System, Apparatus and Method for Secure Network Bridging Using A Rendezvous Service and Multiple Key Distribution Servers

At least one computer readable storage medium comprising instructions that when executed enable a system to:

• receive, in a rendezvous server, a first registration message including a first device roster corresponding to a first device of a first network domain;
• receive, in the rendezvous server, a second registration message including a second device roster corresponding to a second device of a second network domain;
• and
• generate a first rendezvous point based at least in part on key management server identifiers associated with first and second key management servers of the first and second network domains, the first rendezvous point to enable the first and second key management servers to perform key management exchange to generate a key for communication between the first device and the second device.

At least one computer readable storage medium comprising instructions that when executed enable a system to:

• couple a first key management server of a first network domain to a rendezvous server at a first rendezvous point;
• couple the first key management server to the rendezvous server at a second rendezvous point;
• receive, in the first key management server, a request for a group key from a first device of the first network domain;
• receive, in the first key management server, a reply to the request from the second key management server;
• wherein the reply includes the group key;
• wherein (a) the first rendezvous point is based on:
• (a)(i) a first key management server identifier associated with the first key management server, and (a)(ii) a second key management server identifier associated with a second key management server of a second network domain;
• and (b) the second rendezvous point is based on:
• (b)(i) a first gateway server identifier associated with a first gateway server of the first network domain, and (b)(ii) a second gateway server identifier associated with a second gateway server of the second network domain;
• wherein (c) the first rendezvous point is to enable the first and second key management servers to perform key management exchange to generate a group key for communication between a first device of the first network domain and a second device of the second network domain;
• and (d) the second rendezvous point is to enable publication of an encrypted message to a subscriber list including devices from the first and second network domains.