Patent ID: 8073949
Filing Date: 2011-12-06
Classification: H04L

Abstract:
1. A method allowing a client application running on a client machine linked to a client network to establish communication, with a server application hosted in a server machine linked to a server network, in order to exchange messages with the server application, said messages passing between the client network and the server network through a network layer of a gateway machine, the method comprising: A) receiving a request from the client application running on the client machine to establish communication at a first security level of encryption to the server machine; B) in response to the request, creating a first port in the gateway machine; C) also in response to the request, creating one or more first created processes on the gateway machine; D) the gateway machine establishing a first connection from the client application to the first port on the gateway machine, the first connection connecting the client machine to the gateway machine for the exchange of messages at the first security level of encryption; E) creating a second port in the gateway machine; F) the gateway machine establishing a second connection from the second port of the gateway machine to the server machine, the second connection to be used to exchange messages at a second security level of encryption which is reduced from the first security level of encryption; and, G) the gateway machine receiving, on the first port, a plurality of messages received at the first security level of encryption from the client machine and linked client network; H) the gateway machine performing, with at least one of the first created processes, security processing, the security processing reducing the level of encryption of the plurality of the messages received from the client machine from the first security level of encryption to the second security level of encryption; I) after performing the security processing to reduce the level of encryption of the plurality of messages, the gateway machine sending, at the second security level of encryption, to the second port those messages sent from the client machine at the first security level of encryption and addressed to the server machine; J) routing through the gateway machine messages received by the gateway machine from the server machine that are addressed to the client application on the client machine, and sending those messages to the client application on the first port of the gateway machine; and, K) the gateway machine first created processes handling security processing at the first security level of encryption for said messages sent and said messages received on the first port of the gateway machine over the first connection, thereby removing from the server machine, security processing at the first security level of encryption for these messages, and reducing load in terms of computing resources for encryption operations on the server machine.