Cisco Technology, Inc.

Kirtesh Patil

Daniel George Wing

Saravanan Agasaveeran

Jaideep Padhye

Eitan Ben-Nun

Michael Zayats

Manohar B Hungund

An interposer is provided that is configured to interpose into an application security protocol exchange by obtaining application session security state. The interposer does this without holding any private keying material of client or server. An out-of-band Security Assistant Key Escrow service (SAS/SAKE) is also provided. The SAKE resides in the secure physical network perimeter and holds the private keying material required to derive session keys for interposing into application security protocol. During a security protocol handshake, the interposer sends SAKE security protocol handshake messages and in return receives from the SAKE session security state that allows it to participate in application security protocol.

Growing community of inventors

Milpitas, CA, United States of America

Kirtesh Patil