Patent ID: 8347353
Filing Date: 2013-01-01
Classification: H04L

Abstract:
1. A method for addressing security in a TCP-based asymmetrical network having a plurality of paths, a plurality of security elements, and a centralized database that includes one or more processing devices, wherein each security element is coupled to at least one path, the method comprising: at the centralized database, by way of a processing device, receiving a first handshake message from a first of the plurality of security elements, wherein the first security element received the first handshake message on a first path; at the centralized database, by way of a processing device, receiving a second handshake message from a second of the security elements, wherein the second security element received the second handshake message on a second path, wherein the centralized database is configured to track handshake messages and associations between the handshake messages and communication sessions; determining that the first handshake message is associated with a communication session; determining that the second handshake message is associated with the same communication session that is associated with the first handshake message; storing in the centralized database an association between the second handshake message and the first handshake message, based on the associations of the first handshake message and the second handshake message with the same communication session; and storing a determination in the centralized database that the communication session is allowed, based on the association of the second handshake message to the first handshake message.