公开(公告)号：US09444796B2

公开(公告)日：2016-09-13

申请号：US14248399

申请日：2014-04-09

Applicant: Cisco Technology, Inc.

Inventor： Lewis Chen ,  Scott Fluhrer ,  Warren Scott Wainner ,  Brian Weis

IPC: H04L29/06

CPC classification number: H04L63/061 ,  H04L63/0272 ,  H04L63/0428 ,  H04L63/06 ,  H04L63/104

Abstract: Techniques are presented for optimizing secure communications in a network. A first router receives from a second router an encrypted packet with an unknown security association. The first router examines the packet to determine whether the counter value is in a range of predicted counter values. Additionally, a key server is configured to provision routers that are part of a virtual private network. The key server selects a counter value that is part of a security association and calculates a key value. The key server sends the key value together with the security association to enable routers to exchange encrypted packets with each other in the virtual private network using the key value and the security association. The key server increments the counter value to a value within a range of counter values capable of being predicted by the routers.

Abstract translation: 呈现技术来优化网络中的安全通信。 第一路由器从第二路由器接收具有未知安全关联的加密分组。 第一个路由器检查数据包，以确定计数器值是否在预测计数器值的范围内。 另外，密钥服务器被配置为配置作为虚拟专用网络一部分的路由器。 密钥服务器选择作为安全关联的一部分的计数器值，并计算密钥值。 密钥服务器将密钥值与安全关联一起发送，以使路由器能够使用密钥值和安全关联在虚拟专用网络中彼此交换加密的数据包。 密钥服务器将计数器值递增到可由路由器预测的计数器值范围内的值。

公开(公告)号：US09350709B2

公开(公告)日：2016-05-24

申请号：US14246359

申请日：2014-04-07

Applicant: Cisco Technology, Inc.

Inventor： Lewis Chen ,  Warren Scott Wainner ,  Guan Deng

IPC: H04L29/06 ,  H04L9/08

CPC classification number: H04L63/0272 ,  G06F21/602 ,  H04L9/083 ,  H04L9/0833 ,  H04L45/02 ,  H04L45/60 ,  H04L63/0428 ,  H04L63/062

Abstract: Techniques are presented herein for optimizing secure communications in a network. A router in a virtual private network determines whether or not it has successfully registered with a key server that provides cryptographic keys for routers in the virtual private network. The router stores state information that is indicative of whether or not the router has successfully registered with the key server.

Abstract translation: 本文介绍了在网络中优化安全通信的技术。 虚拟专用网络中的路由器确定其是否已成功注册到为虚拟专用网络中的路由器提供加密密钥的密钥服务器。 路由器存储指示路由器是否已成功向密钥服务器注册的状态信息。