Methods and systems for controller-based secure session key exchange over unsecured network paths
AssigneeCloudgenix, Inc.
InventorsNavneet Yadav, Arivu Ramasamy, Aaron Edwards
Life of this patent
Estimating the term…
Abstract
A method includes generating at a multi-tenant controller on a network a common shared secret for establishing a link between a first site and a second site, transmitting the shared secret to each of the first site and the second site over a secured channel, assigning a wall clock based start and end validity period for the shared secret, sending the shared secret with a future validity to allow secure link communication to continue if one or more elements in both sites cannot communicate with the multi-tenant controller and using a separate shared secret per link per VXWAN.
Claims20
A method comprising:
- generating at a multi-tenant controller on a network a common shared secret for establishing a link between a first site and a second site;
- transmitting the shared secret to each of the first site and the second site over a secured channel;
- assigning a wall clock based start and end validity period for the shared secret;
- sending the shared secret with a future validity to allow secure link communication to continue if one or more elements in both sites cannot communicate with the multi-tenant controller;
- and
- using a separate shared secret per link per VXWAN.
A method comprising:
- receiving at a first channel end point on a network a shared secret;
- generating a plurality of nonce values;
- exchanging the nonce values with a second channel end point;
- generating a plurality of session keys;
- and
- refreshing the plurality of session keys at a predetermined time interval using the shared secret.
A system comprising:
- a first site;
- a second site in communication with the first site via a network;
- and
- a multi-tenant controller configured to generate a common shared secret for establishing a link between the first site and the second site and to transmit the shared secret to each of the first site and the second site over a secured channel wherein the multi-tenant controller is configured to assign a wall clock based start and end validity period for the shared secret.
Dependencies are inferred from the claim text.