Systems and methods for transport layer security (TLS) concatenation
AssigneeDell Products L.P.
InventorsClaudio Desanti, David L. Black
Life of this patent
Estimating the term…
Abstract
Systems and methods for Transport Layer Security (TLS) concatenation are described. In an illustrative, non-limiting embodiment, an Information Handling System (IHS) may include: a processor; and a memory coupled to the processor, wherein the memory comprises program instructions store thereon that, upon execution by the processor, cause the IHS to: derive a shared session key during a first Transmission Control Protocol (TCP) connection with a second IHS; and after disconnection of the first TCP connection, perform a Transport Layer Security (TLS) negotiation with the second IHS via a second TCP connection using the shared session key.
Claims16
An Information Handling System (IHS), comprising:
- a processor;
- and
- a memory coupled to the processor, wherein the memory comprises program instructions stored thereon that, upon execution by the processor, cause the IHS to:
- derive a shared session key during a first Transmission Control Protocol (TCP) connection with a second IHS;
- after disconnection of the first TCP connection, perform a Transport Layer Security (TLS) negotiation with the second IHS via a second TCP connection using the shared session key;
- attempt to perform a second TLS negotiation with the second IHS for a third TCP connection using the shared session key;
- determine that the shared session key is not available on the second IHS;
- perform an authentication transaction via the second TCP connection comprising a secure channel concatenation value usable on an administration queue over a TLS secure channel to generate a second shared session key, wherein the second shared session key replaces the shared session key for subsequent TLS negotiations;
- and
- perform the second TLS negotiation with the second IHS for the third TCP connection using the second shared session key.
An Information Handling System (IHS), comprising:
- a processor;
- and
- a memory coupled to the processor, wherein the memory comprises program instructions stored thereon that, upon execution by the processor, cause the IHS to:
- derive a shared session key during a first Transmission Control Protocol (TCP) connection with a second IHS;
- after disconnection of the first TCP connection, perform a Transport Layer Security (TLS) negotiation with the second IHS via a second TCP connection using the shared session key;
- determine that the shared session key is not available on the second IHS;
- close the TLS negotiation with the second IHS;
- perform an authentication transaction via the second TCP connection, wherein the second TCP connection is unsecured, comprising a secure channel concatenation value usable on an administration queue over a TCP channel without TLS to generate a second shared session key;
- disconnect the second TCP connection;
- establish a third TCP connection with the second IHS;
- and
- perform a second TLS negotiation with the second IHS via the third TCP connection using the second shared session key derived during the second TCP connection.
Dependencies are inferred from the claim text.