US 11,855,966 B2
Methods and systems for efficient encrypted SNI filtering for cybersecurity applications
Sean Moore, Hollis, NH (US); Vincent Mutolo, Portsmouth, NH (US); and Jonathan R. Rogers, Hampton Falls, NH (US)
Assigned to Centripetal Networks, LLC, Portsmouth, NH (US)
Filed by Centripetal Networks, LLC, Portsmouth, NH (US)
Filed on Oct. 3, 2022, as Appl. No. 17/958,534.
Application 17/958,534 is a continuation of application No. 17/688,108, filed on Mar. 7, 2022, granted, now 11,463,405, issued on Oct. 4, 2022.
Application 17/688,108 is a continuation of application No. 17/307,080, filed on May 4, 2021, granted, now 11,271,902, issued on Mar. 8, 2022.
Application 17/307,080 is a continuation of application No. 17/175,747, filed on Feb. 15, 2021, granted, now 11,646,996.
Application 17/175,747 is a continuation of application No. 16/928,083, filed on Jul. 14, 2020, granted, now 10,924,456, issued on Feb. 16, 2021.
Prior Publication US 2023/0103468 A1, Apr. 6, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); H04L 61/4511 (2022.01)
CPC H04L 63/0236 (2013.01) [H04L 61/4511 (2022.05); H04L 63/0281 (2013.01); H04L 63/205 (2013.01); H04L 63/306 (2013.01)] 24 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, by a packet-filtering device, a first plurality of packets associated with establishing a secure communication channel with a first destination, wherein the first plurality of packets comprises a plaintext server name indication (SNI) value;
blocking, by the packet-filtering device and based on a determination that the first plurality of packets comprises the plaintext SNI value, the first plurality of packets;
receiving, by the packet-filtering device, a second plurality of packets associated with establishing a secure communication channel with a second destination, wherein the second plurality of packets comprises an encrypted server name indication (eSNI) value; and
forwarding, by the packet-filtering device and based on a determination that the second plurality of packets comprises the eSNI value, the second plurality of packets to the second destination.