Dynamic group creation and traffic flow registration under a group in a group key infrastructure

Patent metadata

Field	Value
Publication number	US-9009302-B2
Application number	US-201213400841-A
Country	US
Kind code	B2
Filing date	Feb 21, 2012
Priority date	Feb 21, 2012
Publication date	Apr 14, 2015
Grant date	Apr 14, 2015

Abstract

Upon detection of a new traffic flow, a registration node can dynamically register the new traffic flow with a key server policy manager by sending a registration request on behalf of the new traffic flow. A registration request indicates the new traffic flow should be protected by a security group. A registration request may also include a request to dynamically generate a new security group to protect the traffic flow. The registration request is received by a key server policy manager, which performs authentication and authorization checks of the requesting registration node, and determines whether to accept or reject the registration request. If accepted, the key server policy manager registers the new traffic flow by including a description of the traffic flow in a group policy of an existing security group or a newly created security group, depending on the registration request.

First claim

What is claimed is:

1. A method, comprising:
receiving a registration request to dynamically register a traffic flow, wherein
the registration request is sent from a registration node,
the registration request is received at a key server policy manager,
the key server policy manager and the registration node are communicatively coupled via a network, and
the registration request comprises a group identifier (ID);

determining whether to accept the registration request; a…

Assignees

• Detienne Frederic R P
• Sethi Pratima
• Wijnands Ijsbrand
• Cisco Tech Inc

Inventors

• Detienne Frederic R P
• Sethi Pratima
• Wijnands Ijsbrand

Classifications

• H04L9/0833

  Electricity · mapped topic

• H04L63/065 Primary

  Electricity · mapped topic

• H04L9/3268

  Electricity · mapped topic