Trusted intermediary for network data processing

A device for processing packets associated with communications through secured connections over a network, the device comprising at least one computer-readable medium having stored thereon:

• a) a data structure comprising a plurality of fields, wherein each field of the plurality of fields includes security information defining a secured connection established between devices communicating over the network, and wherein each field of the plurality of fields also includes at least one subfield for storing a value of at least one counter defining a state of the secured connection;
• and
• b) computer-executable instructions for:
• identifying a received packet containing encrypted information for an identified secured connection;
• monitoring, by the device for processing packets, packets exchanged in an identified secured connection;
• updating the value of the at least one counter stored in the at least one subfield as an updated definition of the state of the identified secured connection based on counter information from the received packet;
• iii) accessing the received packet using the security information from an associated field in the data structure that holds the security information for the identified secured connection and updating the value of the at least one counter stored in the at least one subfield as an updated definition of the state of the identified secured connection, wherein the accessing comprising forming a modified packet from the received packet and using the security information to format the modified packet to pass through the secured connection for the identified secure connection without disrupting the secured connection, the modified packet differing from the received packet in at least one portion, the using the security information to format the modified packet further comprising:
• iii-a) using the security information to apply a key of an authorized sender of the received packet over at least a portion of the modified packet to generate a signature;
• and
• iii-b) attaching the signature to the modified packet;
• and
• iv) sending a communication comprising the formatted modified packet in response to the received packet.

A computer readable memory having instructions stored therein for causing a device for processing packets to perform operations, the device for processing packets being associated with communication through a secured connection between a first device and a second device, the operations comprising:

• receiving from the first device security information defining the secured connection and counter information associated with a state of the secured connection;
• tracking, in a counter in the device for processing packets, state information for the secured connection based on the received counter information, a value of the counter defining the tracked state information;
• receiving at least one packet containing encrypted information from the second device sent to the first device;
• accessing the at least one packet using the security information and tracked state information obtained from the tracking of the state information for the secured connection, the accessing comprising forming a modified packet from the at least one packet and using the security information to format the modified packet to pass through the secured connection without disrupting the secured connection, the modified packet differing from the at least one packet in at least one portion, the using the security information to format the modified packet further comprising:
• using the security information to apply a key of an authorized sender of the at least one packet over at least a portion of the modified packet to generate a signature;
• and
• attaching the signature to the modified packet;
• and
• sending a communication comprising the formatted modified packet to the first device based on information received in the at least one packet.