Patent ID: 7627896
Filing Date: 2009-12-01
Classification: H04L

Abstract:
1. A computer-implemented method for controlling communication carried out under SSL (Secure Sockets Layer) protocol, the method comprising: defining a security policy having rules indicating conditions under which a machine is permitted to participate in an SSL session, apart from any conditions required by the SSL protocol; trapping an attempt by a particular application running on the machine to participate in an SSL session, by intercepting the particular application's attempt to return a certificate that provides authentication; determining whether the machine complies with the rules of the security policy; if the machine complies with the rules of the security policy, allowing the particular application to return the certificate that provides authentication, thereby allowing the machine to participate in the SSL session; and otherwise blocking the particular application from returning the certificate that provides authentication, so that the machine is blocked from participating in the SSL session when the machine does not comply with the rules.