Back to results
US 7,584,505 B2Granted
Inspected secure communication protocol
AssigneeMicrosoft Corporation
InventorsRon Mondri, Sara Bitan
Life of this patent
Estimating the term…
Abstract
A technique for establishing inspected secure communication includes establishing a first secure connection between a client device and a client-side device and a second secure connection between the client-side device and a server device. The client-side device establishes the first secure communication channel by providing a certificate impersonating the server device to the client device. The first and second communication channels enable client-side inspection of communications.
Claims8
An inspected secure socket layer protocol comprising:
- establishing a first secure socket layer session between a client device and a client side device, wherein establishing the first secure socket layer session comprises:
- receiving an impersonation certificate;
- and
- authenticating the server device based on the impersonation certificate, wherein the impersonation certificate comprises a server's certificate that contains a public key of the client-side device that has been substituted for a public key of the server certificate;
- establishing a second secure socket layer session between the client-side device and a server device;
- and
- inspecting traffic between the first secure socket layer session and the second socket layer session, wherein the traffic comprises a message digest and a message and the inspection comprises inspecting the message portion of the traffic.
4 more elements
A system comprising:
- a client device;
- a server device;
- and
- a client-side device communicatively coupled between the client device and the server device, wherein the client-side device is adapted to:
- receive a first certificate, wherein the first certificate contains a public key;
- authenticate the server device as a function of the first certificate;
- generate a first session key if the server device is authenticated;
- output a second certificate if the server device is authenticated, wherein the second certificate is an impersonation certificate, the impersonation certificate comprises the first certificate, wherein the first certificate's public key is substituted for a public key of the client-side device;
- receive a first secret encrypted using a public key of the client-side device;
- and
- generate a second session key as a function of the first secret.
8 more elements
Dependencies are inferred from the claim text.