×

Securing network traffic using distributed key generation and dissemination over secure tunnels

  • US 20070186281A1
  • Filed: 01/03/2007
  • Published: 08/09/2007
  • Est. Priority Date: 01/06/2006
  • Status: Abandoned Application
First Claim
Patent Images

1. A method for securing message traffic in a data network using a security protocol, the method comprising the steps of:

  • at a policy enforcement point (PEP) within a network of PEPS, determining a security policy definition to be applied to the traffic across the network, the policy definition including at least a definition of the traffic to be secured and parameters to be applied to the secured traffic;

    generating an outbound key to be used in securing the traffic;

    distributing the outbound key to peer PEPs in the network of PEPs;

    receiving an outbound packet, the outbound packet having original source and destination addresses;

    applying security processing to the outbound packet according to the security policy; and

    forwarding the secured packet in the network using the security protocol, the secured packet having at least a partially unsecured header portion indicating at least one of the original source and destination addresses.

View all claims
  • 9 Assignments
Timeline View
Assignment View
    ×
    ×