Intruder traceability for shared security associations
AssigneeIntel Corporation
InventorsMen Long, David Durham
Life of this patent
Estimating the term…
Abstract
Various embodiments are directed to systems and techniques for shared security associations. In one or more embodiments, a key distribution server provides shared security associations for clients and servers by assigning a group key to a particular client according to a time-based group key assignment schedule. The key distribution server may comprise a recursive codebook including multiple entries corresponding to group key assignments to be selected by the key distribution server with respect to time intervals. Other embodiments are described and claimed.
Claims13
A shared security association system comprising:
- a key distribution server comprising a CPU to provide shared security associations for clients and servers by assigning a group key to a particular client according to a time-based group key assignment schedule, the key distribution server comprising a recursive codebook including multiple entries corresponding to group key assignments to be selected by the CPU with respect to time intervals,
- wherein the CPU to assign a group key to a particular client by finding a particular entry in the recursive codebook for the particular client for a given time interval, identifying a group of randomly selected clients within the entry to which the particular client belongs based on the given time interval, and providing the particular client with a corresponding group key for the identified group.
A computer-implemented method for providing shared security associations for clients and servers comprising:
- constructing a recursive codebook including multiple entries corresponding to group key assignments;
- selecting entries with respect to time intervals;
- and
- assigning a group key to a particular client according to a time-based group key assignment schedule, wherein the client comprises a computing system and assigning a group key comprises:
- finding a particular entry in the recursive codebook for the particular client for a given time interval;
- identifying a group of randomly selected clients within the entry to which the particular client belongs based on the given time interval;
- and
- providing the particular client with a corresponding group key for the identified group via at least one communication link coupled to the particular client.
Dependencies are inferred from the claim text.