Patent ID: 7516485
Filing Date: 2009-04-07
Classification: H04L

Abstract:
1. A method for enabling a firewall to securely pass encrypted data, the method comprising: detecting, at a firewall, an exchange of a first encryption key between a host device and a remote device, wherein the first encryption key supports confidentiality protection of first data exchanged between the host device and the remote device according to a first security policy, and wherein detecting the exchange is initiated by the firewall; exchanging a second encryption key between the firewall and the host device when the exchange of the first encryption key is detected at the firewall, wherein the exchange of the second encryption key supports confidentiality protection of second data exchanged between the firewall and the host device according to a second security policy; requesting, at the firewall, based at least in part upon the second security policy, the first encryption key from the host device, wherein the first encryption key is sent under the protection of the second encryption key and in accordance with the second security policy; and passing encrypted data when it is determined that the first encryption key is received.