Changing group member reachability information
AssigneeCisco Technology, Inc.
InventorsAamer S. Akhter, Rajiv Asati, Brian Weis, Mohamed Khalid
Life of this patent
Estimating the term…
Abstract
In an embodiment, a method comprises obtaining a second network address at a computer node, which has been already associated with a first network address and provided first keying information; sending, to a key server computer, an update message that comprises both the first network address and the second network address; using the first keying information to encrypt messages that the computer node sends from the second network address to one or more other members of a group.
Claims20
A method for enhancing capabilities of a key server computer to dynamically disseminate rekeying information to mobile devices, the method comprising:
- a key server computer registering a first network address associated with a mobile device, and upon finishing the registering of the first network address, deleting a security association established for the mobile device;
- receiving, from the mobile device, an update message comprising both the first network address and a second network address of the mobile device;
- in response to receiving the update message, the key server computer replacing the first network address with the second network address in storage at the key server computer without establishing a new secure connection with the mobile device;
- the key server computer generating rekeying information in response to determining that the rekeying information is needed for the mobile device.
A non-transitory computer-readable storage medium storing one or more sequences of instructions which, when executed by one or more processors, cause the one or more processors to perform:
- registering a first network address associated with a mobile device, and upon finishing the registering of the first network address, deleting a security association established for the mobile device;
- receiving, from the mobile device, an update message comprising both the first network address and a second network address of the mobile device;
- in response to receiving the update message, replacing the first network address with the second network address in storage at a key server computer without establishing a new secure connection with the mobile device;
- generating, at the key server computer, rekeying information in response to determining that the rekeying information is needed for the mobile device.
A key server device, comprising:
- a communication manager that:
- registers a first network address associated with a mobile device, and upon finishing the registering of the first network address, deletes a security association established for the mobile device;
- receives, from the mobile device, an update message comprising both the first network address and a second network address of the mobile device;
- a key manager that:
- in response to receiving the update message, replacing the first network address with the second network address in storage at a key server computer without establishing a new secure connection with the mobile device;
- generating, at the key server computer, rekeying information in response to determining that the rekeying information is needed for the mobile device.
Dependencies are inferred from the claim text.