The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jan. 08, 2019

Filed:

Jul. 10, 2014
Applicant:

Cisco Technology, Inc., San Jose, CA (US);

Inventors:

Eitan Ben-Nun, San Jose, CA (US);

Michael Zayats, Sunnyvale, CA (US);

Daniel G. Wing, San Jose, CA (US);

Kirtesh Patil, Milpitas, CA (US);

Jaideep Padhye, Fremont, CA (US);

Manohar B. Hungund, Santa Clara, CA (US);

Saravanan Agasaveeran, Fremont, CA (US);

Assignee:

Cisco Technology, Inc., San Jose, CA (US);

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); H04L 29/08 (2006.01);
U.S. Cl.
CPC ...
H04L 67/141 (2013.01); H04L 63/0281 (2013.01); H04L 63/0823 (2013.01); H04L 63/168 (2013.01); H04L 67/28 (2013.01);
Abstract

An interposer is provided that is configured to interpose into an application security protocol exchange by obtaining application session security state. The interposer does this without holding any private keying material of client or server. An out-of-band Security Assistant Key Escrow service (SAS/SAKE) is also provided. The SAKE resides in the secure physical network perimeter and holds the private keying material required to derive session keys for interposing into application security protocol. During a security protocol handshake, the interposer sends SAKE security protocol handshake messages and in return receives from the SAKE session security state that allows it to participate in application security protocol.


Find Patent Forward Citations

Loading…