IP Library Granted Patent US 9,112,908
Granted Patent B2
US 9,112,908 · App. 13/915,755 · Granted Aug 18, 2015

System and method for managing TLS connections among separate applications within a network of computing systems

Inventors: Caspar G.J. Krieger (West Perth, AU); Billy Joe Soper (West Perth, AU); Kenichi Yoshimura (West Perth, AU)
Assignee: International Business Machines Corporation
H04L63/168H04L63/0823
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,112,908
App. No.
13/915,755
Granted
Aug 18, 2015
Kind
B2
Abstract

An approach for reutilizing transport layer security (TLS) connections among separate application is provided. In one aspect, a computing system establishes a a transmission control program/Internet protocol (TCP/IP) connection between a first application of a first endpoint and a second application on a second endpoint. The computing system further performs a TLS handshake over the established TCP/IP connection. The computing system also transmits a request from a third application of the second endpoint to transfer a TLS context from the second application on the second endpoint. In response to the second application on the second endpoint accepting the transfer request, the second application utilizing via the one or more computer processors, a predetermined method of providing a TLS context to the third application, wherein the third application of the second endpoint and the first application of the first endpoint communicate securely.

Claims (11)

1. A method for reutilizing transport layer security (TLS) connections among separate application within a computer system, the method comprising the steps of:

establishing, by one or more computer processors, a transmission control program/Internet protocol (TCP/IP) connection between a first application of a first endpoint and a second application on a second endpoint;

performing, by the one or more computer processors, a TLS handshake over the established TCP/IP connection, wherein the first application on the first endpoint and the second application on the second endpoint communicate securely, wherein the secured communication is based on transmission of public keys during the TLS handshake and, wherein the transmitted public keys comprise shared encrypted communication that is transmitted between the first application and the second application;

transmitting, by the one or more computer processors, a request from a third application of the second endpoint to transfer a TLS context from the second application on the second endpoint the request of the third application occurs via a previously agreed shared network connection of the TLS handshake; and

in response to the transfer request, the second application utilizing, via the one or more computer processors, a predetermined method of providing the TLS context to the third application, wherein the third application of the second endpoint and the first application of the first endpoint communicate securely, and wherein the third application of the second endpoint resumes the TLS handshake between the first application on the first endpoint and the second application on the second endpoint, the resumed handshake avoids system performance redundancy of performing another TLS handshake between the first application on the first endpoint and the second application on the second endpoint.

2. The method according to claim 1 , wherein a TLS connection provides communication security for internet protocol suites including TCP/IP, wherein the TCP/IP is a secure connection that is established between the first application and the second application, and wherein TCP/IP provides connectivity that specifies how information should be formatted, addressed, transmitted, routed or received between the first end point and the second endpoint.

3. The method according to claim 1 , wherein once the TLS handshake is completed, communications are transmitted over a TLS connection of the TCP/IP of the first endpoint and the second endpoint, causing the communications to be encrypted before and decrypted after the communications are transmitted over the TCP/IP connection of the first endpoint and the second endpoint.

4. The method according to claim 1 , wherein the TLS handshake includes the first endpoint and the second endpoint communicating public keys to communicate and agree upon a shared network connection, and then using the shared network connection to encrypt communication of the first endpoint and the second endpoint.

5. The method according to claim 1 , wherein the request from a third application of the second endpoint to transfer a TLS context to the second application on the second endpoint indicates an intent of the third application to transfer ownership of the TLS context to the third application on the second endpoint.

6. The method according to claim 5 , wherein the second application on the second endpoint may accept or deny the request from the third application of the second endpoint.

7. The method according to claim 5 , wherein communication from the third application of the second endpoint and the second application on the second endpoint occurs through a previously agreed method of communication to provide the TLS context to the third application of the second endpoint.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 12, 2013
From: KRIEGER, CASPAR G.J.; SOPER, BILLY JOE; YOSHIMURA, KENICHI
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 030593/0924 →
Continuity (2)
Continuation 13906464 · May 31, 2013
Related Publication 20140372747A1 · Dec 18, 2014