Secure sharing of transport layer security session keys with trusted enforcement points

A secure communications data processing system for securely sharing transport layer security (TLS) session keys with trusted enforcement points, the system comprising:

• a TLS endpoint configured for coupling to a plurality of TLS clients;
• a key server communicatively coupled to the TLS endpoint;
• and,
• at least one security enforcement point disposed between the TLS clients and the TLS endpoint, the security enforcement point comprising a secure and trusted communicative link with the key server over which TLS session keys for corresponding secure communications paths between the TLS clients and the TLS endpoint are installed in the security enforcement point.

A computer program product comprising a computer usable storage medium embodying computer usable program code for securely sharing transport layer security (TLS) session keys with trusted enforcement points, the computer program product comprising:

• computer usable program code for conducting a TLS handshake with a TLS client to create a session key for a TLS session with the TLS client traversing at least one security enforcement point;
• computer usable program code for providing the session key to a communicatively coupled key server for distribution to the at least one security enforcement point;
• and,
• computer usable program code for engaging in secure communications with the TLS client over the TLS session.