Patent ID: 7228412
Filing Date: 2007-06-05
Classification: H04L

Abstract:
1. A method for enabling secure communication between a client on an open network and a server apparatus on a secure network, the method performed on an intermediary apparatus coupled to the secure network and the open network, comprising: negotiating, with the intermediary apparatus, a secure communications session with the client via the open network, wherein the secure communications session provides for communication of application data from the client to the intermediary apparatus via a plurality of security records, and wherein one or more of the security records includes encrypted application data spanning multiple data packets; negotiating, with the intermediary apparatus, an open communications session with the server via the secure network; receiving, with the intermediary apparatus, one or more of the data packets for a first one of the security records using the secure communications session; prior to receiving a final packet of the first one of the security records, processing the one or more data packets of the first one of the security records with the intermediary apparatus by decrypting the encrypted application data in the received data packets, forwarding decrypted, unauthenticated application data from the intermediary apparatus to the server via the secure network prior to authenticating the first one of the security records with the intermediary apparatus, and discarding at least a portion of the decrypted, unauthenticated application data for the first one of the security records; and upon receipt of the final packet of the first one of the security records, processing a remaining, non-discarded portion of the decrypted, unauthenticated application data for the first one of the security records to authenticate the first one of the security records with the intermediary apparatus.