Patent ID: 8843750

Claim:
A computer implemented method for monitoring a secured communication channel between a software application included in a computer system and a remote server, the method comprising: identifying, by a computer system, a certificate authority (CA) certificate stored in a local storage accessible by the computer system, the CA certificate including an original public key; generating, by the computer system, a key pair that includes first public key and a first private key; modifying, by the computer system, the CA certificate by replacing the original public key with the first public key; intercepting, by the computer system, an intercepted certificate transmitted by a the remote server to the a software application, the intercepted certificate comprising an intercepted public key; generating, by the computer system, a second public key for the intercepted certificate; modifying, by the computer system, the intercepted certificate by replacing the intercepted public key in the intercepted certificate with the second public key; signing, by the computer system, the modified intercepted certificate using the first private key of the key pair; transmitting, by the computer system, the modified intercepted certificate including the second public key to the software application; intercepting, by the computer system, a symmetric session key transmitted by the software application to the remote server; decrypting, by the computer system, the symmetric session key using a second private key associated with the second public key; re-encrypting, by the computer system, the symmetric session key using the intercepted public key included in the intercepted certificate; transmitting, by the computer system, the re-encrypted symmetric session key to the remote server; and monitoring, by the computer system, the security communication channel between the software application and the remote server using the symmetric session key.