Patent ID: 8583914

Claim:
A proxy device comprising: a data receiver device including instructions embedded in a storage medium for execution by a processor and configured to cause the processor to perform operations comprising: receiving data sent by a first device and destined for a second device, the data encrypted with a first session key that is established based on negotiation between the first device and the proxy device, the first session key based on using a function applied to a pre-master key shared among the first device, the proxy device and the second device, and forwarding the data to a decrypter module; the decrypter module including instructions embedded in the storage medium for execution by the processor and configured to cause the processor to perform operations comprising: decrypting the data using the first session key; and forwarding the decrypted data to a data processor module; the data processor module including instructions embedded in the storage medium for execution by the processor and configured to cause the processor to perform operations comprising: processing the decrypted data, including generating new data that is different from the decrypted data; and forwarding the decrypted data and the new data to a data sender module; and the data sender module comprising an encrypter module that includes instructions embedded in the storage medium for execution by the processor and configured to cause the processor to perform operations comprising: receiving the decrypted data and the new data from the data processor module; re-encrypting the decrypted data using a second session key that is established based on negotiation between the proxy device and the second device, the second session key based on using the function applied to the pre-master key such that the second session key includes same information as the first session key; and encrypting the new data using a second write session key that is established by negotiation between the second device and the proxy device, the second write session key being different from the second session key and is based on using the function applied to a second pre-master key shared among the first device, the proxy device and the second device, the second write session key corresponding to a first write session key that is established with a negotiation between the first device and the proxy device, the first write session key being different from the first session key and is based on using the function applied to the second pre-master key, the first and the second write session keys used for encryption of new data generated by the proxy device.