Pairwise pre-shared key generation system
AssigneeCisco Technology, Inc.
InventorsPadmakumar Ampady Vasudevan Pillai, Brian Eliot Weis, Thamilarasu Kandasamy
Life of this patent
Estimating the term…
Abstract
A Key Generation System (KGS) includes a key server, a first network element, and a second network element. The first and second network elements register with the key server and receive first and second KGS key seeds and first and second KGS identifiers, respectively. The first network element transmits the first KGS identifier to the second network element and obtains the second KGS identifier. The first network element computes a shared key based on the first KGS key seed and the second KGS identifier. The second network element receives the first KGS identifier from the first network element and computes the shared key based on the second KGS key seed and the first KGS identifier.
Claims20
A method comprising:
- registering a first network element with a key server that manages a key generation system (KGS);
- receiving a KGS key seed and a first KGS identifier associated with the first network element from the key server;
- transmitting the first KGS identifier to a second network element;
- obtaining a second KGS identifier associated with the second network element;
- and
- computing a shared key based on the KGS key seed and the second KGS identifier.
A method comprising:
- registering a second network element with a key server that manages a key generation system (KGS);
- receiving a KGS key seed and a second KGS identifier from the key server, the second KGS identifier being associated with the second network element;
- receiving at the second network element, a first KGS identifier associated with a first network element;
- and
- computing a shared key based on the KGS key seed and the first KGS identifier.
A system comprising:
- a key server in a key generation system (KGS), the key server comprising a microprocessor configured to:
- send a first KGS key seed and a first KGS identifier to a first network element in response to receiving a first registration request from the first network element;
- and
- send a second KGS key seed and a second KGS identifier to a second network element in response to receiving a second registration request from the second network element;
- the first network element configured to:
- transmit the first KGS identifier to the second network element;
- obtain the second KGS identifier;
- and
- compute a shared key based on the first KGS key seed and the second KGS identifier;
- and
- the second network element configured to:
- receive the first KGS identifier from the first network element;
- and
- compute the shared key based on the second KGS key seed and the first KGS identifier.
Dependencies are inferred from the claim text.