Method for secure network communication and system thereof

A proxy comprising a processor and providing secure network communication between a client and a server,

• wherein the processor is configured to perform:
• receiving, from the client, a session encryption key shared between the client and the server for generation of a secure channel between the client and the server;
• receiving a packet encrypted with the session encryption key and transmitted from the client to the server;
• forwarding the encrypted packet to the server without change of an encrypted state as an initial operation;
• determining whether a predefined security inspection condition is satisfied while the encrypted packet is forwarded without decryption;
• and
• decrypting the encrypted packet with the session encryption key and analyzing the decrypted packet only when the predefined security inspection condition is satisfied,
• wherein the secure channel between the client and the server is maintained without establishing a separate secure channel between the proxy and the server.

A non-transitory computer-readable storage medium storing instructions configured to, when executed by a processor, cause a proxy comprising the processor to implement a specific operation, wherein the specific operation comprises:

• receiving, from a client, a session encryption key shared between the client and the server for generation of a secure channel between the client and a server;
• receiving a packet encrypted with the session encryption key and transmitted from the client to the server;
• forwarding the encrypted packet to the server without change of an encrypted state as an initial operation;
• determining whether a predefined security inspection condition is satisfied while the encrypted packet is forwarded without decryption;
• and
• decrypting the encrypted packet with the session encryption key and analyzing the decrypted packet only when the predefined security inspection condition is satisfied,
• wherein the secure channel between the client and the server is maintained without establishing a separate secure channel between the proxy and the server.