Distributed network encryption key generation

摘要

Embodiments of methods and network devices for securing data within a network are generally described herein. One such method includes a key aggregation server receiving a request for an encryption key to secure the data. The server may query a plurality of network devices for a respective key from each queried network device. The server may then receive the respective key from each of the plurality of network devices and select a key element from each of the plurality of keys. An encryption key may be constructed from the key elements and transmitted to a client.

主权项

1. A method for securing data in a network comprising a plurality of network devices, the method comprising:
receiving a request for an encryption key to secure the data; querying the plurality of network devices for a plurality of keys, each network device storing a respective key; receiving the respective key in a field associated with a loopback address from each of the plurality of network devices, wherein an associated hash value is received with each respective key, the hash value comprising a pointer to a location of its associated key within the respective network device; selecting a key element from each of the plurality of keys, wherein the key element comprises a subset of each respective key that is less than the respective key and selecting the key element from each of the plurality of keys comprises selecting random subsets of each of the plurality of keys; constructing the encryption key from the key elements; and transmitting the encryption key to a client.