Patent ID: 8996873
Filing Date: 2015-03-31
Classification: G06F,H04L

Abstract:
1. A method in a first server for establishing a secure session with a client device, the method comprising: receiving, from the client device, a Client Hello message that includes a first random value; in response to the received Client Hello message, transmitting a Server Hello message to the client device that includes a second random value; transmitting, to the client device, a Server Certificate message that includes one or more digital certificates; transmitting, to the client device, a Server Hello Done message; receiving, from the client device, a Client Key Exchange message that includes an encrypted premaster secret, wherein the first server does not have access to a private key that can decrypt the encrypted premaster secret; transmitting, to a second server that has access to the private key that can decrypt the encrypted premaster secret, the following: receiving, from the second server, a master secret that was generated using a function that takes as input at least in part the decrypted premaster secret, the first random value, and the second random value; receiving, from the client device, a first Change Cipher Spec message; receiving, from the client device, a first Finished message; generating, using the received master secret, a set of one or more session keys to be used in the secure session for encrypting and decrypting communication between the client device and the first server; transmitting to the client device, a second Change Cipher Spec message; and transmitting, to the client device, a second Finished message.