Method and system for exchanging data over networks using public key encryption

• US 20030212889A1
• Filed: 05/13/2002
• Published: 11/13/2003
• Est. Priority Date: 05/13/2002
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Robinson, Mike, Volkoff, Brian, Khieu, Andrew K.
• Application Number:
  US10/145,328
• Publication Number:
  US 20030212889A1
• Time in Patent Office: Days
• US Class Current: 713/164
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]

Abstract

A method and system for exchanging private data over an insecure network using public key encryption is disclosed. The method and system provides for generating a public/private key pair of a network peripheral, exposing the public key of the network peripheral in a network management protocol, receiving encrypted configuration data from a remote network configuration protocol tool, decrypting configuration data with the private key of the network peripheral and applying decrypted network configuration data to the configuration of the network peripheral.

Claims

1. A method of exchanging private data over a network using public key encryption comprising:

generating a public/private key pair of a network peripheral;

exposing the public key of the network peripheral in a network management protocol;

receiving encrypted configuration data from a remote network management protocol tool;

decrypting configuration data with the private key of the network peripheral; and

applying decrypted network configuration data to the configuration of the network peripheral.

2. The method of claim 1, wherein a remote SNMP (Simple Network Management Protocol tool) retrieves the public key of the network peripheral in plain text.

3. The method of claim 2, wherein the remote SNMP tool encrypts private data with the public key of the network peripheral.

4. The method of claim 3, wherein the remote SNMP provides configuration data to the network peripheral in cipher text.

5. The method of claim 4, wherein the public key of the network peripheral is exposed to a plurality network configuration managers.

6. The method of claim 5, wherein data exchanges subsequent to an initial data exchange with network configuration managers are conducted in cipher text instead of plain text.

7. The method of claim 6, wherein the SNMP management tool encrypts data payloads prior to any SNMPv1 or SNMPv2 configuration data exchanges.

8. The method of claim 7, wherein the generation of the public/private key pair is automatic.

9. The method of claim 8, wherein the data exchange is accomplished wirelessly.

10. A computer useable medium having computer useable code embodied therein for causing a computer to perform operations comprising:

generating a public/private key pair of a network peripheral;

exposing the public key of the network peripheral in a network management protocol;

accessing encrypted configuration data from a remote network protocol tool;

decrypting configuration data with the private key of the network peripheral; and

applying decrypted network configuration data to the configuration of the network peripheral;

wherein the configuration data is received in cipher text by the network peripheral.

11. The medium of claim 10, wherein a remote SNMP (Simple Network Protocol) tool retrieves the public key of the network peripheral in plain text.

12. The medium of claim 11, wherein the remote SNMP tool encrypts private data with the public key of the network peripheral.

13. The medium of claim 12, wherein the remote SNMP tool provides configuration data to the network peripheral in cipher text.

14. The medium of claim 13, wherein the public key of the network peripheral is exposed to a plurality network configuration managers.

15. The medium of claim 14, wherein data exchanges subsequent to an initial data exchange with network configuration managers are conducted in cipher text instead of plain text.

16. The medium of claim 15, wherein the SNMP management tool encrypts data payloads prior to any SNMPV1 or SNMVP2 configuration data exchanges.

17. The medium of claim 16, wherein the generation of the public/private key pair is automatic.

18. The medium of claim 17, wherein the data exchange is accomplished wirelessly.

19. A computer system comprising:

a bus;

a computer readable memory unit connected to said bus;

a processor coupled to said bus said processor for executing a method for implementing an application comprising the steps of;

creating a public/private key pair of a network peripheral;

transmitting the public key of the network peripheral in a network management protocol;

receiving encrypted configuration data from a remote network management protocol tool;

decrypting configuration data with the private key of the network peripheral; and

applying decrypted network configuration data to the configuration of the network peripheral, wherein the public key is exposed in plain text and the configuration data is received in cipher text.

20. The system of claim 19, wherein a remote SNMP (Simple Network Protocol) tool retrieves the public key of the network peripheral in plain text.

21. The system of claim 20, wherein the remote SNMP tool encrypts private data with the public key of the network peripheral.

22. The system of claim 21, wherein the remote SNMP provides configuration data to the network peripheral in cipher text.

23. The system of claim 22, wherein the public key of the network peripheral is exposed to a plurality network configuration managers.

24. The system of claim 23, wherein data exchanges subsequent to an initial data exchange with network configuration managers are conducted in cipher text instead of plain text.

25. The system of claim 24, wherein the SNMP management tool encrypts data payloads prior to any SNMPV1 or SNMVP2 configuration data exchanges.

26. The system of claim 25, wherein the generation of the public/private key pair is automatic.

27. The system of claim 26, wherein the data exchange is accomplished wirelessly.