公开(公告)号：US20170034137A1

公开(公告)日：2017-02-02

申请号：US14810899

申请日：2015-07-28

Applicant: Cisco Technology, Inc.

Inventor： Padmakumar Ampady Vasudevan Pillai ,  Brian Eliot Weis ,  Thamilarasu Kandasamy

IPC: H04L29/06

CPC classification number: H04L63/0435 ,  H04L9/08 ,  H04L63/061 ,  H04L63/062

Abstract: A Key Generation System (KGS) includes a key server, a first network element, and a second network element. The first and second network elements register with the key server and receive first and second KGS key seeds and first and second KGS identifiers, respectively. The first network element transmits the first KGS identifier to the second network element and obtains the second KGS identifier. The first network element computes a shared key based on the first KGS key seed and the second KGS identifier. The second network element receives the first KGS identifier from the first network element and computes the shared key based on the second KGS key seed and the first KGS identifier.

Abstract translation: 密钥生成系统（KGS）包括密钥服务器，第一网络元件和第二网络元件。 第一和第二网络元件与密钥服务器注册并分别接收第一和第二KGS密钥种子和第一和第二KGS标识符。 第一网元将第一KGS标识符发送到第二网元，并获得第二KGS标识符。 第一网元基于第一KGS密钥种子和第二KGS标识符来计算共享密钥。 第二网络元件从第一网络元件接收第一KGS标识符，并且基于第二KGS密钥种子和第一KGS标识符来计算共享密钥。

公开(公告)号：US09794234B2

公开(公告)日：2017-10-17

申请号：US14810899

申请日：2015-07-28

Applicant: Cisco Technology, Inc.

Inventor： Padmakumar Ampady Vasudevan Pillai ,  Brian Eliot Weis ,  Thamilarasu Kandasamy

IPC: H04L29/06

CPC classification number: H04L63/0435 ,  H04L9/08 ,  H04L63/061 ,  H04L63/062

Abstract: A Key Generation System (KGS) includes a key server, a first network element, and a second network element. The first and second network elements register with the key server and receive first and second KGS key seeds and first and second KGS identifiers, respectively. The first network element transmits the first KGS identifier to the second network element and obtains the second KGS identifier. The first network element computes a shared key based on the first KGS key seed and the second KGS identifier. The second network element receives the first KGS identifier from the first network element and computes the shared key based on the second KGS key seed and the first KGS identifier.