The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
May. 10, 2016

Filed:

Apr. 24, 2015
Applicant:

Extrahop Networks, Inc., Seattle, WA (US);

Inventors:

Jesse Abraham Rothstein, Seattle, WA (US);

Benjamin Thomas Higgins, Shoreline, WA (US);

Brian David Hatch, Seattle, WA (US);

Assignee:

ExtraHop Networks, Inc., Seattle, WA (US);

Attorneys:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06F 21/00 (2013.01); G06F 12/14 (2006.01); G06F 11/00 (2006.01); G06F 21/56 (2013.01); H04L 29/06 (2006.01);
U.S. Cl.
CPC ...
H04L 63/0428 (2013.01); H04L 63/061 (2013.01);
Abstract

Embodiments are directed to sharing secure communication secrets with a network monitoring device (NMD). The NMD may passively monitor network packets communicated between client computers and server computers. If a secure communication session is established between a client computer and a server computer, a key provider may provide the NMD a session key that corresponds to the secure communication session. The NMD may buffer each network packet associated with the secure communication session until the NMD is provided a session key for the secure communication session. The NMD may use the session key to decrypt network packets communicated between the client computer and the server computer. The NMD may then proceed to analyze the secure communication session based on the contents of the decrypted network packets.


Find Patent Forward Citations

Loading…