Rekey scheme on high speed links

Patent metadata

Field	Value
Publication number	US-9002016-B2
Application number	US-201414229986-A
Country	US
Kind code	B2
Filing date	Mar 30, 2014
Priority date	Apr 8, 2010
Publication date	Apr 7, 2015
Grant date	Apr 7, 2015

Abstract

In one embodiment, apparatus and methods for a rekey process are disclosed. In certain rekey embodiments, when a key-generation protocol exchange is executed, instead of generating a single new security relationship, such as a Security Association or SA, a multiple set (e.g., 10) of new security relationships (e.g., SAs) are generated. An authorized device can then individually use these security relationships (e.g., SAs) as needed to securely communicate with each other. For example, a set of SAs can be efficiently programmed into an 802.1ae protocol ASIC for handling transmitted and received data packets. In the description herein, embodiments of the invention are described with respect to SA's, and this “SA” term is generally defined as any type of security relation that can be formed to allow a particular node to securely transmit packets or frames to another receiving node.

First claim

What is claimed is:

1. A method of establishing a secure link from a first node, the method comprising:
obtaining at the first node key generation information that includes one or more current security associations;
transmitting a first set of secure packets that each include one of the one or more current security associations, wherein the first set of secure packets includes a corresponding first set of related packet identifiers; and
transmitting a next set of secure packet…

Assignees

• Cisco Tech Inc

Inventors

• Mishra Chandan

Classifications

• H04L63/061 Primary

  Electricity · mapped topic

• H04L9/0891

  Electricity · mapped topic