Back to results
US 12,603,863 B2Granted
Hybrid cryptography virtual private networks
AssigneeUab 360 It
InventorsKarolis Pabijanskas, Mantas Jonytis
Life of this patent
Estimating the term…
Abstract
A virtual private network (VPN) client receives data including a pre-shared key (PSK). The VPN client decrypts the data based on a short-term key pair to obtain a ciphertext. The VPN client then decrypts the ciphertext based on a short-term quantum-resistant key pair to obtain the PSK. A VPN tunnel is then established between the VPN client and a VPN server based on the PSK.
Claims20
A method, comprising:
- receiving, by a virtual private network (VPN) client, data including a pre-shared key (PSK), wherein the data includes a ciphertext generated by encrypting the PSK using a public key of a short-term quantum-resistant key pair associated with the VPN client and then encrypting the ciphertext using a public key of a short-term key pair associated with the VPN client, wherein the VPN client is a single device, and wherein the data is received in response to a request to establish a VPN tunnel transmitted by the VPN client, and wherein the short-term key pair and the short-term quantum-resistant key pair are different from long-term public keys exchanged during a handshake process;
- decrypting, by the VPN client, the data based on a short-term private key of the short-term key pair to obtain the ciphertext;
- decrypting, by the VPN client, the ciphertext based on a short-term private key of the short-term quantum-resistant key pair to obtain the PSK;
- and
- establishing the VPN tunnel between the VPN client and a VPN server using the long-term public keys and based on the PSK.
2 more elements
A system, comprising:
- a virtual private network (VPN) client that is a single device, the VPN client configured to execute instructions to:
- receive, from a VPN server, data including a pre-shared key (PSK), wherein the data includes a ciphertext generated by encrypting the PSK using a public key of a short-term quantum-resistant key pair associated with the VPN client and then encrypting the ciphertext using a public key of a short-term key pair associated with the VPN client, wherein the data is received in response to a request to establish a VPN tunnel transmitted by the VPN client, and wherein the short-term key pair and the short-term quantum-resistant key pair are different from long-term public keys exchanged during a handshake process;
- decrypt the data based on a short-term private key of the short-term key pair to obtain the ciphertext;
- decrypt the ciphertext based on a short-term private key of the short-term quantum-resistant key pair to obtain the PSK;
- and
- establish the VPN tunnel between the VPN client and the VPN server based on the PSK;
- and
- the VPN server, the VPN server configured to execute instructions to:
- transmit the data including the PSK to the VPN client.
6 more elements
A non-transitory computer-readable storage medium, comprising executable instructions that, when executed by a processor, facilitate performance of operations comprising:
- receiving, by a virtual private network (VPN) client, data including a pre-shared key (PSK), wherein the data includes a ciphertext generated by encrypting the PSK using a public key of a short-term quantum-resistant key pair associated with the VPN client and then encrypting the ciphertext using a public key of a short-term key pair associated with the VPN client, wherein the VPN client is a single device, and wherein the data is received in response to a request to establish a VPN tunnel transmitted by the VPN client, and wherein the short-term key pair and the short-term quantum-resistant key pair are different from long-term public keys exchanged during a handshake process;
- decrypting, by the VPN client, the data based on a short-term private key of the short-term key pair to obtain the ciphertext;
- decrypting, by the VPN client, the ciphertext based on a short-term private key of the short-term quantum-resistant key pair to obtain the PSK;
- and
- establishing the VPN tunnel between the VPN client and a VPN server using the long-term public keys and based on the PSK.
2 more elements
Dependencies are inferred from the claim text.