Systems and methods for reserving cryptographic key material

• US 7,515,716 B1
• Filed: 02/26/2004
• Issued: 04/07/2009
• Est. Priority Date: 02/26/2004
• Status: Expired due to Fees

• Current Assignee: Raytheon BBN Technologies Corp. (Rtx Corporation)
• Original Assignee: BBN Technologies (Rtx Corporation)
• Inventors: Elliott, Brig Barnum
• Primary Examiner(s): LAFORGIA, CHRISTIAN A
• Application Number:
  US10/786,314
• Time in Patent Office: 1,867 Days
• Field of Search: 380/277
• US Class Current: 380/256
• CPC Class Codes: H04L 2209/34 Encoding or coding, e.g. Huffman coding or error correction
• CPC Class Codes: H04L 9/0858 Details about key distillation or coding, e.g. reconciliation, error correction, privacy amplification, polarisation coding or phase coding

Abstract

Systems and a methods are provided for reserving a rate at which cryptographic material is provided. A reservation request [700] for reserving the rate is sent from a secret bits consuming application [410] to a secret bit producing application [405]. The secret bits producing application [405] determines whether the reservation request can be satisfied. When the secret bits producing application determines that the reservation can be satisfied, the rate is reserved for the secret bits consuming application [410].

Claims

1. A method of reserving a rate at which cryptographic key material is provided, the method comprising:

sending a first reservation request for reserving a first rate from a first secret bits consuming application to a secret bits producing application;

determining, by the secret bits producing application, whether the reservation request can be satisfied;

reserving the first rate for the first secret bits consuming application when the determining determines that the reservation can be satisfied; and

outputting an indication that the first rate has been reserved.

2. The method of claim 1, wherein the secret bits are cryptographic key material.

3. The method of claim 2, wherein the secret bits producing application is included in a system receiving random or pseudo-random sequences from an external source.

4. The method of claim 3, wherein the external source is a satellite.

5. The method of claim 3, wherein the random or the pseudo-random sequences are transmitted via radio-frequency signals.

6. The method of claim 2, further comprising using the cryptographic key material to protect traffic flows through an Ethernet network.

7. The method of claim 2, further comprising using the cryptographic key material to protect traffic flows through an internet.

8. The method of claim 2, further comprising using the cryptographic key material to protect traffic flows through an Asynchronous Transfer Mode network.

9. The method of claim 2, further comprising using the cryptographic key material to protect traffic flows through a Synchronous Optical Network.

10. The method of claim 2, further comprising using the cryptographic key material to protect traffic flows through a network employing MultiProtocol Label Switching.

11. The method of claim 2, further comprising using the cryptographic key material to provide secure communications.

12. The method of claim 2, wherein the first secret bits producing application is based on advantage distillation.

13. The method of claim 2, wherein the secret bits producing application is included in a quantum cryptographic system.

14. The method of claim 13, wherein the quantum cryptographic system employs a laser.

15. The method of claim 13, wherein the quantum cryptographic system employs a photon source.

16. The method of claim 13, wherein the quantum cryptographic system employs a Mach-Zehnder interferometer.

17. The method of claim 13, wherein the quantum cryptographic system employs a phase/polarization modulator.

18. The method of claim 13, wherein the quantum cryptographic system employs a freespace optical path.

19. The method of claim 13, wherein the quantum cryptographic system employs an optical fiber path.

20. The method of claim 13, wherein the quantum cryptographic system employs a link comprising photonic band-gap material.

21. The method of claim 1, further comprising sending a second reservation request for reserving a second rate from a second secret bits consuming application to the secret bits producing application, wherein the first reservation request and the second reservation request each include a priority of the respective request and the second reservation request has a different priority than the first reservation request.

22. The method of claim 1, further comprising using secret bits from the secret bits producing application by a second secret bits consuming application having no requested reserved rate.

23. The method of claim 1, wherein the reservation request includes a priority, a desired rate, and a minimum acceptable bit rate.

24. The method of claim 23, wherein the reserving the first rate comprises:

determining, by the secret bits producing application, whether the desired rate can be satisfied;

when the desired rate can be satisfied, sending a reply message to the requesting secret bits consuming application indicating a full-success;

when the desired rate cannot be satisfied, sending a reply message to the requesting secret bits consuming application indicating a partial-success when an amount of available of the rate is at least enough to satisfy the minimum acceptable rate; and

sending a reply message to the requesting secret bits consuming application indicating a failure to reserve the first rate when neither the desired rate nor the minimum acceptable rate can be satisfied.

25. The method of claim 1, further comprising canceling a reservation when the secret bits producing application receives a message from the secret bits consuming application indicating that a reservation of the first rate is no longer needed by the secret bits consuming application.

26. The method of claim 1, further comprising determining an estimated bit production rate by the secret bits producing application.

27. The method of claim 26, further comprising calculating an available rate of secret bits available for reservations, the calculating comprising:

calculating a total number of secret bits reserved for a secret bits consuming application; and

subtracting the total number of secret bits reserved for a secret bits consuming application from the estimated bit production rate to produce the available rate of secret bits available for reservations.

28. The method of claim 27, further comprising deleting at least one lowest priority reservation when the available rate of secret bits becomes negative, the deleting continuing until the available rate of secret bits becomes non-negative.

29. The method of claim 1, further comprising issuing a warning, by the secret bits producing application, when use of secret bits by the first secret bits consuming application from the secret bits producing application exceeds the first rate reserved for the first secret bits consuming application.

30. The method of claim 1, wherein the reserving act reserves the first rate for a limited period of time.

31. A system comprising:

a secret bits consuming application; and

a secret bits producing application configured to receive a request from the secret bits consuming application for a reservation of a rate of secret bits to be produced by the secret bits producing application, the secret bits producing application being further configured to determine whether the reservation can be satisfied and to send a notification to the secret bits consuming application when the reservation can be satisfied.

32. A machine-readable memory device having recorded thereon instructions for a processing system, such that when the instructions are read and executed by at least one processor, the at least one processor performs:

servicing a reservation request for reserving a rate at which secret bits are provided for a secret bits consuming application;

determining whether the reservation request can be successfully serviced; and

reserving the rate for the secret bits consuming application when the reservation request can be successfully serviced.

33. A computer-implemented system comprising:

means for producing secret bits for use in a cryptographic system;

means for using the secret bits to cryptographically protect traffic to be sent through a network, wherein the means for producing the secret bits includes;

means for receiving a reservation request from the means for using the bits, and means for reserving a rate at which the secret bits are provided and notifying the means for using of a successful reservation.

34. A method of reserving a rate of providing cryptographic key material, comprising:

specifying a desired consumption rate of cryptographic key material at a first network device;

reserving the desired consumption rate of cryptographic key material, and

outputting an indication that the desired consumption rate has been reserved.

35. A method of reserving a rate of providing secret bits by a secret bit producer that is based on advantage distillation, comprising:

specifying a desired rate by a first process;

reserving the desired rate by the secret bit producer that is based on advantage distillation; and

outputting an indication that the desired rate has been reserved.

36. A method of reserving a rate of providing generated cryptographic key material from an advantage distillation based secret bits producer;

comprising;

generating, by the advantage distillation based secret bits producer, cryptographic key material;

receiving a request from a secure communication process for a reservation of the cryptographic key material at a first rate, the request identifying a minimum acceptable rate; and

notifying the secure communication process of a successful reservation when an available generated rate of cryptographic key material is greater than the minimum acceptable rate.

37. A method of reserving a rate of providing secret key material for protecting communications, the method comprising:

specifying a minimum desired consumption rate of secret key material and a priority by a client process;

determining, by a secret key material producing process, whether the minimum desired consumption rate of secret key material is available to the client process;

when the minimum desired consumption rate of secret key material is not available to the client process, making at least the minimum desired consumption rate of secret key material available by canceling at least one previously made reservation of a rate of the secret key material, each of the at least one previously made reservation having a lower priority than the specified priority;

reserving at least the minimum desired consumption rate of the secret key material for the client process; and

outputting an indication that the at least the minimum desired consumption rate has been reserved.