Patent ID: 9112907
Filing Date: 2015-08-18
Classification: H04L

Abstract:
1. A computer system for reutilizing transport layer security (TLS) connections among separate application within a computer system, the computer system comprising: one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage devices and program instructions which are stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, the program instructions comprising: program instructions to establish a transmission control program/Internet protocol (TCP/IP) connection between a first application of a first endpoint and a second application of a second endpoint, wherein the secured communication is based on transmission of public keys during the TLS handshake and, wherein the transmitted public keys comprise shared encrypted communication that is transmitted between the first application and the second application; program instructions to perform a TLS handshake over the established TCP/IP connection, wherein the first application of the first endpoint and the second application of the second endpoint communicate securely, wherein the secured communication is based on transmission of public keys during the TLS handshake and, wherein the transmitted public keys comprise shared encrypted communication that is transmitted between the first application and the second application; program instructions to transmit a request from a third application of the second endpoint to transfer a TLS context from the second application of the second endpoint, the request of the third application occurs via a previously agreed shared network connection of the TLS handshake; and program instructions to utilize a predetermined method of providing a TLS context to the third application, wherein the third application of the second endpoint and the first application of the first endpoint communicate securely, in response to the second application of the second endpoint accepting the transfer request, wherein the third application of the second endpoint resumes the TLS handshake between the first application on the first endpoint and the second application on the second endpoint, the resumed handshake avoids system performance redundancy of performing another TLS handshake between the first application on the first endpoint and the second application on the second endpoint.