A SYSTEM AND METHOD OF EXPLOITING THE SECURITY OF A SECURE COMMUNICATION CHANNEL TO SECURE A NON-SECURE COMMUNICATION CHANNEL

摘要

The present invention features a system and method for establishing a securecommunication channel between a client and an application server. In oneembodiment, a ticket service generates a ticket having an identifier and asession key. A communications device obtains the ticket from the ticketservice and transmits the ticket to a client over a secure communicationchannel. The client transmits the identifier of the ticket to an applicationserver over an application communication channel. The application server thenobtains a copy of the session key of the ticket from the ticket service.Communications exchanged between the client and the application server overthe application communication channel are then encrypted using the session keyto establish the application communication channel as a secure communicationchannel.