Methods and entities using IPSec ESP to support security functionality for UDP-based traffic
AssigneeAlcatel Lucent
InventorsZhiyuan Hu, Zhikun Wan, Zhigang Luo, Ping Huang
Life of this patent
Estimating the term…
Abstract
Methods in OMA SEC_CF for providing security services to traffic over UDP between a client and a server and the relevant entities are provided. A pre-shared key is pre-shared between the client and the server. A pair of IPSec ESP SAs between the client and the server is established without shared key negotiation, wherein traffic data cryptographic algorithms are determined. Traffic data security keys are derived from the pre-shared key via the determined traffic data cryptographic algorithms. Then, data of the traffic can be provided with security services with the traffic data security keys through use of IPSec ESP.
Claims15
A method in a client for providing security services to traffic over User Datagram Protocol (UDP) between the client and a server, comprising:
- establishing a pair of Internet Protocol Security (IPSec) Encapsulating Security Payload (ESP) Security Associations (SAs) for UDP traffic without shared key negotiation, wherein traffic data cryptographic algorithms are determined;
- deriving traffic data security keys for traffic over UDP from a pre-shared key, via the determined traffic data cryptographic algorithms;
- and
- providing security services to data of the traffic over UDP with the traffic data security keys through use of IPSec ESP.
A method in a server for providing security services to traffic over User Datagram Protocol (UDP) between a client and the server, comprising:
- establishing a pair of Internet Protocol Security (IPSec) Encapsulating Security Payload (ESP) Security Associations (SAs) for UDP traffic without shared key negotiation, wherein traffic data cryptographic algorithms are determined;
- deriving traffic data security keys for traffic over UDP from a pre-shared key, via the determined traffic data cryptographic algorithms;
- and
- providing security services to data of the traffic over UDP with the traffic data security keys through use of IPSec ESP.
A controller for providing security services to traffic over User Datagram Protocol (UDP) between a client entity and a server entity, comprising at least one processor programmed to perform the steps of:
- obtaining a pre-shared key;
- establishing a pair of Internet Protocol Security (IPSec) Encapsulating Security Payload (ESP) Security Associations (SAs) for UDP traffic so that traffic data cryptographic algorithms are determined, without shared key negotiation;
- deriving traffic data security keys for traffic over UDP from the pre-shared key via the determined traffic data cryptographic algorithms;
- and
- providing security services to data of the traffic over UDP with the traffic data security keys through use of IPSec ESP.
A controller for providing security services to traffic over User Datagram Protocol (UDP) between a client entity and the server entity, comprising at least one processor programmed to perform the steps of:
- obtaining a pre-shared key;
- establishing a pair of Internet Protocol Security (IPSec) Encapsulating Security Payload (ESP) Security Associations (SAs) for UDP traffic so that traffic data cryptographic algorithms are determined, without shared key negotiation;
- deriving traffic data security keys for traffic over UDP from the pre-shared key via the determined traffic data cryptographic algorithms;
- and
- providing security services to data of the traffic over UDP with the traffic data security keys through use of IPSec ESP.
Dependencies are inferred from the claim text.