the TLS protocol over a communications network, the order of transmission causing the one unequal-size fragment to be transmitted last;
collecting the set of fragments until receipt of the unequal-size fragment is received, the receipt of the unequal-size fragment indicating an end of transmission of the encrypted record;
responsive to determining the end of transmission, assembling the set of fragments to create the encrypted record; and
decrypting the encrypted record for processing by the second device.

### Claim 2 (depends on 1)

The computer-implemented method of claim 1; further comprising:
identifying a bulk data record for transmission from the first device to the second device;
determining the bulk data record exceeds the size of the MTU; and
encrypting the bulk data record to create the encrypted record.

### Claim 3 (depends on 2)

The computer-implemented method of claim 2, further comprising:
determining how many equal-size fragments can be divided from the bulk data record;
taking a final-block action to cause a single fragment to be the unequal size fragment, the unequal size fragment being unequal to the size of the MTU.

### Claim 4

A computer program product comprising a computer-readable storage medium having a set of instructions stored therein which, when executed by a processor, causes the processor to perform a method comprising:
dividing an encrypted record into a set of fragments including equal-size fragments exactly a size of a maximum transmission unit (MTU) according to a transfer layer security (TLS) protocol, the encrypted record exceeding the size of the MTU;
causing a last fragment of the set of fragments to be an unequal size fragment;
establishing a transmission mode for transmitting records exceeding the size of the MTU by a handshake operation between a first device and a second device;
transmitting each fragment of the set of fragments according to the transmission mode indicating an order of transmission from the first device to the second device via the TLS protocol over a communications network, the order of transmission causing the one unequal-size fragment to be transmitted last;
collecting the set of fragments until receipt of the unequal-size fragment is received, the receipt of the unequal-size fragment indicating an end of transmission of the encrypted record;
responsive to determining the end of transmission, assembling the set of fragments to create the encrypted record; and
decrypting the encrypted record for processing by the second device.

### Claim 5 (depends on 4)

The computer program product of claim 4; further including in the set of instructions a method comprising:
identifying a bulk data record for transmission from the first device to the second device;
determining the bulk data record exceeds the size of the MTU; and
encrypting the bulk data record to create the encrypted record.

### Claim 6 (depends on 5)

The computer program product of claim 5, further including in the set of instructions a method comprising:
determining how many equal-size fragments can be divided from the bulk data record;
taking a final-block action to cause a single fragment to be the unequal size fragment, the unequal size fragment being unequal to the size of the MTU.

### Claim 7

A computer system comprising:
a processor set; and
a computer readable storage medium;
wherein:
the processor set is structured, located, connected, and/or programmed to run program instructions stored on the computer readable storage medium; and
the program instructions which, when executed by the processor set, cause the processor set to perform a method comprising:
dividing an encrypted record into a set of fragments including equal-size fragments exactly a size of a maximum transmission unit (MTU) according to a transfer layer security (TLS) protocol, the encrypted record exceeding the size of the MTU;
causing a last fragment of the set of fragments to be an unequal size fragment;
establishing a transmission mode for transmitting records exceeding the size of the MTU by a handshake operation between a first device and a second device;
transmitting each fragment of the set of fragments according to the transmission mode indicating an order of transmission from the first device to the second device via the TLS protocol over a communications network, the order of transmission causing the one unequal-size fragment to be transmitted last;
collecting the set of fragments until receipt of the unequal-size fragment is received, the receipt of the unequal-size fragment indicating an end of transmission of the encrypted record;
responsive to determining the end of transmission, assembling the set of fragments to create the encrypted record; and
decrypting the encrypted record for processing by the second device.

### Claim 8 (depends on 7)

The computer system of claim 7; further including in the set of instructions a method comprising:
identifying a bulk data record for transmission from the first device to the second device;
determining the bulk data record exceeds the size of the MTU; and
encrypting the bulk data record to create the encrypted record.

### Claim 9 (depends on 8)

The computer system of claim 8, further including in the set of instructions a method comprising:
determining how many equal-size fragments can be divided from the bulk data record;
taking a final-block action to cause a single fragment to be the unequal size fragment, the unequal size fragment being unequal to the size of the MTU.