Securing ikev2 with key derivation function: a robust approach to psk authentication
OwnerMadhusudhan Gopalappa, Xin Yao +1inventors
InventorsMadhusudhan Gopalappa, Xin Yao, Mohit Sahni
Life of this patent
Estimating the term…
Abstract
The present application discloses a method, system, and computer system for performing an Internet Key Exchange version 2 (IKEv2) authentication. The method includes (i) generating a pre-shared key (PSK) based at least in part on a master key and a random cryptographic salt using a key derivation function (KDF), and (ii) validating an endpoint based at least in part on using the PSK. The validation of the endpoint is based at least in part on a determination that the endpoint has previously authenticated with credentials.
Claims27
A system, comprising:
- one or more processors configured to:
- generate a pre-shared key (PSK) based at least in part on a master key and a random cryptographic salt using a key derivation function (KDF);
- and
- validate an endpoint based at least in part on using the PSK, wherein the validation of the endpoint is based at least in part on a determination that the endpoint has previously authenticated with credentials;
- and
- a memory coupled to the one or more processors and configured to provide the one or more processors with instructions.
A method, comprising:
- generating a pre-shared key (PSK) based at least in part on a master key and a random cryptographic salt using a key derivation function (KDF);
- and
- validating an endpoint based at least in part on using the PSK, wherein the validation of the endpoint is based at least in part on a determination that the endpoint has previously authenticated with credentials.
A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for:
- generating a pre-shared key (PSK) based at least in part on a master key and a random cryptographic salt using a key derivation function (KDF);
- and
- validating an endpoint based at least in part on using the PSK, wherein the validation of the endpoint is based at least in part on a determination that the endpoint has previously authenticated with credentials.
Dependencies are inferred from the claim text.