Patent ID: 8800007

Claim:
A method comprising: establishing, by a first client computing device, a first secure session with a secure access appliance; receiving, by the first client computing device directly via a communication channel that is not mediated by the secure access appliance, a request from a second client computing device for secure session data for the first secure session usable by the second client computing device to establish a second secure session with the secure access appliance; receiving, by the first client computing device and from the secure access appliance, data that indicates whether the first client computing device is allowed to send the secure session data to the second client computing device; generating, by the first client computing device, a message including the secure session data for the first secure session; and sending, by the first client computing device and without mediation of the secure access appliance, and based on the data that indicates whether the first client computing device is allowed to send the secure session data, the message directly to the second client computing device only when the first client computing device is allowed to send the secure session data to the second client computing device.