Secure Communication between a Client Device and a Server Device via a Gateway

A method for secure communication between a client device and a server device, the method being performed by a gateway, the gateway being operatively connected between the client device and the server device, the method comprising:

• establishing a first secure link with the client device at a first socket and a second secure link with the server device at a second socket, wherein the gateway holds a second link context for the first secure link at the first socket and a third link context for the second secure link at the second socket;
• sending a part of the second link context to the server device over the second secure link;
• and
• relaying encrypted packets between the client device and the server device without decrypting or encrypting the encrypted packets at the first socket or the second socket.

A gateway for secure communication between a client device and a server device, the gateway being configured to be operatively connected between the client device and the server device, the gateway comprising processing circuitry, the processing circuitry being configured to cause the gateway to:

• establish a first secure link with the client device at a first socket and a second secure link with the server device at a second socket, wherein the gateway holds a second link context for the first secure link at the first socket and a third link context for the second secure link at the second socket;
• send a part of the second link context to the server device over the second secure link;
• and
• relay encrypted packets between the client device and the server device without decrypting or encrypting the encrypted packets at the first socket or the second socket.

A non-transitory computer-readable storage medium on which is stored a computer program for secure communication between a client device and a server device, wherein the computer program comprises computer code which, when run on processing circuitry of a gateway configured to be operatively connected between the client device and the server device, causes the gateway to:

• establish a first secure link with the client device at a first socket and a second secure link with the server device at a second socket, wherein the gateway holds a second link context for the first secure link at the first socket and a third link context for the second secure link at the second socket;
• send a part of the second link context to the server device over the second secure link;
• and
• relay encrypted packets between the client device and the server device without decrypting or encrypting the encrypted packets at the first socket or the second socket.