Changing group member reachability information

摘要

In an embodiment, a method comprises obtaining a second network address at a computer node, which has been already associated with a first network address and provided first keying information; sending, to a key server computer, an update message that comprises both the first network address and the second network address; using the first keying information to encrypt messages that the computer node sends from the second network address to one or more other members of a group.

主权项

1. A method for enhancing capabilities of a key server computer to dynamically disseminate rekeying information to mobile devices, the method comprising:
a key server computer registering a first network address associated with a mobile device, and upon finishing the registering of the first network address, deleting a security association established for the mobile device; receiving, from the mobile device, an update message comprising both the first network address and a second network address of the mobile device; in response to receiving the update message, the key server computer replacing the first network address with the second network address in storage at the key server computer without establishing a new secure connection with the mobile device; the key server computer generating rekeying information in response to determining that the rekeying information is needed for the mobile device.