Terminating SSL connections without locally-accessible private keys
US11038854B2 · kind B2 · utility
1Cited by
4References
19Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | May 8, 2017 |
| Grant date | Jun 15, 2021 |
| Priority date | — |
| Expiry date | Jan 17, 2038 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L2209/76
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
An Internet infrastructure delivery platform (e.g., operated by a service provider) provides an RSA proxy “service” as an enhancement to the SSL protocol that off-loads the decryption of the encrypted pre-master secret (ePMS) to an external server. Using this service, instead of decrypting the ePMS “locally,” the SSL server proxies (forwards) the ePMS to an RSA proxy server component and receives, in response, the decrypted pre-master secret. In this manner, the decryption key does not need to be stored in association with the SSL server.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.