PATENT CLAIM ANALYSIS

Application Number: 16021950
Application Type: Utility
Filing Date: 2018-06
Publication Date: 2019-08
Patent Classification: ["713", "171000"]

Abstract:
Decrypting network traffic on a middlebox device using a trusted execution environment (TEE). In one embodiment, a method may include loading a kernel application inside the TEE, loading a logic application outside the TEE, intercepting, by the logic application, encrypted network traffic, forwarding, from the logic application to the kernel application, the encrypted network traffic, decrypting, at the kernel application, the encrypted network traffic, inspecting, at the kernel application, the decrypted network traffic according to a sensitivity policy to determine whether the decrypted network traffic includes sensitive data, forwarding, from the kernel application to the logic application, filtered decrypted network traffic that excludes the sensitive data, processing, at the logic application, the filtered decrypted network traffic, forwarding, from the logic application to the kernel application, the filtered decrypted network traffic after the processing by the logic application, and forwarding, from the kernel application, the encrypted network traffic.

Claim (Index 11):
One or more non-transitory computer-readable media comprising one or more computer-readable instructions that, when executed by one or more processors of a middlebox device, cause the middlebox device to perform a method for decrypting network traffic on the middlebox device using a trusted execution environment, the method comprising:\n (a) initializing the trusted execution environment (TEE); (b) loading a kernel application inside the TEE and a sensitivity policy inside the TEE; (c) sending, to a client device or a server device, attestation that the kernel application inside the TEE is authentic; (d) receiving at the kernel application inside the TEE, from the client device or the server device, a symmetric session key of an encrypted network session between the client device and the server device; (e) loading a logic application outside the TEE; (f) intercepting, by the logic application, encrypted network traffic from the client device that is directed to the server device; (g) forwarding, from the logic application outside the TEE to the kernel application inside the TEE, the encrypted network traffic; (h) decrypting, at the kernel application inside the TEE, the encrypted network traffic using the symmetric session key; (i) inspecting, at the kernel application inside the TEE, the decrypted network traffic according to the sensitivity policy to determine whether the decrypted network traffic includes sensitive data; (j) in response to determining that the decrypted network traffic includes sensitive data, filtering the decrypted network traffic to exclude the sensitive data; (k) forwarding, from the kernel application inside the TEE to the logic application outside the TEE, the filtered decrypted network traffic; (l) processing, at the logic application outside the TEE, the filtered decrypted network traffic; (m) forwarding, from the logic application outside the TEE to the kernel application inside the TEE, the filtered decrypted network traffic after the processing by the logic application outside the TEE; and (n) forwarding, from the kernel application inside the TEE, the encrypted network traffic to the server device.

Metadata:
- Claim Count in Document: 50.0
- Percentile: 94.0
- Lexical Diversity: 3.33962
- Patent Class: 713.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['15894619', '15856040', '15640160', '14582173', '15910812']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.3747019962341357
- 35 USC 102 Novelty (BERT): 0.636372627781146
- Combined Prediction Score: 0.4008690593888367
- Mean Citation Score: 284.21939999999995
- Max Citation Score: 597.03754
- Similarity Product: 568.7097421055927

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test