US 12,088,567 B2
Distribution of private session key to network communication device for secured communications
Renato J. Recio, Austin, TX (US); Ryan Moats, Omaha, NE (US); Eran Gampel, Tel Aviv (IL); Gal Sagi, Hod Hasharon (IL); Etai Lev Ran, Nofit (IL); Dean Har'el Lorenz, Haifa (IL); and Ravinder Reddy Amanaganti, San Ramon, CA (US)
Assigned to INTERNATIONAL BUSINESS MACHINES CORPORATION, Armonk, NY (US)
Filed by INTERNATIONAL BUSINESS MACHINES CORPORATION, Armonk, NY (US)
Filed on Aug. 31, 2023, as Appl. No. 18/459,072.
Application 18/459,072 is a continuation of application No. 17/883,328, filed on Aug. 8, 2022, granted, now 11,765,142.
Prior Publication US 2024/0048538 A1, Feb. 8, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); H04L 9/08 (2006.01); H04L 45/74 (2022.01); H04L 69/16 (2022.01)
CPC H04L 63/0435 (2013.01) [H04L 9/0819 (2013.01); H04L 45/74 (2013.01); H04L 69/16 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A method, comprising:
establishing a secure communication tunnel between user space software and a client device;
communicating, from the user space software to a network communication device, a private session key, the private session key communicated to the network communication device in at least one User Datagram Protocol (UDP) datagram, wherein the private session key is not known to, nor discovered by, a hypervisor stack nor an operating system space of a data processing system hosting the user space software; and
communicating, from the user space software to the network communication device, outbound session packets;
wherein the network communication device is programmed to initiate operations comprising:
generating, by the network communication device, encrypted outbound session packets by encrypting the outbound session packets using the private session key;
communicating, by the network communication device to the client device via the secured communication tunnel, the encrypted outbound session packets;
receiving, by the network communication device from the client device, via the secured communication tunnel, inbound session packets;
generating, by the network communication device, decrypted inbound session packets by decrypting the inbound session packets using the private session key; and
communicating, from the network communication device to the user space software, the decrypted inbound session packets.