PATENT CLAIM ANALYSIS

Application Number: 15860652
Application Type: Utility
Filing Date: 2018-01
Publication Date: 2018-06
Patent Classification: ["713", "152000"]

Abstract:
A network device receives TCP segments of a flow via a first SSL session and transmits TCP segments via a second SSL session. Once a TCP segment has been transmitted, the TCP payload need no longer be stored on the network device. Substantial memory resources are conserved, because the device may have to handle many retransmit TCP segments at a given time. If the device receives a retransmit segment, then the device regenerates the retransmit segment to be transmitted. A data structure of entries is stored, with each entry including a decrypt state and an encrypt state for an associated SSL byte position. The device uses the decrypt state to initialize a decrypt engine, decrypts an SSL payload of the retransmit TCP segment received, uses the encrypt state to initialize an encrypt engine, re-encrypts the SSL payload, and then incorporates the re-encrypted SSL payload into the regenerated retransmit TCP segment.

Claim (Index 10):
A method comprising:\n (a) receiving a first Transmission Control Protocol (TCP) segment from a client in a first SSL session and transmitting the first TCP segment to a server in a second SSL session, wherein the first TCP segment is communicated from the client through a network appliance and to the server via a flow of a TCP connection; (b) receiving a retransmit TCP segment from the client onto the network appliance, wherein the retransmit TCP segment is a retransmit of the first TCP segment, wherein the first TCP segment as transmitted from the client in (a) had a TCP payload, and wherein at the time of the receiving of (b) the network appliance did not store the TCP payload; (c) storing a number of decrypt engine states on the network appliance, wherein the decrypt engine states are decrypt engine states for the flow of the TCP connection, wherein at a time a number of TCP segments communicated from the network appliance to the server via the flow are unacknowledged, and wherein the number of decrypt engine states stored in (c) is smaller than the number of unacknowledged TCP segments; (d) using one of the decrypt engine states to set the state of a decrypt engine; (e) using the decrypt engine to decrypt an Secure Sockets Layer (SSL) payload of the retransmit TCP segment thereby generating an unencrypted SSL payload, wherein the decrypt engine implements a stream cipher; (f) encrypting the unencrypted SSL payload thereby generating a re-encrypted SSL payload; and (g) transmitting a retransmit TCP segment from the network appliance to the server, wherein the retransmit TCP segment transmitted in (g) includes the re-encrypted SSL payload.

Metadata:
- Claim Count in Document: 59.0
- Percentile: 86.0
- Lexical Diversity: 2.15789
- Patent Class: 713.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['13737907', '13730985', '09900496', '11556951', '09900515']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.4412835629591342
- 35 USC 102 Novelty (BERT): 0.6119583388512781
- Combined Prediction Score: 0.4583510405483486
- Mean Citation Score: 382.857018
- Max Citation Score: 590.3987
- Similarity Product: 489.9827001550972

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 0
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test