The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
May. 26, 2020

Filed:

Dec. 20, 2017
Applicant:

Cisco Technology, Inc., San Jose, CA (US);

Inventors:

David McGrew, Poolesville, MD (US);

Blake Harrell Anderson, San Jose, CA (US);

Subharthi Paul, San Jose, CA (US);

William Michael Hudson, Jr., Cary, NC (US);

Philip Ryan Perricone, Raleigh, NC (US);

Assignee:

Cisco Technology, Inc., San Jose, CA (US);

Attorneys:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); G06F 21/55 (2013.01); H04L 29/08 (2006.01); H04L 9/32 (2006.01);
U.S. Cl.
CPC ...
H04L 63/0823 (2013.01); G06F 21/552 (2013.01); G06F 21/554 (2013.01); H04L 9/321 (2013.01); H04L 63/02 (2013.01); H04L 63/0428 (2013.01); H04L 63/1408 (2013.01); H04L 63/1416 (2013.01); H04L 63/1425 (2013.01); H04L 63/306 (2013.01); H04L 67/141 (2013.01); H04L 63/166 (2013.01);
Abstract

In one embodiment, a device in a network observes traffic between a client and a server for an encrypted session. The device makes a determination that a server certificate should be obtained from the server. The device, based on the determination, sends a handshake probe to the server. The device extracts server certificate information from a handshake response from the server that the server sent in response to the handshake probe. The device uses the extracted server certificate information to analyze the traffic between the client and the server.


Find Patent Forward Citations

Loading…