Cisco Technology, Inc.

Manohar B Hungund

Daniel George Wing

Saravanan Agasaveeran

Jaideep Padhye

Michael Zayats

Eitan Ben-Nun

Kirtesh Patil

An interposer is provided that is configured to interpose into an application security protocol exchange by obtaining application session security state. The interposer does this without holding any private keying material of client or server. An out-of-band Security Assistant Key Escrow service (SAS/SAKE) is also provided. The SAKE resides in the secure physical network perimeter and holds the private keying material required to derive session keys for interposing into application security protocol. During a security protocol handshake, the interposer sends SAKE security protocol handshake messages and in return receives from the SAKE session security state that allows it to participate in application security protocol.

Growing community of inventors

Santa Clara, CA, United States of America

Manohar B Hungund