Sharing cryptographic session keys among a cluster of network security platforms monitoring network traffic flows
AssigneeMcAfee, Inc.
InventorsManikandan A. Kenyan, Anil Abraham
Life of this patent
Estimating the term…
Abstract
An example apparatus disclosed herein is to select a first network security platform based on a first value associated with a first message associated a client and a second value associated with a second message associated with a server, the first message and the second message associated with establishment of an encrypted network traffic flow between the client and the server. The disclosed example apparatus is also to cause a cryptographic session key associated with the encrypted network traffic flow to be sent to the first network security platform.
Claims20
A server comprising:
- interface circuitry;
- computer readable instructions;
- and
- at least one processor circuit to be programmed by the computer readable instructions to:
- select a first network security platform based on a first value associated with a first message associated with a client and a second value associated with a second message associated with the server, the first message and the second message associated with establishment of an encrypted network traffic flow between the client and the server;
- and
- cause a cryptographic session key associated with the encrypted network traffic flow to be sent to the first network security platform.
At least one non-transitory computer readable medium comprising computer readable instructions to cause at least one processor circuit to at least:
- determine a platform selection value based on a first parameter value in a first message from a client and a second parameter value in a second message to be sent by a server, the first and second messages associated with establishment of an encrypted network traffic flow between the client and the server;
- and
- send a cryptographic session key associated with the encrypted network traffic flow to a selected one of a cluster of network security platforms based on the platform selection value.
A method comprising:
- selecting, by at least one processor circuit programmed by at least one instruction, a first network security platform based on first information associated with a client and second information associated with a server, the first information and the second information associated with establishment of an encrypted network traffic flow between the client and the server;
- and
- transmitting a cryptographic session key associated with the encrypted network traffic flow to the first network security platform.
Dependencies are inferred from the claim text.