System and method for secure distribution of digital information to a chain of computer system nodes in a network
AssigneeCitrix Systems, Inc.
InventorsJohn A. Bull, David J. Otway
Life of this patent
Estimating the term…
Loading patent…
AssigneeCitrix Systems, Inc.
InventorsJohn A. Bull, David J. Otway
Estimating the term…
Described are a system and method for securely distributing session keys over a network to each node in a chain of computer system nodes. The chain of nodes recursively constructs and presents a nested request to the authentication server. The nested request includes a request from each of the nodes in the chain requiring a session key to communicate with a neighboring node. The authentication server recursively unravels the request and recursively prepares a response that includes a session key for each node that submitted a request. The response traverses the chain of nodes in the reverse order taken by the nested request to reach the authentication server. Each node receiving the response extracts the portion of the response directed to that node, and forwards the remainder of the response, if any, to the next node in the chain. Thus, with a single traversal of the chain of nodes each node receives at least one session key. The forward and reverse protocols easily generalize for any number of nodes in the chain. The protocols can employ one-way hash functions to seal requests and responses and to encode session keys.
In a network including a first node, a second node, and a third node, a method for securely delivering digital information to the first node from the third node by way of the second node, the method comprising:
In a network including a client node and an authentication server node, a method for securely delivering a session key to the client node from the authentication server node in response to a request from the client node, the method comprising:
A system for securely distributing session keys by way of a network, the network including a first node transmitting a first request to obtain a first session key and a second node in communication with the first node, the second node transmitting a second request to obtain a second session key, wherein the first request is contained within the second request from the second node, the system comprising:
Dependencies are inferred from the claim text.