System, Apparatus And Method For Massively Scalable Dynamic Multipoint Virtual Private Network Using Group Encryption Keys
AssigneeIntel Corporation
InventorsOmer BEN-SHALOM, Alex NAYSHTUT, Ned M. Smith
Life of this patent
Estimating the term…
Abstract
In one embodiment, a hub logic is to provision a plurality of group private keys for a dynamic multipoint virtual private network (DMVPN) group associated with a function of a plurality of devices, provide a group public key for the DMVPN group to the plurality of devices and provision each of the plurality of group private keys to one of the plurality of devices, to enable one or more subsets of the plurality of devices to negotiate a traffic encryption key without interaction with a system having the hub logic. Other embodiments are described and claimed.
Claims20
A system comprising:
- a hardware processor having at least one core to execute instructions;
- and
- a hub logic to provision a plurality of group private keys for a dynamic multipoint virtual private network (DMVPN) group associated with a function of a plurality of devices, provide a group public key for the DMVPN group to the plurality of devices and provision each of the plurality of group private keys to one of the plurality of devices, to enable one or more subsets of the plurality of devices to negotiate a traffic encryption key without interaction with the system.
At least one computer readable storage medium comprising instructions that when executed enable a system to:
- obtain a dynamic multipoint virtual private network (DMVPN) group public key from a group manager, wherein the group manager is to manage a group including a plurality of computing devices;
- perform a DMVPN group private key protocol with the group manager to provision a DMVPN group private key;
- perform a key encryption protocol with at least one computing device of the group to generate a group symmetric key;
- and
- send a first message with the group symmetric key to the at least one computing device of the group via a point-to-point connection within the DMVPN.
A system comprising:
- a plurality of computing devices, wherein the plurality of computing devices includes a function associated with a group;
- and
- a provisioning server coupled to the plurality of computing devices, wherein the provisioning server is to generate a group public key for the group and provision a plurality of group private keys for the plurality of computing devices, provide the group public key to the plurality of computing devices and provision each of the plurality of group private keys to one of the plurality of computing devices, wherein at least some of the plurality of computing devices are to perform one or more point-to-point symmetric key exchange protocols using the corresponding group private key, and without involvement of the provisioning server.
Dependencies are inferred from the claim text.