Offloading the Secure Communication Transport Protocol Session Key Negotiation and Establishment to a Remote Service/Server
AssigneeDigiCert, Inc.
InventorsAtul Gupta, Shrey Tandel
Life of this patent
Estimating the term…
Abstract
A method to be performed at Secure Key Service (SKS) includes, responsive to a need to establish a secure tunnel between a device and a peer device receiving a request to offload authentication and session key negotiation for a Post-Quantum Cryptography (PQC) encryption algorithm from the device performing the authentication and session key negotiation with the peer device, and providing a key for the PQC encryption algorithm from the session key negotiation to the device, for use in data exchange with the peer device via the secure tunnel.
Claims20
A method performed via a Security Key Service (SKS) comprising:
- responsive to a need to establish a secure tunnel between a device and a peer device, receiving a request to offload authentication and session key negotiation for a Post-Quantum Cryptography (PQC) encryption algorithm from the device;
- performing the authentication and session key negotiation with the peer device;
- and
- providing a key for the PQC encryption algorithm from the session key negotiation to the device, for use in data exchange with the peer device via the secure tunnel.
A method performed at a device comprising:
- responsive to a need to establish a secure tunnel between the device and a peer device, requesting to offload authentical and session key negotiation for a Post-Quantum Cryptography (PQC) encryption algorithm from the device to a Security Key Service (SKS);
- responsive to the SKS performing the authentication and session key negotiation with the peer device, receiving a key from the PQC encryption algorithm;
- and
- exchanging data with the peer device over the secure tunnel using the key.
A Security Key Service (SKS) system comprising:
- a processor;
- and
- a memory storing program code that is configured to cause the processor to:
- responsive to a need to establish a secure tunnel between a device and a peer device, receive a request to offload authentication and session key negotiation for a Post-Quantum Cryptography (PQC) encryption algorithm from the device;
- perform the authentication and session key negotiation with the peer device;
- and
- provide a key for the PQC encryption algorithm from the session key negotiation to the device, for use in data exchange with the peer device via the secure tunnel.
Dependencies are inferred from the claim text.