DE60031878D1 - Schlüsselaustausch für eine netzwerkarchitektur - Google Patents

Schlüsselaustausch für eine netzwerkarchitektur

Info

Publication number
DE60031878D1
DE60031878D1 DE60031878T DE60031878T DE60031878D1 DE 60031878 D1 DE60031878 D1 DE 60031878D1 DE 60031878 T DE60031878 T DE 60031878T DE 60031878 T DE60031878 T DE 60031878T DE 60031878 D1 DE60031878 D1 DE 60031878D1
Authority
DE
Germany
Prior art keywords
network architecture
key exchange
exchange
key
architecture
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Lifetime
Application number
DE60031878T
Other languages
English (en)
Other versions
DE60031878T2 (de
Inventor
Mohamed Khalil
P Narayanan
Haseeb Akhtar
A Qaddoura
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Nortel Networks Ltd
Original Assignee
Nortel Networks Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nortel Networks Ltd filed Critical Nortel Networks Ltd
Publication of DE60031878D1 publication Critical patent/DE60031878D1/de
Application granted granted Critical
Publication of DE60031878T2 publication Critical patent/DE60031878T2/de
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0838—Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these
    • H04L9/0841—Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these involving Diffie-Hellman or related key agreement protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/062—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key distribution, e.g. centrally by trusted party
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/083—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/03—Protecting confidentiality, e.g. by encryption
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/041—Key generation or derivation
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
    • H04W12/0431—Key distribution or pre-distribution; Key agreement
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
    • H04W12/0433—Key management protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/80—Wireless
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
    • H04L63/205—Network architectures or network communication protocols for network security for managing network security; network security policies in general involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/12—Messaging; Mailboxes; Announcements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W60/00—Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W80/00—Wireless network protocols or protocol adaptations to wireless operation
    • H04W80/04—Network layer protocols, e.g. mobile IP [Internet Protocol]
DE60031878T 1999-10-05 2000-10-04 Schlüsselaustausch für eine netzwerkarchitektur Expired - Lifetime DE60031878T2 (de)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US15781899P 1999-10-05 1999-10-05
US157818P 1999-10-05
PCT/US2000/027352 WO2001026322A2 (en) 1999-10-05 2000-10-04 Key exchange for a network architecture

Publications (2)

Publication Number Publication Date
DE60031878D1 true DE60031878D1 (de) 2006-12-28
DE60031878T2 DE60031878T2 (de) 2007-04-12

Family

ID=22565403

Family Applications (1)

Application Number Title Priority Date Filing Date
DE60031878T Expired - Lifetime DE60031878T2 (de) 1999-10-05 2000-10-04 Schlüsselaustausch für eine netzwerkarchitektur

Country Status (5)

Country Link
US (3) US7590843B1 (de)
EP (1) EP1226682B1 (de)
AU (1) AU7854100A (de)
DE (1) DE60031878T2 (de)
WO (1) WO2001026322A2 (de)

Families Citing this family (33)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7590843B1 (en) 1999-10-05 2009-09-15 Nortel Networks Limited Key exchange for a network architecture
US7266687B2 (en) * 2001-02-16 2007-09-04 Motorola, Inc. Method and apparatus for storing and distributing encryption keys
US7213144B2 (en) * 2001-08-08 2007-05-01 Nokia Corporation Efficient security association establishment negotiation technique
US7409549B1 (en) * 2001-12-11 2008-08-05 Cisco Technology, Inc. Methods and apparatus for dynamic home agent assignment in mobile IP
WO2003058879A1 (en) * 2002-01-08 2003-07-17 Seven Networks, Inc. Secure transport for mobile communication network
DE50312181D1 (de) 2002-01-24 2010-01-14 Siemens Ag Verfahren zur datenverkehrssicherung in einer mobilen netzumgebung
US7298847B2 (en) * 2002-02-07 2007-11-20 Nokia Inc. Secure key distribution protocol in AAA for mobile IP
US7587498B2 (en) 2002-05-06 2009-09-08 Cisco Technology, Inc. Methods and apparatus for mobile IP dynamic home agent allocation
CN1685694B (zh) 2002-08-14 2010-05-05 汤姆森特许公司 支持多个虚拟操作员的公共无线局域网的会话密钥管理
US7130286B2 (en) 2002-10-02 2006-10-31 Nokia Corporation System and method for resource authorizations during handovers
AU2003272988A1 (en) 2002-10-11 2004-05-04 Matsushita Electric Industrial Co., Ltd. Identification information protection method in wlan interconnection
US7882346B2 (en) * 2002-10-15 2011-02-01 Qualcomm Incorporated Method and apparatus for providing authentication, authorization and accounting to roaming nodes
US7469417B2 (en) * 2003-06-17 2008-12-23 Electronic Data Systems Corporation Infrastructure method and system for authenticated dynamic security domain boundary extension
GB0326265D0 (en) * 2003-11-11 2003-12-17 Nokia Corp Shared secret usage for bootstrapping
CN1658547B (zh) 2004-02-16 2010-08-18 华为技术有限公司 密钥分发方法
US8458467B2 (en) * 2005-06-21 2013-06-04 Cisco Technology, Inc. Method and apparatus for adaptive application message payload content transformation in a network infrastructure element
US7664879B2 (en) 2004-11-23 2010-02-16 Cisco Technology, Inc. Caching content and state data at a network element
US7912973B2 (en) * 2004-12-03 2011-03-22 Microsoft Corporation Message exchange protocol extension negotiation
US7987272B2 (en) 2004-12-06 2011-07-26 Cisco Technology, Inc. Performing message payload processing functions in a network element on behalf of an application
US8082304B2 (en) 2004-12-10 2011-12-20 Cisco Technology, Inc. Guaranteed delivery of application layer messages by a network element
US7813510B2 (en) * 2005-02-28 2010-10-12 Motorola, Inc Key management for group communications
KR101337126B1 (ko) * 2005-05-12 2013-12-05 삼성전자주식회사 무선랜 매쉬 네트워크에서의 핸드오버에 따른 재결합 수행 방법 및 장치
US8266327B2 (en) 2005-06-21 2012-09-11 Cisco Technology, Inc. Identity brokering in a network element
CN101232368B (zh) 2007-01-23 2011-06-01 华为技术有限公司 一种分配媒体流密钥的方法和多媒体子系统
US8713669B2 (en) * 2007-03-02 2014-04-29 Cisco Technology, Inc. Multi-domain dynamic group virtual private networks
US8411858B2 (en) 2007-03-28 2013-04-02 Apple Inc. Dynamic foreign agent-home agent security association allocation for IP mobility systems
US8411866B2 (en) * 2007-11-14 2013-04-02 Cisco Technology, Inc. Distribution of group cryptography material in a mobile IP environment
US8848923B2 (en) * 2008-12-15 2014-09-30 Telefonaktiebolaget L M Ericsson (Publ) Key distribution scheme for networks of information
CN102065423B (zh) * 2010-12-13 2013-07-10 中国联合网络通信集团有限公司 节点接入认证方法、接入认证节点、接入节点和通信系统
EP3295640B1 (de) * 2015-05-13 2022-03-23 Nokia Solutions and Networks Oy Benutzeridentitäten für ptt und mcptt
CN111404865A (zh) * 2019-01-02 2020-07-10 中国移动通信有限公司研究院 Ims系统加密通话方法、网络设备、终端及系统
US11201749B2 (en) * 2019-09-11 2021-12-14 International Business Machines Corporation Establishing a security association and authentication to secure communication between an initiator and a responder
US11206144B2 (en) 2019-09-11 2021-12-21 International Business Machines Corporation Establishing a security association and authentication to secure communication between an initiator and a responder

Family Cites Families (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5371794A (en) * 1993-11-02 1994-12-06 Sun Microsystems, Inc. Method and apparatus for privacy and authentication in wireless networks
EP0693836A1 (de) * 1994-06-10 1996-01-24 Sun Microsystems, Inc. Verfahren und Einrichtung für ein Schlüsselmanagementschema für Internet-Protokolle
KR100211426B1 (ko) * 1994-10-27 1999-08-02 포만 제프리 엘 이동 사용자의 안전한 식별 방법 및 시스템
US5748742A (en) * 1995-11-30 1998-05-05 Amsc Subsidiary Corporation Fraud detection and user validation system for mobile earth terminal communication device
JP3651721B2 (ja) * 1996-11-01 2005-05-25 株式会社東芝 移動計算機装置、パケット処理装置及び通信制御方法
US6496704B2 (en) * 1997-01-07 2002-12-17 Verizon Laboratories Inc. Systems and methods for internetworking data networks having mobility management functions
JP3641112B2 (ja) * 1997-09-05 2005-04-20 株式会社東芝 パケット中継装置、移動計算機装置、移動計算機管理装置、パケット中継方法、パケット送信方法及び移動計算機位置登録方法
US6512754B2 (en) * 1997-10-14 2003-01-28 Lucent Technologies Inc. Point-to-point protocol encapsulation in ethernet frame
US6400722B1 (en) * 1997-10-14 2002-06-04 Lucent Technologies Inc. Optimum routing system
US6675208B1 (en) 1997-10-14 2004-01-06 Lucent Technologies Inc. Registration scheme for network
US6760444B1 (en) * 1999-01-08 2004-07-06 Cisco Technology, Inc. Mobile IP authentication
US6418130B1 (en) * 1999-01-08 2002-07-09 Telefonaktiebolaget L M Ericsson (Publ) Reuse of security associations for improving hand-over performance
US6453159B1 (en) * 1999-02-25 2002-09-17 Telxon Corporation Multi-level encryption system for wireless network
US7590843B1 (en) 1999-10-05 2009-09-15 Nortel Networks Limited Key exchange for a network architecture

Also Published As

Publication number Publication date
EP1226682A2 (de) 2002-07-31
US20090313692A1 (en) 2009-12-17
US8505088B2 (en) 2013-08-06
US7590843B1 (en) 2009-09-15
US9432185B2 (en) 2016-08-30
WO2001026322A2 (en) 2001-04-12
AU7854100A (en) 2001-05-10
EP1226682B1 (de) 2006-11-15
DE60031878T2 (de) 2007-04-12
US20130290721A1 (en) 2013-10-31
WO2001026322A3 (en) 2001-11-08

Similar Documents

Publication Publication Date Title
DE60031878D1 (de) Schlüsselaustausch für eine netzwerkarchitektur
DE60209913D1 (de) Netzwerksicherheitsarchitektur für eine mobile netzwerkplattform
DE60114535D1 (de) Zugriffsauthentifizierungssystem für eine Funkumgebung
DE50105062D1 (de) Kühlsystem für eine turbinenschaufel
DE60024179D1 (de) Schiebevorrichtung für eine Kommunikationseinheit
DE69928803D1 (de) Digitalpaketnetz für die lokale zugriffsschleife
DE60020417D1 (de) Push-Netzwerk
DE60042256D1 (de) Schlüsselverteilung durch eine speicheranordnung
DE60138034D1 (de) Verteilte dienstearchitektur für eine verkaufs- oder dienstleistungsstelle
DE69937005D1 (de) Trägermechanismus für eine tastatur
DE69905968D1 (de) Eine Fotoresistzusammensetzung
AU2001275540A8 (en) Data management architecture
DE60037102D1 (de) Kodierungschlüsselaustauschprotokoll
DE60040115D1 (de) Eine Gatewayanordnung
DE69835425D1 (de) Verbesserter befehlszuteilungsmechanismus für eine geschützte vliw-architektur
DE978976T1 (de) Applikationsverteiler für eine Serverapplikation
DE69931896D1 (de) Fairness-schema für eine serielle schnittstelle
DE60125638D1 (de) Effiziente Architektur zum Netzwerkfehlerschutz
DE60021742D1 (de) Temperaturkontrolle für eine espressomachine
DE69942735D1 (de) PABX-Verwaltung
DE60017556D1 (de) Verlorene schalungsblockeinheit für eine betonwand
DE1080888T1 (de) Gestellkonfiguration für eine Druckmaschine
DE69914310D1 (de) Rastverbindung für eine rohrleitung
DE69922668D1 (de) Auslegeranordnung für eine gesteinbohreinheit
DE29718439U1 (de) Verriegelungsmechanismus für eine Laubsäge

Legal Events

Date Code Title Description
8364 No opposition during term of opposition
R082 Change of representative

Ref document number: 1226682

Country of ref document: EP

Representative=s name: GRUENECKER, KINKELDEY, STOCKMAIR & SCHWANHAEUS, DE