System and methods for transparent encryption

A data communication vice for secure transport comprising:

• an SSL terminator operable to intercept en outgoing connection attempt;
• a connection scanner operable to identify a destination from the intercepted outgoing connection attempt;
• a secure endpoint responsive to the SSL terminator to establish a secure connection using the identified destination from the connection attempt, the SSL terminator further operable to establish the attempted outgoing connection by terminating the outgoing connection attempt;
• and
• a mapper operable to associate the terminated outgoing connection with the established secure connection, the association operable to transfer message traffic intended for the destination over the secure connection in a continuous manner from the intercepted outgoing connection to the identified destination;
• where the SSL terminator is operable to:
• accept the outgoing connection attempt as a local connection by completing a connection exchange to terminate and complete the outgoing connection attempt;
• and
• emulate the intended destination as an endpoint of the outgoing connection;
• identify data to be transmitted as message traffic via the outgoing connection;
• receive the identified data;
• and
• redirect the identified data via the established secure connection;
• where the mapper is operable to map data sent from a client, in which the data is intended for transmission via the outgoing connection, to the established secure connection;
• where the connection scanner is operable to identify the destination by scanning the connection attempt;
• and extracting an identifier indicative of the intended destination;
• where the SSL terminator is operable to transport data between the client and a remote intended destination in a seamless manner via the mapped connection, the SSL terminator further operable to:
• receive data over the established local connection;
• index the secure connection to the identified destination via the mapping;
• and
• forward the received data to the identified destination via the indexed secure connection;
• a repository operable to store a ciphersuite, the SSL terminator further operable to:
• identify the ciphersuite corresponding to the identified destination and indicative of an encryption algorithm operable via the secure connection;
• and
• apply the identified ciphersuite to the received data prior to redirecting;
• where the connection scanner is further operable to:
• detect an outgoing connection attempt;
• and
• scan the connection ettempt for a destination identifier indicative of a remote intended recipient.