公开(公告)号：WO2016172035A1

公开(公告)日：2016-10-27

申请号：PCT/US2016/028083

申请日：2016-04-18

Applicant: CISCO TECHNOLOGY, INC.

Inventor： LU, Chengning ,  BENNUN, Eitan ,  JAYADEV KUMAR, Maypalli ,  RAJGURU, Nikhil, Ravindra ,  JOSHUA, Shamira ,  LIN, Richard ,  CAREDIO, Elisa

IPC: H04L29/06

CPC classification number: H04L63/0281 ,  H04L63/0464 ,  H04L63/166 ,  H04L65/1069 ,  H04L67/14 ,  H04L67/28 ,  H04L67/42

Abstract: An intermediary network device receives a request for a secure communication session between an endpoint server and an endpoint client through the network device. The secure session between the endpoint server and the endpoint client is divided into a first session and a second session. The first session is between the endpoint server and the network device. The second session is between the network device and the endpoint client. The network device receives a first session ticket from the endpoint server. A session state of a proxy client in the first session, including the first session ticket, is determined. The network device also determines a session state of a proxy server in the second session. The combination of the session state of the proxy client, including the first session ticket, and the session state of the proxy server are encapsulated as part of a second session ticket.

Abstract translation: 中间网络设备通过网络设备接收端点服务器和端点客户端之间的安全通信会话的请求。 端点服务器和端点客户端之间的安全会话分为第一会话和第二会话。 第一个会话在端点服务器和网络设备之间。 第二个会话在网络设备和端点客户端之间。 网络设备从端点服务器接收第一个会话凭证。 确定第一会话中的代理客户端的会话状态，包括第一个会话凭证。 网络设备还确定第二会话中的代理服务器的会话状态。 代理客户端的会话状态（包括第一会话票据）和代理服务器的会话状态的组合被封装为第二会话票证的一部分。