Rollover von Verschlüsselungsschlüsseln in einem Paketkompatiblen Netzwerk

Details

Veröffentlichungs-Nr.

EP3944554

Aktenzeichen

EP20186999

Anmeldetag

21. Juli 2020

Veröffentlichung

26. Januar 2022

Rechtsraum

EP

IPC

H04L9/08H04L29/06

Abstract

There is provided a technique of establishing encryption keys for communication between 1<st> peer and 2<nd> peer via a data path. The technique comprises: by each peer, using input keying material to independently generate equivalent pairs of peer encryption keys (PEKs), verifying equivalence of the generated PEK pairs, and using by 1<st> peer and 2<nd> peer the verified PEK pairs to become in possession of equivalent pairs of session encryption keys (SEKs). Verifying comprises: generating by 1<st> peer a first handshake (HS) message encrypted by PEK Tx1 and sending the first HS message to the 2<nd> peer via the data path; decrypting by the 2<nd> peer the first HS message using the PEK Rx2, generating a second HS message encrypted by PEK Tx2, and sending the second HS message to the 1<st> peer via the data path; and decrypting the second HS message by the 1<st> peer using PEK Rx1.

Anmelder

Firmen

Adva Network Security GmbH
Adtran Networks SE
ADVA Optical Networking SE

Land

🇩🇪 Deutschland

Fachgebiete