专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20080175393A1 Kerberized handover keying 有权
标题翻译： Kerberized切换密钥
公开(公告)号：US20080175393A1
公开(公告)日：2008-07-24
申请号：US11972450
申请日：2008-01-10
申请人： Yoshihiro OBA , Subir DAS
发明人： Yoshihiro OBA , Subir DAS
IPC分类号： H04L9/08 , H04L9/32
CPC分类号： H04W12/06 , H04L63/062 , H04L63/0807 , H04L63/162 , H04W8/005 , H04W12/04 , H04W36/005 , H04W36/12
摘要： A media-independent handover key management architecture is disclosed that uses Kerberos for secure key distribution among a server, an authenticator, and a mobile node. In the preferred embodiments, signaling for key distribution is based on re-keying and is decoupled from re-authentication that requires EAP (Extensible Authentication Protocol) and AAA (Authentication, Authorization and Accounting) signaling similar to initial network access authentication. In this framework, the mobile node is able to obtain master session keys required for dynamically establishing the security associations with a set of authenticators without communicating with them before handover. By separating re-key operation from re-authentication, the proposed architecture is more optimized for a proactive mode of operation. It can also be optimized for reactive mode of operation by reversing the key distribution roles between the mobile node and the target access node.
摘要翻译：公开了一种媒体独立的切换密钥管理架构，其使用Kerberos在服务器，认证器和移动节点之间进行安全密钥分发。在优选实施例中，用于密钥分发的信令基于重新键入，并且与需要与初始网络接入认证相似的EAP（可扩展认证协议）和AAA（认证，授权和计费）信令的再认证解耦。在该框架中，移动节点能够获得主动会话密钥，用于在切换之前与一组认证者动态建立安全关联，而不与其进行通信。通过将重新键入操作与重新认证分离，所提出的架构针对主动操作模式进行了更优化。还可以通过反转移动节点和目标接入节点之间的密钥分发角色来优化用于反应的操作模式。

IPRDB

热门服务

关于我们

友情链接

联系方式