Key distribution mechanism for IP environment
OwnerStefano M. Faccin, Franck Leinventors
Life of this patent
Estimating the term…
Abstract
A method and apparatus are provided for exchanging Diffie Hellman keys. This may include generating and transferring a first key at a user (such as a mobile node) and generating and transferring the first key to a first domain (such as a home domain). The first key may be certified at the first domain. A second key may be generated at a peer entity and transferred to the first domain. The second key may be certified at the first domain. After being certified, the first key may be transferred to the peer entity and the second key may be transferred to the user. Accordingly, the peer entity and the user are able to exchange their Diffie Hellman information in an authenticated manner and can derive the shared session key.
Claims39
A method of exchanging keys comprising:
- generating a first key at a user;
- transferring said first key to said first domain;
- certifying the first key at a first domain;
- generating a second key at peer entity;
- transferring said second key to said first domain;
- and
- certifying the second key at said first domain.
A method of exchanging keys comprising:
- transferring a first key from a user to a first domain;
- generating a second key at a peer entity in a second domain;
- transferring said second key to said first domain;
- certifying said first key in said first domain;
- and
- certifying said second key in said first domain.
A system for IP communications comprising:
- a home domain, the home domain containing at least one server;
- a user sharing a first security association with at least one server in the home domain;
- and
- a second domain, the second domain containing at least one server, a security association existing between the at least one server in the home domain and the at least one server in the second domain, said at least one server in said home domain to certify a key of said user and to certify a key of said at least one server of said second domain.
A method of exchanging keys in a IP network comprising:
- authenticating a first key of a user at a first domain;
- authenticating a second key of a peer entity at said first domain;
- transferring said authenticated first key to said peer entity;
- and
- transferring said authenticated second key to said user.
Dependencies are inferred from the claim text.