MTLS Authorized Viewer for Secure Data Inspection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current TLS protocols require key exchange between client and server, limiting inspection of data transferred, and existing proxy solutions need access to private keys, which is not feasible with increasing security measures.

Innovation Solution

Implementing a Mutual TLS (MTLS) authorized viewer that intercepts files, generates and manages encryption keys, and initiates TLS connections without exchanging private keys, allowing for content inspection and prioritization of files.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If TLS protocol requires key exchange between client and server, then data transfer security is improved, but data inspection capability deteriorates

Engineering Contradiction:

Improvedata transfer securityVSAvoiddata inspection capability

Core Design Contradiction:

ReliabilityVSDifficulty of detecting and measuring

Solution Approach 1:

The patent introduces an authorized viewer as an intermediary component that receives encrypted data streams from the TLS connection, decrypts them using obtained encryption keys, and forwards them for inspection. This mediator enables data inspection without breaking the original TLS security between client and server, as the authorized viewer is an approved third party with legitimate access rights.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Difficulty of detecting and measuring

If proxy solutions access private keys for TLS inspection, then data inspection capability is improved, but key security management complexity increases

Engineering Contradiction:

Improvedata inspection capabilityVSAvoidkey security management complexity

Core Design Contradiction:

Difficulty of detecting and measuringVSDevice complexity

Solution Approach 1:

The patent extracts the encryption key from the private key holder (client or server) and provides it to the authorized viewer through secure key exchange mechanisms. By taking out only the necessary encryption key component rather than requiring full private key access, the system enables inspection while reducing key management complexity and maintaining security boundaries.

Inventive Principle:

Principle #2Taking out (Extraction)

3Reliability

If files are inspected for malicious data, then security verification is improved, but data transfer time increases

Engineering Contradiction:

Improvesecurity verificationVSAvoiddata transfer time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent implements prioritization mechanisms that perform preliminary assessment of files to determine inspection urgency. High-priority files with lower security risk profiles can be fast-tracked with minimal inspection, while lower-priority files undergo more thorough examination. This preliminary triage reduces overall transfer time while maintaining security verification for critical files.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS12242630B2Mutual transport layer security (TLS) verification using an authorized viewer

Publication Date: 2025.03.04 BANK OF AMERICA CORP

AI summary

Methods are provided to secure a mutual Transport Layer Security (TLS) verification between a client computer and a server computer, using an authorized viewer. Methods may include intercepting a file at the authorized viewer. Methods may include using a content inspection Artificial Intelligence (AI) module to inspect the data. Methods may include preventing the transmission of malicious data to a server computer.