Patent ID: 9621543
Date: 2017-04-11
CPC Classifications: H04L

Claim:
1. A method to monitor network traffic for a computing device, the method comprising: intercepting, with a meter executing on the computing device, a request sent by a client application executing on the computing device to establish a secure communication session with a network server, the meter including a kernel extension executing in an operating system kernel of the computing device; receiving, at the meter in response to forwarding the request to the network server, a first public key provided by the network server for encrypting a session key to be used to exchange network traffic via the secure communication session; providing, from the meter to the client application, a second public key associated with the meter instead of the first public key provided by the network server in response to the request being intercepted by the meter; using the first public key and a private key associated with the second public key to exchange, via the meter, the session key between the client application and the network server to enable the meter to access an unencrypted version of the session key; and monitoring, with the meter, the network traffic exchanged between the client application and the network server via the secure communication session using the unencrypted version of the session key.