Reoccuring keying system
AssigneeComcast Cable Communications, LLC
InventorsNancy Davoust, James Fahrny, Kevin Taylor
Life of this patent
Estimating the term…
Abstract
A secure communication system or method are disclosed that may employ a constant level of trust between participants and a security management entity. As part of the constant level of trust, a communication policy may cause participants to request key validation every time the participant wishes to take an action that requires use of a key. In this manner, the participant may regularly communicate with the security management, and this regular communication can be further used to implement key renewal and/or rollover procedures.
Claims17
A communication method, comprising:
- determining, by a first device, that a key issued by a master authority is to be used to secure a communication between the first device and a second device;
- after the determining and prior to attempting to use the key for the communication, submitting a security authorization request to the master authority, requesting verification that the key is currently valid, wherein the security authorization request comprises information identifying the first device, the second device, and a desired transaction for the communication;
- receiving confirmation that the key is currently valid;
- using the key to conduct the communication;
- receiving, by the first device, an array comprising:
- a plurality of keys;
- and
- for each key, an identification of a transaction type for communications involving the first and second devices;
- and
- receiving an instruction from the master authority to update the array to associate a first transaction type with a different key in the array.
A communication method, comprising:
- determining, by a first device, that a key issued by a master authority is to be used to secure a communication between the first device and a second device, wherein the second device is dependent on the first device for communicating with the master authority;
- after the determining and prior to attempting to use the key for the communication, submitting a request to the master authority requesting verification that the key is currently valid;
- receiving confirmation that the key is currently valid;
- using the key to conduct the communication;
- receiving, by the first device, an array comprising:
- a plurality of keys;
- and
- for each key, an identification of a transaction type for communications involving the first and second devices;
- and
- receiving an instruction from the master authority to update the array to associate a first transaction type with a different key in the array.
A method comprising:
- determining that a secure communication is to be carried out between a first device and a second device;
- identifying a device-pair-specific key that has been previously assigned by a master authority for securing communications between the first device and the second device;
- prior to using the device-pair-specific key for the secure communication, transmitting a security authorization request to the master authority, requesting verification that the device-pair-specific key is valid, wherein the security authorization request comprises information identifying the first device, the second device, and a desired transaction for the secure communication, and wherein the device-pair-specific key is transaction-specific;
- receiving a response from the master authority indicating the device-pair-specific key is valid;
- and
- using the device-pair-specific key for the secure communication between the first device and the second device.
Dependencies are inferred from the claim text.