Back to results
US 2018/0295116 A1Published application
Simplified encryption key generation in optical networks
AssigneeFujitsu Limited
InventorsMuhammad Sakhi Sarwar, Abirami Sathyamoorthy, Swati Mittal
Life of this patent
Estimating the term…
Abstract
Methods and systems for simplified encryption key generation in optical networks use a Transport Layer Security (TLS) protocol to securely generate an encryption key at both endpoints of an optical path provisioned in an optical transport network. Instead of generating yet another key for payload data transmission, the encryption key from TLS is used for encrypting payload data transmission without using the TLS protocol.
Claims20
A method for encryption key generation in optical transport networks, the method comprising:
- provisioning an optical path between a first port at a transmitter and a second port at a receiver in an optical transport network (OTN);
- establishing a communication channel from the first port to the second port;
- using the communication channel, establishing a Transport Layer Security (TLS) connection over the OTN between the first port and the second port, using an authentication key to authenticate the first port and the second port;
- using the TLS connection to generate and share an encryption key usable for transmitting payload data from the first port to the second port, wherein the encryption key is stored at the transmitter and at the receiver;
- and
- using the encryption key, encrypting the payload data over the optical path from the first port to the second port using an encryption protocol different from TLS, wherein the TLS connection is not used for the data transmission, wherein the payload data is encrypted at the transmitter using the encryption key, and wherein the payload data is decrypted at the receiver using the encryption key.
3 more elements
An optical transport network (OTN), comprising:
- an optical path provisioned between a first port at a transmitter and a second port at a receiver included in the OTN, wherein the transmitter is enabled for:
- establishing a communication channel from the first port to the second port;
- using the communication channel, establishing a Transport Layer Security (TLS) connection over the OTN between the first port and the second port, using an authentication key to authenticate the first port and the second port;
- using the TLS connection to generate and share an encryption key usable for transmitting payload data from the first port to the second port, wherein the encryption key is stored at the transmitter and at the receiver;
- and
- using the encryption key, encrypting the payload data over the optical path from the first port to the second port using an encryption protocol different from TLS, wherein the TLS connection is not used for the data transmission, wherein the payload data is encrypted at the transmitter using the encryption key, and wherein the payload data is decrypted at the receiver using the encryption key.
3 more elements
Dependencies are inferred from the claim text.