Transparently converting a TLS session connection to facilitate session resumption
US10547641B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Jun 1, 2017 |
| Grant date | Jan 28, 2020 |
| Priority date | — |
| Expiry date | Dec 9, 2037 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L67/562
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A network-based appliance includes a mechanism to provide TLS inspection with session resumption, but without requiring that a session cache be maintained. To this end, the inspector is configured to cause the TLS client to participate in maintaining the session context, in effect on behalf of the TLS inspector. In operation, when the inspector first receives a session ID from the TLS server, the inspector generates and issues to the client a session ticket that includes the original session ID and other session context information. In this manner, the inspector converts the Session ID-based connection to a Session Ticket-based connection. The session ticket is encrypted by the inspector to secure the session information. When the TLS client presents the session ticket to resume the TLS connection, the inspector decrypts the ticket and retrieves the session ID from it directly. The inspector then uses the original session ID to resume the TLS session.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.