Netronome Systems Incorporated

Symantec Corporation

Ca, Inc.

David Wells

Johann Heinrich Tönsing

Gysbert Floris Van Beek Van Leeuwen

Jan Christoffel DuToit

Roelof Nico DuToit

Leon Johannes Brits

Roelof Nico Du Toit

Noah Z Robbin

Jan Neil Viljoen

Joseph H Levy

Paul Kraus

Jan Christoffel Du Toit

Jan Niel Viljoen

Securely sharing a Transport Layer Security (TLS) session with one or more trusted devices. In one embodiment, a method may include establishing a TLS session between a client device and a server device, communicating encrypted messages that are encrypted using encryption keys between the client device and the server device, and intercepting and decrypting one or more of the encrypted messages at a trusted device using the encryption keys. In this embodiment, the establishing of the TLS session may include negotiating a master secret, establishing a secure channel between the trusted device and the client device or the server device, sending, from the client device or the server device, the master secret to the trusted device over the secure channel, and employing the master secret at the client device, at the server device, and at the trusted device to generate, for the TLS session, the encryption keys.

Securely sharing a transport layer security session with one or more trusted devices

A system and method for handling a digital electronic flow between a first and second entity in which a flow policy is determined that is to be applied to the flow and the flow is then directed along a path in accordance with the policy. An ID is supplied for each flow and a tag associated with each flow which indicates the policy to be applied to its associated flow. Flows are also associated with one another, with associated flows having associated policies. In particular the flow may be processed or forwarded. The path may include a graph structure and virtual applications.

System and method for processing and forwarding transmitted information

An apparatus includes a processor and a memory storing instructions executed by the processor to receive a first communication session using a first key, where the first communication session is between a client and a server. A second communication session is initiated using a second key, where the second communication session is between the apparatus and the server. An active communication session is negotiated between the client and the server using the first key and the second key. The active communication session is decrypted using the first key and the second key. The active communication session is re-encrypted using a third key to form re-encrypted data.

Apparatus and method for decryption of secure communication sessions

Growing community of inventors

Cambridgeshire, United Kingdom

David Wells