The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jun. 22, 2021

Filed:

Jul. 24, 2018
Applicant:

Cloudflare, Inc., San Francisco, CA (US);

Inventors:

Sébastien Andreas Henry Pahl, San Francisco, CA (US);

Matthieu Philippe François Tourne, San Francisco, CA (US);

Piotr Sikora, San Francisco, CA (US);

Ray Raymond Bejjani, San Francisco, CA (US);

Dane Orion Knecht, San Francisco, CA (US);

Matthew Browning Prince, San Francisco, CA (US);

John Graham-Cumming, London, GB;

Lee Hahn Holloway, Santa Cruz, CA (US);

Nicholas Thomas Sullivan, San Francisco, CA (US);

Albertus Strasheim, San Francisco, CA (US);

Assignee:

CLOUDFLARE, INC., San Francisco, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); H04L 9/08 (2006.01); H04L 9/32 (2006.01); H04L 9/14 (2006.01); H04L 9/30 (2006.01);
U.S. Cl.
CPC ...
H04L 9/0844 (2013.01); H04L 9/14 (2013.01); H04L 9/30 (2013.01); H04L 9/321 (2013.01); H04L 9/3263 (2013.01); H04L 9/3268 (2013.01); H04L 63/061 (2013.01); H04L 63/166 (2013.01);
Abstract

A first server establishes a secure session with a client device where a private key used in the handshake when establishing the secure session is stored in a different, second, server. The first server transmits messages between the client device and the second server where the second server has access to a private key that is not available on the first server. The first server receives from the second server a set of session key(s) used in the secure session for encrypting/decrypting communication between the client device and the first server. The session key(s) are generated using a master secret that is generated using a premaster secret generated using Diffie-Hellman public values selected by the client device and the second server. The first server uses the session key(s) to encrypt/decrypt communication with the client device.


Find Patent Forward Citations

Loading…