Secure key transmission protocol without certificates or pre-shared symmetrical keys
AssigneeHuawei Technologies Co., Ltd.
InventorsTeng Wu, Yin Tan, Lionel Lianhong Zhang
Life of this patent
Estimating the term…
Abstract
A method for securely receiving a cipher key from a key provider to a key requester is provided. The method includes generating a session key shared between the key requester and the key provider, determining at least one key in accordance with the session key. The method also includes transmitting a request from the key requester to the key provider, and receiving a response from the key provider, where the response comprises an encrypted payload and an authentication tag. The method also includes authenticating the response and decrypting the encrypted payload using the at least one key to obtain the cipher key.
Claims24
A method for securely receiving a cipher key from a key provider, the method comprising:
- generating, by a key requester, a session key shared between the key requester and the key provider;
- determining, by the key requester, at least one key in accordance with the session key, the at least one key including an encryption key;
- transmitting, by the key requester, a request including a payload to the key provider, the payload encrypted with the encryption key;
- receiving, by the key requester, a response including the cipher key from the key provider, the cipher key encrypted with the encryption key;
- authenticating, by the key requester, the response in accordance with the at least one key;
- and
- decrypting, by the key requester, the cipher key from the response using the encryption key, the cipher key being used by the key requester to encrypt a secure communication session.
A method for securely transmitting a cipher key to a key requester, the method comprising:
- generating, by a key provider, a session key shared between the key provider and the key requester;
- determining, by the key provider, at least one key in accordance with the session key, the at least one key including an encryption key;
- receiving, by the key provider, a request including a payload from the key requester, the payload encrypted with the encryption key;
- and
- transmitting, by the key provider, a response including the cipher key to the key requester, the cipher key encrypted with the encryption key and used by the key requester to encrypt a secure communication session.
A key requester for securely receiving a cipher key from a key provider, the key requester comprising:
- a processor;
- and
- a non-transitory computer readable storage medium storing programming for execution by the processor, the programming including instructions to:
- generate a session key shared between the key requester and the key provider;
- determine at least one key from the session key, the at least one key including an encryption key;
- transmit a request including a payload to the key provider, the payload encrypted with the encryption key;
- receive a response including the cipher key from the key provider, the cipher key encrypted with the encryption key;
- authenticate the response in accordance with the at least one key;
- and
- decrypt, by the key requester, the cipher key from the response using the encryption key, the cipher key being used to encrypt a secure communication session.
A key provider for securely transmitting a cipher key to a key requester, the key provider comprising:
- a processor;
- and
- a non-transitory computer readable storage medium storing programming for execution by the processor, the programming including instructions to:
- generate a session key shared between the key provider and the key requester;
- determine at least one key from the session key, the at least one key including an encryption key;
- receive a request including a payload from the key requester, the payload encrypted with the encryption key;
- and
- transmit a response including the cipher key to the key requester, the cipher key encrypted with the encryption key and used by the key requester to encrypt a secure communication session.
Dependencies are inferred from the claim text.