System and method for encrypting traffic on a network
OwnerDoughan TURKinventor
Life of this patent
Estimating the term…
Abstract
According to embodiments of the present invention a system and method for encrypting traffic on a network is disclosed. Encrypted data is transmitted between a first network element and a second network element by: acquiring an encryption seed at the first network element, the encryption seed being substantially similar to a decryption seed at the second network element; generating at least one encryption key from the encryption seed; receiving data; encrypting the data using the encryption key to generate encrypted data; transmitting the encrypted data from the first network element to the second network element via a network; and updating the encryption seed at the first network element in response to an event trigger
Claims16
1-12. (canceled)
A method for encrypting data, comprising:
- encrypting data using an original encryption key generated at least partly from an original encryption seed;
- providing additional data for encryption;
- acquiring a new encryption seed;
- determining whether a new encryption key is to be generated;
- determining whether the original encryption seed has expired;
- responsive to determining that a new encryption key is to be generated and that the original encryption key has expired:
- generating a new encryption key at least partly from the new encryption seed and encrypting additional data using the new encryption key;
- responsive to determining that a new encryption key is to be generated and that the original encryption key has not expired:
- generating a new encryption key at least partly from the original encryption seed and encrypting additional data using the new encryption key;
- and
- responsive to determining that a new encryption key is not to be generated:
- encrypting the additional data using the original encryption key.
A system for encrypting data, comprising:
- a seed generator for generating an original encryption seed and a new encryption seed;
- a computing apparatus configured for:
- encrypting data using an original encryption key generated at least partly from the original encryption seed;
- providing additional data for encryption;
- acquiring the new encryption seed from the seed generator;
- determining whether a new encryption key is to be generated;
- determining whether the original encryption seed has expired;
- responsive to determining that a new encryption key is to be generated and that the original encryption key has expired:
- generating a new encryption key at least partly from the new encryption seed and encrypting additional data using the new encryption key;
- responsive to determining that a new encryption key is to be generated and that the original encryption key has not expired:
- generating a new encryption key at least partly from the original encryption seed and encrypting additional data using the new encryption key;
- and
- responsive to determining that a new encryption key is not to be generated:
- encrypting the additional data using the original encryption key.
A method for decrypting data, comprising:
- decrypting data using an original decryption key generated at least partly from an original decryption seed;
- providing additional data for decryption;
- acquiring a new decryption seed;
- determining whether a new decryption key is to be generated;
- determining whether the original decryption seed has expired;
- responsive to determining that a new decryption key is to be generated and that the original decryption key has expired:
- generating a new decryption key at least partly from the new decryption seed and decrypting additional data using the new decryption key;
- responsive to determining that a new decryption key is to be generated and that the original decryption key has not expired:
- generating a new decryption key at least partly from the original decryption seed and decrypting additional data using the new decryption key;
- and
- responsive to determining that a new decryption key is not to be generated:
- decrypting the additional data using the original decryption key.
Dependencies are inferred from the claim text.