US 12,512,969 B2Granted

Methods for managing hardware security servers and devices thereof

AssigneeF5, Inc.

InventorsLiang Cheng, Saxon C. Amdahl

Life of this patent

Estimating the term…

Loading patent…

Abstract

Methods, non-transitory computer readable media, network traffic manager apparatuses, and systems that assist with managing hardware security servers includes receiving a request from a client. The request can comprise of a unique numerical handle and a command for a hardware security server. The unique numerical handle can be generated as a response to a previous request from the client. It can further include searching for a key handle mapped to the unique numerical handle and hardware security server in memory. The method can also include sending the request to the hardware security server with the key handle when the key handle is retrieved from memory during the search and sending a response received from the hardware security server to the client. The response can be received as a result of sending the request to the hardware security server.

Claims20

Dependent claims

A method for managing hardware security servers, the method implemented by a network traffic management system or a cloud service comprising network traffic apparatuses, client devices, or server devices, the method comprising:

receiving a request from a client, wherein the request comprises a unique numerical handle and a command for a hardware security server, and wherein the unique numerical handle was generated as a response to a previous request from the client;
identifying one of a plurality of key handles that is associated with the received unique numerical handle, wherein the hardware security server associated with the identified key handle is configured to execute the received command, wherein the received unique numerical handle is mapped to the identified key handle in a data structure in memory, wherein the received unique numerical handle is mapped to other ones of the key handles in the data structure, and wherein each of the other ones of the key handles is associated with a corresponding one of a plurality of hardware security servers;
sending the received request to the hardware security server associated with the identified key handle to execute the command and return a response after execution of the command;
and
sending the returned response received from the hardware security server to the client associated with the unique numerical handle.

2 more elements

A non-transitory computer readable medium having stored thereon instructions for managing hardware security servers comprising executable code which when executed by processors, causes the processors to:

receive a request from a client, wherein the request comprises a unique numerical handle and a command for a hardware security server, and wherein the unique numerical handle was generated as a response to a previous request from the client;
identify one of a plurality of key handles that is associated with the received unique numerical handle, wherein the hardware security server associated with the identified key handle is configured to execute the received command, wherein the received unique numerical handle is mapped to the identified key handle in a data structure in memory, wherein the received unique numerical handle is mapped to other ones of the key handles in the data structure, and wherein each of the other ones of the key handles is associated with a corresponding one of a plurality of hardware security servers;
send the received request to the hardware security server associated with the identified key handle to execute the command and return a response after execution of the command;
and
send the returned response received from the hardware security server to the client associated with the unique numerical handle.

2 more elements

A network traffic manager apparatus, comprising memory comprising programmed instructions stored in the memory and processors configured to be capable of executing the programmed instructions stored in the memory to:

receive a request from a client, wherein the request comprises a unique numerical handle and a command for a hardware security server, and wherein the unique numerical handle was generated as a response to a previous request from the client;
identify one of a plurality of key handles that is associated with the received unique numerical handle, wherein the hardware security server associated with the identified key handle is configured to execute the received command, wherein the received unique numerical handle is mapped to the identified key handle in a data structure in memory, wherein the received unique numerical handle is mapped to other ones of the key handles in the data structure, and wherein each of the other ones of the key handles is associated with a corresponding one of a plurality of hardware security servers;
send the received request to the hardware security server associated with the identified key handle to execute the command and return a response after execution of the command;
and
send the returned response received from the hardware security server to the client associated with the unique numerical handle.

2 more elements

A network traffic management system, comprising traffic management apparatuses, client devices, or server devices, the network traffic management system comprising memory comprising programmed instructions stored thereon and processors configured to be capable of executing the stored programmed instructions to:

receive a request from a client, wherein the request comprises a unique numerical handle and a command for a hardware security server, and wherein the unique numerical handle was generated as a response to a previous request from the client;
identify one of a plurality of key handles that is associated with the received unique numerical handle, wherein the hardware security server associated with the identified key handle is configured to execute the received command, wherein the received unique numerical handle is mapped to the identified key handle in a data structure in memory, wherein the received unique numerical handle is mapped to other ones of the key handles in the data structure, and wherein each of the other ones of the key handles is associated with a corresponding one of a plurality of hardware security servers;
send the received request to the hardware security server associated with the identified key handle to execute the command and return a response after execution of the command;
and
send the returned response received from the hardware security server to the client associated with the unique numerical handle.

2 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/087,926Filed 23 Dec 2022
Published: US 2024/0214181 A127 Jun 2024
Granted: 30 Dec 2025
Term ends: Not estimatedThe source records don’t support an estimate.

Classification13 codes

H04L 9/0825
Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely…: using…
H04L 63/06
Network architectures or network communication protocols for network security: for supporting key management in a packet data network
G06F 21/602
Protecting data: providing cryptographic facilities or services
H04L 9/0866
Generation of secret information including derivation or calculation of cryptographic keys or passwords: involving user or device identifiers,…