US 2020/0007327 A1Published application

Method for establishing a secure communication session in a communications system

AssigneeNex B.V.

InventorsVAKUL GARG, Peter Doliwa

Life of this patent

Estimating the term…

Loading patent…

Abstract

A method is provided for establishing a secure communication session in a communications system. The method includes providing a handshake layer functional block and providing a record layer functional block separate from the handshake layer functional block. A first ephemeral key pair is generated by the record layer functional block of a first communication peer. A public key of the first ephemeral key pair is transmitted to a second communication peer. The handshake layer functional block of the first communication peer generates a second ephemeral key pair. A public key of the second ephemeral key pair is transmitted to the second communication peer. The second communication peer generates a third ephemeral key pair. A handshake key is generated from the public key of the second communication peer and a private key of the handshake layer block of the first communication peer. A session key is generated from the public key of the second communication peer and a private key of the record layer block of the first communication peer

Claims17

Dependent claims

A method for establishing a secure communication session in a communications system, the method comprising:

providing, in a first communication peer, a handshake layer functional block;
providing, in the first communication peer, a record layer functional block separate from the handshake layer functional block, wherein functionality of the record layer functional block is not duplicated in the handshake layer functional block;
generating, by the record layer functional block of the first communication peer, a first ephemeral key pair;
transmitting a public key of the first ephemeral key pair to a second communication peer;
generating, by a handshake layer functional block of the first communication peer, a second ephemeral key pair;
transmitting a public key of the second ephemeral key pair to a second communication peer;
generating, by the second communication peer, a third ephemeral key pair;
transmitting a public key of the third ephemeral key pair to the first communication peer;
generating, by the handshake layer functional block, a handshake key using a public key of the third ephemeral key pair and the private key of the second ephemeral key pair;
protecting handshake messages communicated between the first communication peer and the second communication peer using the second ephemeral key pair;
generating a session key using the public key of the third ephemeral key pair and the private key of the first ephemeral key pair;
and
protecting messages communicated between the first communication peer and the second communication peer using the session key.

10 more elements

A method for establishing a secure communication session in a communications system, the method comprising:

providing, in a first communication peer, a handshake layer functional block;
providing, in the first communication peer, a record layer functional block separate from the handshake layer functional block, wherein functionality of the record layer functional block is not duplicated in the handshake layer functional block;
generating, by the record layer functional block of the first communication peer, a first ephemeral elliptic curve key pair;
transmitting a public key of the first ephemeral elliptic curve key pair to a second communication peer;
generating, by a handshake layer functional block of the first communication peer, a second ephemeral elliptic curve key pair;
transmitting a public key of the second ephemeral elliptic curve key pair to the second communication peer;
generating, by the second communication peer, a third ephemeral elliptic curve key pair;
transmitting a public key of the third ephemeral elliptic curve key pair to the first communication peer;
generating, by the handshake layer functional block, a handshake key using a public key of the third ephemeral elliptic curve key pair and the private key of the second ephemeral elliptic curve key pair;
protecting handshake messages communicated between the first communication peer and the second communication peer using the second ephemeral elliptic curve key pair;
generating a session key using the public key of the third ephemeral elliptic curve key pair and the private key of the first ephemeral elliptic curve key pair;
and
protecting messages communicated between the first communication peer and the second communication peer using the session key.

10 more elements

A method for establishing a secure communication session in a communications system, the method comprising:

providing, in a transport layer security (TLS) client, a handshake layer functional block;
providing, in the TLS client, a record layer functional block separate from the handshake layer functional block, wherein functionality of the record layer functional block is not duplicated in the handshake layer functional block;
generating, by the record layer functional block of the TLS client, a first ephemeral elliptic curve key pair;
transmitting a public key of the first ephemeral elliptic curve key pair to a TLS server;
generating, by a handshake layer functional block of the TLS client, a second ephemeral elliptic curve key pair;
transmitting a public key of the second ephemeral elliptic curve key pair to the TLS server;
generating, by the TLS server, a third ephemeral elliptic curve key pair;
transmitting a public key of the third ephemeral elliptic curve key pair to the TLS client;
generating, by the handshake layer functional block, a handshake key using a public key of the third ephemeral elliptic curve key pair and the private key of the second ephemeral elliptic curve key pair;
protecting handshake messages communicated between the TLS client and the TLS server using the second ephemeral elliptic curve key pair;
generating a session key using the public key of the third ephemeral elliptic curve key pair and the private key of the first ephemeral elliptic curve key pair;
and
protecting messages communicated between the TLS client and the TLS server using the session key.

10 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/021,125Filed 28 Jun 2018
Published: 2 Jan 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

H04L 9/3066
Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy: involving…
H04L 63/061
For supporting key management in a packet data network: for key exchange, e.g. in peer-to-peer networks
H04L 9/0841
Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or…:…
H04L 9/14
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: using a plurality of keys…

Family

US 10,659,228 B2Related patent
US 2020/0007327 A1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key