US6584567B1 — Dynamic connection to multiple origin servers in …

Claim 1

Independent Claim 178 words

A method of enabling a proxy to participate in a secure communication between a client and a first origin server, comprising the step of: (a) establishing a first secure session between the client and the proxy; (b) upon verifying the first secure session, establishing a second secure session between the client and the proxy, the second secure session requesting the proxy to act as a conduit to the first origin server; (c) having the client and the first origin server negotiate a session master secret; (d) having the client deliver the session master secret to the proxy using the first secure session to enable the proxy to participate in the secure communication; (e) responsive to a client request to the first origin server, repeating steps (a)-(b) to enable the proxy to act as a conduit to a second origin server; (f) having the client and the second origin server negotiate a new session master secret; and (g) having the client deliver the new session master secret to the proxy using the first secure session generated in step (e).

Claim 2

Independent Claim 178 words

A method of enabling a proxy to participate in a secure communication between a client and a first origin server, comprising the step of: (a) establishing a first secure session between the client and the proxy; (b) upon verifying the first secure session, establishing a second secure session between the client and the proxy, the second secure session requesting the proxy to act as a conduit to the first origin server; (c) having the client and the first origin server negotiate a session master secret; (d) having the client deliver the session master secret to the proxy using the first secure session to enable the proxy to participate in the secure communication; (e) responsive to a client request to the first origin server, repeating steps (a)-(b) to enable the proxy to act as a conduit to a second origin server; (f) having the client and the second origin server negotiate a new session master secret; and (g) having the client deliver the new session master secret to the proxy using the first secure session generated in step (e).

Claim 3

Dependent Claim 31 words

The method as described in claim 1 further including the step of having the proxy use the session master secret and the new session master secret to generate given cryptographic information.

Claim 4

Dependent Claim 30 words

The method as described in claim 2 further including the step of having the proxy enter an active operating state following receipt of the session master secret in step (d).

Claim 5

Dependent Claim 24 words

The method as described in claim 3 wherein the proxy performs a given service on behalf of the client in the active operating state.

Claim 6

Dependent Claim 13 words

The method as described in claim 4 wherein the given service is transcoding.

Claim 7

Dependent Claim 20 words

The method as described in claim 1 wherein the first and second secure sessions conform to a network security protocol.

Claim 8

Dependent Claim 14 words

The method as described in claim 6 wherein the network security protocol is SSL.

Claim 9

Dependent Claim 14 words

The method as described in claim 6 wherein the network security protocol is TLS.

Claim 10

Dependent Claim 22 words

The method as described in claim 1 wherein the server is a Web server and the client is a pervasive computing client.

Claim 11

Independent Claim 146 words

A method of enabling a proxy to participate in a secure communication between a client and a server, comprising the step of: (a) for each of a set of 1 to “n” servers: (1) having the client request a first secure connection to the proxy; (2) upon authenticating validity of a certificate received from the proxy, having the client request a second secure connection to the proxy, the second secure connection requesting the proxy to act as a conduit to the server; (3) having the client and the server negotiate a respective session master secret through the conduit; (4) upon completion of the negotiation, having the client deliver the respective session master secrets to the proxy using the first secure connection; and (b) having the proxy use the respective session master secrets to generate given cryptographic information that is useful for participating in the secure communication.

Claim 12

Independent Claim 146 words

A method of enabling a proxy to participate in a secure communication between a client and a server, comprising the step of: (a) for each of a set of 1 to “n” servers: (1) having the client request a first secure connection to the proxy; (2) upon authenticating validity of a certificate received from the proxy, having the client request a second secure connection to the proxy, the second secure connection requesting the proxy to act as a conduit to the server; (3) having the client and the server negotiate a respective session master secret through the conduit; (4) upon completion of the negotiation, having the client deliver the respective session master secrets to the proxy using the first secure connection; and (b) having the proxy use the respective session master secrets to generate given cryptographic information that is useful for participating in the secure communication.

Claim 13

Dependent Claim 24 words

The method as described in claim 10 further including the step of having the proxy perform a given service on behalf of the client.

Claim 14

Dependent Claim 27 words

The method as described in claim 11 wherein the given service is selected from a set of services including transcoding, caching, encryption, decryption, monitoring, filtering and pre-fetching.

Claim 15

Independent Claim 140 words

A method of enabling a proxy to participate in a secure communication, comprising the step of: (a) transmitting a request from a client to the proxy to establish a first secure session; (b) transmitting a request from the client to the proxy to establish a second secure session between the client and the proxy, the second secure session requesting the proxy to act as a conduit to an origin server; (c) transmitting a session master secret from the client to the proxy using the first secure session to enable the proxy to participate in the secure communication; (d) responsive to receipt at the client of a request from the proxy, repeating steps (a)-(b) to enable the proxy to act as a conduit to another origin server; and (e) transmitting a new session master secret from the client to the proxy.

Claim 16

Independent Claim 140 words

A method of enabling a proxy to participate in a secure communication, comprising the step of: (a) transmitting a request from a client to the proxy to establish a first secure session; (b) transmitting a request from the client to the proxy to establish a second secure session between the client and the proxy, the second secure session requesting the proxy to act as a conduit to an origin server; (c) transmitting a session master secret from the client to the proxy using the first secure session to enable the proxy to participate in the secure communication; (d) responsive to receipt at the client of a request from the proxy, repeating steps (a)-(b) to enable the proxy to act as a conduit to another origin server; and (e) transmitting a new session master secret from the client to the proxy.

Claim 17

Dependent Claim 20 words

The method as described in claim 13 wherein the new session master secret is transmitted over the first secure session.

Claim 18

Independent Claim 137 words

A method of enabling a proxy to participate in a secure communication, comprising the step of: (a) receiving at the proxy a request from a client to establish a first secure session between the client and the proxy; (b) receiving at the proxy a request from the client to establish a second secure session between the client and the proxy, the second secure session requesting the proxy to act as a conduit to an origin server; (c) receiving at the proxy a session master secret transmitted from the client using the first secure session; (d) upon transmitting a given request from the proxy to the client, repeating steps (a)-(c) to enable the proxy to act as a conduit to another origin server; and (e) receiving at the proxy a new session master secret transmitted from the client.

Claim 19

Independent Claim 137 words

A method of enabling a proxy to participate in a secure communication, comprising the step of: (a) receiving at the proxy a request from a client to establish a first secure session between the client and the proxy; (b) receiving at the proxy a request from the client to establish a second secure session between the client and the proxy, the second secure session requesting the proxy to act as a conduit to an origin server; (c) receiving at the proxy a session master secret transmitted from the client using the first secure session; (d) upon transmitting a given request from the proxy to the client, repeating steps (a)-(c) to enable the proxy to act as a conduit to another origin server; and (e) receiving at the proxy a new session master secret transmitted from the client.

Claim 20

Dependent Claim 31 words

The method as described in claim 15 further including the step of having the proxy use the session master secret and the new session master secret to generate given cryptographic information.

Claim 21

Independent Claim 137 words

A method for enabling a proxy to participate in a session between a client and a first origin server, comprising the steps of: through the proxy, conducting a security handshake procedure between the client and the first origin server to produce a first session key; having the client transmit the first session key to the proxy so that the proxy can participate in communications between the client and the first origin server during the session; and as the session proceeds, conducting a security handshake procedure between the client and a second origin server to produce a second session key; and having the client transmit the second session key to the proxy so that the proxy can obtain data from the second origin server for use in servicing a request by the client to the first origin server.

Claim 22

Independent Claim 137 words

A method for enabling a proxy to participate in a session between a client and a first origin server, comprising the steps of: through the proxy, conducting a security handshake procedure between the client and the first origin server to produce a first session key; having the client transmit the first session key to the proxy so that the proxy can participate in communications between the client and the first origin server during the session; and as the session proceeds, conducting a security handshake procedure between the client and a second origin server to produce a second session key; and having the client transmit the second session key to the proxy so that the proxy can obtain data from the second origin server for use in servicing a request by the client to the first origin server.

Claim 23

Dependent Claim 24 words

The method as described in claim 17 wherein each session key is transmitted from the client to the proxy over a different secure connection.

Claim 24

Dependent Claim 24 words

The method as described in claim 17 wherein each session key is transmitted from the client to the proxy over the same secure connection.

Claim 25

Dependent Claim 196 words

A cryptographic system, comprising: a client; a set of servers; a proxy; a network protocol service for enabling the client and each server to communicate over a secure connection; a computer program (i) for controlling the client to request a first secure connection to the proxy, (ii) responsive to authenticating validity of a certificate from the proxy, for controlling the client to request a second secure connection to the proxy, the second secure connection requesting the proxy to act as a conduit to a given server, (iii) for controlling the client to negotiate with the given server through the conduit to obtain a session master secret; and (iv) upon successful completion of the negotiation, for controlling the client to deliver the session master secret to the proxy using the first secure connection; and a computer program (i) for controlling the proxy to use the session master secret to generate given cryptographic information, (ii) for controlling the proxy to request that the client selectively establish a separate secure connection with another server, and (iii) for switching the proxy into an active operating state during which it can participate in communications between the client and the given server.

Claim 26

Dependent Claim 196 words

A cryptographic system, comprising: a client; a set of servers; a proxy; a network protocol service for enabling the client and each server to communicate over a secure connection; a computer program (i) for controlling the client to request a first secure connection to the proxy, (ii) responsive to authenticating validity of a certificate from the proxy, for controlling the client to request a second secure connection to the proxy, the second secure connection requesting the proxy to act as a conduit to a given server, (iii) for controlling the client to negotiate with the given server through the conduit to obtain a session master secret; and (iv) upon successful completion of the negotiation, for controlling the client to deliver the session master secret to the proxy using the first secure connection; and a computer program (i) for controlling the proxy to use the session master secret to generate given cryptographic information, (ii) for controlling the proxy to request that the client selectively establish a separate secure connection with another server, and (iii) for switching the proxy into an active operating state during which it can participate in communications between the client and the given server.

Claim 27

Dependent Claim 22 words

The cryptographic system as described in claim 20 wherein the proxy includes means for providing transcoding services on behalf of the client.

Claim 28

Dependent Claim 22 words

The cryptographic system as described in claim 20 wherein the proxy includes means for providing encryption/decryption services on behalf of the client.

Claim 29

Dependent Claim 22 words

The cryptographic system as described in claim 20 wherein the proxy includes means for providing caching services on behalf of the client.

Claim 30

Dependent Claim 22 words

The cryptographic system as described in claim 20 wherein the proxy includes means for providing monitoring services on behalf of the client.

Claim 31

Dependent Claim 191 words

A computer program product in a computer readable medium for use in a cryptographic system including a client, a set of servers, and a proxy, comprising: a first routine (i) for controlling the client to request a first secure connection to the proxy, (ii) responsive to authenticating validity of a certificate from the proxy, for controlling the client to request a second secure connection to proxy, the second secure connection requesting the proxy to act as a conduit to a given server, (iii) for controlling the client to negotiate with the given server through the conduit to obtain a session master; and (iv) upon successful completion of the negotiation, for controlling the client to deliver the session master secret to the proxy using the first secure connection; and a second routine (i) for controlling the proxy to use the session master secret to generate given cryptographic information, (ii) for controlling the proxy to request that the client selectively establish a separate secure connection with another server, and (iii) for switching the proxy into an active operating state during which it can participate in communications between the client and the given server.

Claim 32

Dependent Claim 191 words

A computer program product in a computer readable medium for use in a cryptographic system including a client, a set of servers, and a proxy, comprising: a first routine (i) for controlling the client to request a first secure connection to the proxy, (ii) responsive to authenticating validity of a certificate from the proxy, for controlling the client to request a second secure connection to proxy, the second secure connection requesting the proxy to act as a conduit to a given server, (iii) for controlling the client to negotiate with the given server through the conduit to obtain a session master; and (iv) upon successful completion of the negotiation, for controlling the client to deliver the session master secret to the proxy using the first secure connection; and a second routine (i) for controlling the proxy to use the session master secret to generate given cryptographic information, (ii) for controlling the proxy to request that the client selectively establish a separate secure connection with another server, and (iii) for switching the proxy into an active operating state during which it can participate in communications between the client and the given server.

Claim 33

Dependent Claim 157 words

A computer program product having computer readable program code on a usable medium for use in a client for enabling a proxy to participate in a secure communication, comprising: means for transmitting a request from the client to the proxy to establish a first secure session; means for transmitting a request from the client to the proxy to establish a second secure session between the client and the proxy, the second secure session requesting the proxy to act as a conduit to an origin server; means for transmitting a session master secret from the client to the proxy using the first secure session to enable the proxy to participate in the secure communication; means responsive to receipt at the client of a given request from the proxy during the secure communication for controlling the client to obtain a new session master secret; and means for transmitting the new session master secret from the client to the proxy.

Claim 34

Dependent Claim 157 words

A computer program product having computer readable program code on a usable medium for use in a client for enabling a proxy to participate in a secure communication, comprising: means for transmitting a request from the client to the proxy to establish a first secure session; means for transmitting a request from the client to the proxy to establish a second secure session between the client and the proxy, the second secure session requesting the proxy to act as a conduit to an origin server; means for transmitting a session master secret from the client to the proxy using the first secure session to enable the proxy to participate in the secure communication; means responsive to receipt at the client of a given request from the proxy during the secure communication for controlling the client to obtain a new session master secret; and means for transmitting the new session master secret from the client to the proxy.

Claim 35

Dependent Claim 147 words

A computer program product having computer readable program code on a usable medium for use in a proxy for enabling the proxy to participate in a secure communication, comprising: means for receiving at the proxy a request from a client to establish a first secure session between the client and the proxy; means for receiving at the proxy a request from the client to establish a second secure session between the client and the proxy, the second secure session requesting the proxy to act as a conduit to an origin server; means for receiving at the proxy a session master secret transmitted from the client using the first secure session; means responsive to a given occurrence during the secure communication for transmitting from the proxy to the client a given request; and means for receiving at the proxy a new session master secret transmitted from the client.

Claim 36

Dependent Claim 147 words

A computer program product having computer readable program code on a usable medium for use in a proxy for enabling the proxy to participate in a secure communication, comprising: means for receiving at the proxy a request from a client to establish a first secure session between the client and the proxy; means for receiving at the proxy a request from the client to establish a second secure session between the client and the proxy, the second secure session requesting the proxy to act as a conduit to an origin server; means for receiving at the proxy a session master secret transmitted from the client using the first secure session; means responsive to a given occurrence during the secure communication for transmitting from the proxy to the client a given request; and means for receiving at the proxy a new session master secret transmitted from the client.

Claim 37

Dependent Claim 28 words

The computer program product as described in claim 27 further including means for using the session master secret and the new session secret to generate given cryptographic information.

Annuity Stage	Window Opens	Payment Deadline	Surcharge Period Until	Estimated Fee	Status
3.5 Years (Year 4)	2006-06-23	2006-12-23	2007-06-24	$2000.00	Window Closed / Lapsed
7.5 Years (Year 8)	2010-06-23	2010-12-23	2011-06-24	$3760.00	Window Closed / Lapsed
11.5 Years (Year 12)	2014-06-23	2014-12-23	2015-06-24	$7700.00	Window Closed / Lapsed

Dynamic connection to multiple origin servers in a transcoding proxy

Abstract

Inventors

Bibliographic Details

Claims Analysis

References Cited (Backward Citations)

USPTO Annuity & Maintenance Windows

Assigned Categories & Tags

Assign Category Tag