Dual Cryptographic Keying
AssigneeCisco Technology, Inc.
InventorsSinha Santanu, Kenneth William Batcher
Life of this patent
Estimating the term…
Abstract
A dual cryptographic keying system. In particular implementations, a method includes responsive to an initial session key negotiation, storing security association information for a tunnel in a security association memory; responsive to a session key renegotiation, storing security association information for the tunnel in a cache; decrypting received packets associated with the tunnel conditionally using the security association information in the cache or the security association information in the security association memory; and upon an expiration condition, overwriting the security association information, for the tunnel, in the security association memory with the security association information, for the tunnel, copied from the cache.
Claims27
Logic encoded in one or more tangible media for execution and when executed operable to:
- responsive to an initial session key negotiation, store security association information for a tunnel in a security association memory;
- responsive to a session key renegotiation, store security association information for the tunnel in a cache;
- decrypt received packets associated with the tunnel conditionally using the security association information in the cache or the security association information in the security association memory;
- and
- upon an expiration condition, overwrite the security association information, for the tunnel, in the security association memory with the security association information, for the tunnel, copied from the cache.
A method comprising:
- storing security association information for a tunnel in a security association memory responsive to an initial session key negotiation;
- storing security association information for the tunnel in a cache responsive to a session key renegotiation;
- decrypting received packets associated with the tunnel conditionally using the security association information in the cache or the security association information in the security association memory;
- and
- overwriting, upon an expiration condition, the security association information, for the tunnel, in the security association memory with the security association information, for the tunnel, copied from the cache.
An apparatus comprising:
- one or more processors;
- a memory operative to store security association information for one or more tunnels;
- and
- logic encoded in one or more tangible media for execution and when executed operable to:
- responsive to an initial session key negotiation, store security association information for a tunnel in a security association memory;
- responsive to a session key renegotiation, store security association information for the tunnel in a cache;
- decrypt received packets associated with the tunnel conditionally using the security association information in the cache or the security association information in the security association memory;
- and
- upon an expiration condition, overwrite the security association information, for the tunnel, in the security association memory with the security association information, for the tunnel, copied from the cache.
Dependencies are inferred from the claim text.