How Netscape Created the Secure Socket Layer (SSL) for Web Security
Netscape's 1995 patent defining the architecture for SSL, the foundational technology that allows browsers to securely transmit encrypted data over the internet.
Original patent title: “Secure socket layer application program apparatus and method”
Netscape's 1995 patent defining the architecture for SSL, the foundational technology that allows browsers to securely transmit encrypted data over the internet. Granted to Netscape Communications Corp in 1997 with 6 claims and 383 forward citations, and it is now in the public domain.
Coverage
What does this patent actually cover?
This patent describes a software layer that sits between an application, like a web browser, and the network transport protocols. It provides a socket interface that allows applications to send and receive data without needing to know the technical details of the encryption process. When data is sent, the code intercepts it, encrypts it, and passes it to the transport layer. When data is received, it decrypts the information before handing it off to the application, ensuring that sensitive data like credit card numbers remains private during transit.
The gap
What does this patent NOT cover?
- Does not cover specific encryption algorithms like RSA or AES individually.
- Does not cover the physical hardware or network cabling used to transmit data.
- Does not cover the underlying TCP/IP protocol stack itself.
- Does not cover authentication methods like digital certificates not described in the specific socket-layer implementation.
These exclusions are unique to PatentBrief — derived from the actual claim language, not patent-office boilerplate.
Key facts
What made this novel
The innovation was placing encryption at the socket layer, which allowed developers to add security to existing applications without rewriting the entire network communication stack.
The Patent Drawing
Schematic visualization of the patent's claim structure. Hand-drawn diagrams in progress for each landmark patent.
Where you've seen this
Real-world examples
HTTPS web browsing
Secure email transmission (SMTPS)
Online banking portals
E-commerce checkout pages
Why it matters
The bigger picture
This patent is the blueprint for the 's' in HTTPS. By creating a standardized way to encrypt data at the socket layer, it enabled the birth of e-commerce and secure online banking, transforming the internet from an open, insecure network into a platform for private transactions.
Filed
August 25, 1995
Granted
August 12, 1997
Market context
Who's building on this
Companies in this space
The technology evolved into TLS (Transport Layer Security), which is maintained by the IETF. Modern browser vendors like Google, Mozilla, and Apple, as well as cloud infrastructure providers like Cloudflare and AWS, continue to build upon these foundational security concepts.
Market impact
This patent helped establish the SSL standard, which became the mandatory requirement for secure web traffic. It effectively created the trust infrastructure necessary for the global digital economy to function, blocking the rise of insecure alternatives and setting the stage for modern cybersecurity standards.
Claim 1 — Plain English
What this patent covers
This patent describes a software layer that sits between an application, like a web browser, and the network transport protocols. It provides a socket interface that allows applications to send and receive data without needing to know the technical details of the encryption process. When data is sent, the code intercepts it, encrypts it, and passes it to the transport layer. When data is received, it decrypts the information before handing it off to the application, ensuring that sensitive data like credit card numbers remains private during transit.
The clever bit
The innovation was placing encryption at the socket layer, which allowed developers to add security to existing applications without rewriting the entire network communication stack.
What it does not cover
- Does not cover specific encryption algorithms like RSA or AES individually.
- Does not cover the physical hardware or network cabling used to transmit data.
- Does not cover the underlying TCP/IP protocol stack itself.
- Does not cover authentication methods like digital certificates not described in the specific socket-layer implementation.
Patent timeline
Application submitted to the patent office
Application published, typically 18 months after filing
Patent officially issued
Patent enters public domain
This patent is in the public domain
See the Freedom to Build guide — what is free to use, what is not, and how to cite this patent.
PatentBrief Score
Impact Score
Moderate
Citation count
40/40
Highly cited
Claim breadth
4/20
Moderate scope
Recency
0/20
Older than 20 years
Assignee scale
0/20
Independent or smaller assigneeassigneeThe entity that owns the patent — usually the inventor's employer or a company.Read more →
PatentBrief Impact Score — based on citation count, claim breadth, recency, and assignee scale. Not a legal assessment.
Heuristic Value Estimate
What this patent might be worth
$53K – $168K
Midpoint $105K · expired or expiring · industry ×1.4
Heuristic only — blends forward/backward citation counts, claim scope, time remaining, litigation history, and CPC-derived industry baseline. Real valuations need a professional appraisal.
Claim text not yet imported for this patent
The original legal language
Original claims
6 claims as filed with the patent office.
Concepts involved
Citations
Patent lineage
Cite this patent
Hickman, K. E. B., & Elgamal, T. (1997). How Netscape Created the Secure Socket Layer (SSL) for Web Security (U.S. Patent No. 5,657,390). U.S. Patent and Trademark Office. https://patentbrief.org/patent/us/5657390/secure-socket-layer-application-program-apparatus-and-method
Auto-generated from the patent record. Double-check author order and the issue date against the official USPTO document before submitting.
Embed
Add this patent to your site
Drop this plain-English patent card into any blog post or article — free, no signup. It always links back to the full breakdown here.
<div data-patentlens-widget data-patent-number="US5657390"></div> <script src="https://patentbrief.org/embed.js" async></script>
Stay in the loop
Get a weekly digest of new patents.
One email per week. No spam. Unsubscribe anytime.
Keep exploring
Related patents you should know
US 4683195 · 1987
How to Make Billions of Copies of a DNA Segment
This patent describes the Polymerase Chain Reaction (PCR), a method to rapidly create many copies of a specific piece of DNA or RNA, enabling its detection and analysis.
Cetus Corp
US 8697359 · 2014
How to Edit Genes in Human Cells Using an Engineered CRISPR System
This patent describes an engineered CRISPR-Cas9 system for precisely cutting DNA in eukaryotic cells to change how genes work, opening the door for gene editing in complex organisms.
Massachusetts Institute of Technology
US 7657849 · 2010
How the iPhone's Slide-to-Unlock Gesture Works
Apple's 2010 patent describes unlocking a device by dragging a specific graphical image across the touchscreen along a predefined path, a gesture that became iconic with the original iPhone.
Apple Inc
US 4733665 · 1988
How Doctors Implant a Permanent Stent Using a Balloon
This patent describes the method for placing a permanent, expandable wire mesh tube inside a blood vessel or other body tube using a balloon-tipped catheter to widen it and keep it open.
Expandable Grafts Partnership
US 4965188 · 1990
How to Make Many Copies of a DNA Piece with Heat
This patent describes the Polymerase Chain Reaction (PCR) method, a technique to make millions of copies of a specific DNA segment using a heat-resistant enzyme and repeated temperature changes.
Cetus Corp
US 4235871 · 1980
How to Encapsulate Active Materials in Lipid Bubbles Efficiently
This patent describes a method for trapping biologically active substances inside tiny, multi-layered fat bubbles called liposomes, using a specific water-in-oil emulsion and gel-forming process to improve how much material gets captured.
Individual
Semantically similar
You might also find these interesting
US 5774670 · 1998 · Netscape Communications Corp
How Websites Remember You Using Stored Data
US 4200770 · 1980 · Leland Stanford Junior University
How to Create a Secret Code Key Without Meeting First
US 4405829 · 1983 · Massachusetts Institute of Technology
How RSA Public-Key Encryption Keeps Digital Messages Secret
US 5673322 · 1997 · Bell Communications Research Inc
How Early Mobile Devices Accessed the Internet Using Split Proxies
More to explore
More in Software & Internet
US 4405829 · 1983 · Massachusetts Institute of Technology
How RSA Public-Key Encryption Keeps Digital Messages Secret
US 6285999 · 2001 · Leland Stanford Junior University
How Websites Get Ranked by Importance
US 5960411 · 1999 · Amazon com Inc
How Amazon's One-Click Ordering Works for Online Purchases
US 7669123 · 2010 · Facebook Inc
Displaying Friends' Activities in a Social Network Feed
New to patents?
Common Questions
Frequently Asked Questions
What does How Netscape Created the Secure Socket Layer (SSL) for Web Security cover?
Netscape's 1995 patent defining the architecture for SSL, the foundational technology that allows browsers to securely transmit encrypted data over the internet.
Who owns patent US 5657390?
Netscape Communications Corp owns this patent, granted in 1997.
When does this patent expire?
This patent has expired and is now in the public domain — anyone can use the invention freely.
What is patent US 5657390 cited by?
This patent has been cited by 383 later patents that build on its ideas.
What problem does this patent solve?
This patent is the blueprint for the 's' in HTTPS. By creating a standardized way to encrypt data at the socket layer, it enabled the birth of e-commerce and secure online banking, transforming the internet from an open, insecure network into a platform for private transactions.
What does this patent NOT cover?
Does not cover specific encryption algorithms like RSA or AES individually.
Same assignee
More from Netscape Communications Corp
Patent monitoring