Terminating SSL connections without locally-accessible private keys
US9647835B2 · kind B2 · utility
7Cited by
14References
27Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Dec 14, 2012 |
| Grant date | May 9, 2017 |
| Priority date | — |
| Expiry date | Dec 14, 2032 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L2209/76
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
An Internet infrastructure delivery platform (e.g., operated by a service provider) provides an RSA proxy “service” as an enhancement to the SSL protocol that off-loads the decryption of the encrypted pre-master secret (ePMS) to an external server. Using this service, instead of decrypting the ePMS “locally,” the SSL server proxies (forwards) the ePMS to an RSA proxy server component and receives, in response, the decrypted pre-master secret. In this manner, the decryption key does not need to be stored in association with the SSL server.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.