Pairwise Pre-Shared Key Generation System

摘要

A Key Generation System (KGS) includes a key server, a first network element, and a second network element. The first and second network elements register with the key server and receive first and second KGS key seeds and first and second KGS identifiers, respectively. The first network element transmits the first KGS identifier to the second network element and obtains the second KGS identifier. The first network element computes a shared key based on the first KGS key seed and the second KGS identifier. The second network element receives the first KGS identifier from the first network element and computes the shared key based on the second KGS key seed and the first KGS identifier.

主权项

1. A method comprising:
registering a first network element with a key server that manages a key generation system (KGS); obtaining a KGS key seed and a first KGS identifier associated with the first network element; transmitting the first KGS identifier to a second network element; obtaining a second KGS identifier associated with the second network element; and computing a shared key based on the KGS key seed and the second KGS identifier.