Secondary secure communication channles
OwnerLior Malkainventor
Life of this patent
Estimating the term…
Abstract
Embodiments are provided for establishing secondary secure channels in any network, including networks that enforce a single channel per neighbor policy. In one embodiment, requests to open a new channel are handled only in a listen mode and identifiers are used to authenticate the first and second secure channels. The channels provide secure communication. In one embodiment, a second channel is provisioned using the primary secure channel. In one embodiment, a method of storing data for provisioning secondary secure channels is provided.
Claims18
A method of establishing a primary and a secondary secure channel, the method comprising:
- switching between a listen and a no listen mode;
- and
- obtaining a channel when a request to open a channel arrives in listen mode;
- and
- reading a first identifier from the channel;
- and
- using a first authentication to output a first secure channel if the party associated with the first identifier is not connected;
- and
- reading a second identifier and using a second authentication to output a second secure channel if the party associated with the first identifier is connected.
A method of provisioning a secondary secure channel, the method comprising:
- sending over a first secure channel a secondary message from first party to a second party;
- and
- generating using random values an identifier and a construct containing elements used to establish the second secure channel;
- and
- sending the identifier and the construct over the first secure channel from the second party to the first party;
- and
- outputting a secure channel established using the identifier and the construct.
A method of storing data for provisioning secondary secure channels, the method comprising:
- receiving an identifier and a construct for establishing a secondary secure channel;
- and
- mapping the identifier to the construct.
Dependencies are inferred from the claim text.