Encryption for gateway tunnel-based VPNs independent of wan transport addresses

Patent metadata

Field	Value
Publication number	US-10904217-B2
Application number	US-201815994590-A
Country	US
Kind code	B2
Filing date	May 31, 2018
Priority date	May 31, 2018
Publication date	Jan 26, 2021
Grant date	Jan 26, 2021

Abstract

A source virtual private network (VPN) gateway supports a local source subnet and communicates over a wide area network (WAN) with a destination VPN gateway that supports a local destination subnet. The source VPN gateway receives from the local source subnet an Internet Protocol (IP) packet destined for the local destination subnet, determines a security association (SA) based on a source IP address and a destination IP address of the IP packet, and encapsulates the IP packet with tunnel encapsulation including a tunnel protocol header and a tunnel outer IP header, to produce a clear-text tunnel packet. The source VPN gateway encrypts the IP packet and the tunnel protocol header but not the tunnel outer IP header using an encryption key and a security parameter index for the SA, to produce an encrypted tunnel packet, and tunnels it to the destination VPN gateway over the WAN.

First claim

What is claimed is:

1. A method comprising:
at a source virtual private network (VPN) gateway configured to support a local source subnet and communicate over a wide area network with a destination VPN gateway configured to support a local destination subnet:
receiving from the local source subnet an Internet Protocol (IP) packet as clear-text and that is destined for the local destination subnet, the IP packet including subnet identifiers for the local source subnet and the local destination subnet;
determining for the IP packet a security association for an IP security (IPsec) protocol based on the subnet identifiers in the IP packet rather than wide area network tunnel addresses of the source VPN gateway and the destination VPN gateway;
encapsulating the IP packet with tunnel encapsulation including a tunnel protocol header and a tunnel outer IP header, to produce a clear-text tunnel packet;
encrypting the IP packet and the tunnel protocol header but not the tunnel outer IP header of the clear-text tunnel packet to produce an encrypted tunnel packet, the encrypting using an encryption key and a security parameter index that are associated with the security association and derived based on the subnet identifiers, such that a local subnet address space of the encryption is separate from the wide area network tunnel addresses; and
tunneling the encrypted tunnel packet to the destination VPN gateway over the wide area network via an encrypted tunnel indicated by the tunnel encapsulation.

2. The method of claim 1 , wherein the determining includes:
searching a security association database for the security association based on a source subnet identifier of the subnet identifiers for the local source subnet and a destination subnet identifier of the subnet identifiers for the local destination subnet that match a source IP address and a destination IP address of the IP packet, respectively; and
if the security association is found in the searching, accessing the encryption key and the security parameter index associated with the security association.

3. The method of claim 2 , further comprising:
if the security association is not found in the searching, generating the security association, including:
sending to a key server a request for the destination subnet identifier that matches the IP destination address, and receiving from the key server the destination subnet identifier; and
generating the security association, including the encryption key and the security parameter index, using key material associated with the source subnet identifier based on the destination subnet identifier.

4. The method of claim 3 , further comprising, at the key server, upon receiving the request:
sending the destination subnet identifier to the source VPN gateway; and
sending the destination subnet identifier and the source subnet identifier to all other VPN gateways that previously registered the destination subnet identifier with the key server.

5. The method of claim 1 , further comprising:
prior to the receiving the IP packet, upon registering with a key server a source subnet identifier for the local source subnet, receiving from the key server key material associated with the local source subnet.

6. The method of claim 1 , wherein the encapsulating includes encapsulating the IP packet with the tunnel outer IP header to include a wide area network source IP address and a wide area network destination IP address corresponding to the source VPN gateway and the destination VPN gateway, respectively.

7. The method of claim 1 , wherein the encapsulating includes encapsulating the IP packet with a Generic Routing Encapsulation (GRE) header as the tunnel protocol header.

8. The method of claim 1 , wherein the encrypting includes encrypting the IP packet using transport mode encryption according to the IP security protocol.

9. The method of claim 1 , wherein the encrypted tunnel packet includes an encapsulating security payload (ESP) field that includes the security parameter index in clear-text, wherein the security parameter index identifies a second security association, including an encryption key, used for decrypting the encrypted tunnel packet at the destination VPN gateway.

10. The method of claim 1 , further comprising, at the destination VPN gateway:
receiving the encrypted tunnel packet over the wide area network;
searching a second security association database for a second security association having a security parameter index that matches the security parameter index indicated in a clear-text IP security encapsulating security payload (ESP) field of the encrypted tunnel packet; and
if a match is found, decrypting the encrypted tunnel packet to recover the clear-text tunnel packet using an encryption key associated with the second security association.

11. The method of claim 10 , further comprising, at the destination VPN gateway:
if a match is not found, dropping the encrypted tunnel packet.

12. The method of claim 1 , further comprising, at a key server configured to communicate with the source VPN gateway and the destination VPN gateway:
upon each VPN gateway registering with the key server the respective local subnet supported by the VPN gateway, generating key material associated with the respective local subnet and sending to each VPN gateway the respective key material, which the VPN gateway uses to derive a respective encryption key and a respective security parameter index associated with a respective IP security security association.

13. A apparatus comprising:
network ports to communicate with one or more networks; and
a processor of a source virtual private network (VPN) gateway configured to support a local source subnet and communicate over a wide area network with a destination VPN gateway configured to support a local destination subnet, the processor coupled to the network ports and configured to perform:
receiving from the local source subnet an Internet Protocol (IP) packet as clear-text and that is destined for the local destination subnet, the IP packet including subnet identifiers for the local source subnet and the local destination subnet;
determining for the IP packet a security association for an IP security (IPsec) protocol based on the subnet identifiers in the IP packet rather than wide area network tunnel addresses of the source VPN gateway and the destination VPN gateway;
encapsulating the IP packet with tunnel encapsulation including a tunnel protocol header and a tunnel outer IP header, to produce a clear-text tunnel packet;
encrypting the IP packet and the tunnel protocol header but not the tunnel outer IP header of the clear-text tunnel packet to produce an encrypted tunnel packet, the encrypting using an encryption key and a security parameter index that are associated with the security association and derived based on the subnet identifiers, such that a local subnet address space of the encryption is separate from the wide area network tunnel addresses; and
tunneling the encrypted tunnel packet to the destination VPN gateway over the wide area network via an encrypted tunnel indicated by the tunnel encapsulation.

14. The apparatus of claim 13 , wherein the processor is configured to perform the determining by:
searching a security association database for the security association based on a source subnet identifier of the subnet identifiers for the local source subnet and a destination subnet identifier of the subnet identifiers for the local destination subnet that match a source IP address and a destination IP address of the IP packet, respectively; and
if the security associ

Assignees

• Cisco Tech Inc

Inventors

• Sullenberger Michael L
• Weis Brian
• Wainner Warren Scott
• Lou Shuxian

Classifications

• H04L63/0272 Primary

  Virtual private networks · CPC title

• H04L9/083

  involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] · CPC title

• H04L63/029

  Firewall traversal, e.g. tunnelling or, creating pinholes · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L9/0833 Primary

  involving conference or group key (network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065) · CPC title