Search International and National Patent Collections

1. (WO2018220570) CACHELESS SESSION TICKET SUPPORT IN TLS INSPECTION

Pub. No.:    WO/2018/220570    International Application No.:    PCT/IB2018/053877
Publication Date: Fri Dec 07 00:59:59 CET 2018 International Filing Date: Fri Jun 01 01:59:59 CEST 2018
IPC: H04L 29/06
H04L 29/08
Applicants: INTERNATIONAL BUSINESS MACHINES CORPORATION
IBM UNITED KINGDOM LIMITED
IBM (CHINA) INVESTMENT COMPANY LIMITED
Inventors: LEE, Cheng-ta
HSIUNG, Wei-Hsiang
SUEN, Wei-Shiau
WU, Ming-Hsun
Title: CACHELESS SESSION TICKET SUPPORT IN TLS INSPECTION
Abstract:
A network-based appliance includes a mechanism to provide TLS inspection with session resumption, but without requiring that a session cache be maintained. To this end, the inspector is configured to cause the TLS client to participate in maintaining the session context, in effect on behalf of the TLS inspector. In operation, when the inspector first receives the session ticket from the TLS server, and in lieu of caching it, the inspector generates and issues to the client a composited ticket that includes the original ticket and session context information that contains the session key. The composited ticket is encrypted by the inspector to secure the session information. When the TLS client presents the composited session ticket to resume the TLS connection, the inspector decrypts the ticket and retrieves the session context from it directly. The inspector then uses the original session ticket to resume the TLS session.