Efficient Routing of Streams Encrypted Using Point-to-Point Authentication Protocol

摘要

Embodiments relate to routing encrypted data from a source to a sink via a router without decrypting the data in the router. The source authenticates with the router, the result of which produces a session key and a pseudo-random number. The router authenticates with the sink using the same session key and pseudo-random number. The router passes encrypted data received from the source to the sink without decryption and re-encryption.

主权项

1. A method for routing encrypted data, comprising:
authenticating a router with a first device by an authentication protocol for performing a point-to-point authentication by communicating with the first device; receiving, at a first port of the router, a session key and a pseudo-random number for the session from the first device; authenticating a router with a second device by the authentication protocol by communicating from a second port of the router with the second device; sending the same session key and pseudo-random number for the session from the second port to the second device; receiving, at the first port, a first encrypted stream from the first device, the first encrypted stream encrypted using the session key and the pseudo-random number; routing the first encrypted stream from the first port to the second port without encrypting or decrypting the first encrypted stream; and sending the first encrypted stream from the second port to the second device.