KEY MANAGEMENT FOR SECURE COMMUNICATION

摘要

A method and arrangement is disclosed for managing session keys for secure communication between a first and at least a second user device in a communications network. The method is independent of what type of credential each user device implements for security operations. A first user receives from a first key management server keying information and a voucher and generates a first session key. The voucher is forwarded to at least a responding user device that, with support from a second key management server communicating with the first key management server, resolves the voucher and determines a second session key. First and second session keys are, thereafter, used for secure communication. In one embodiment the communication traverses an intermediary whereby first and second session keys protect communication in their respective leg to said intermediary.