CHANGING GROUP MEMBER REACHABILITY INFORMATION

摘要

In an embodiment, a method comprises obtaining a second network address at a computer node, which has been already associated with a first network address and provided first keying information; sending, to a key server computer, an update message that comprises both the first network address and the second network address; using the first keying information to encrypt messages that the computer node sends from the second network address to one or more other members of a group.

主权项

1. A method for enhancing capabilities of a key server computer to dynamically disseminate rekeying information to mobile devices, the method comprising:
a key server computer registering a first network address associated with a mobile device, and upon finishing the registering of the first network address, deleting a security association established for the mobile device; receiving, from the mobile device, an update message comprising both the first network address and a second network address of the mobile device; in response to receiving the update message, the key server computer replacing the first network address with the second network address in storage at the key server computer without creating a new security association for the mobile device; the key server computer determining whether rekeying information is needed for the mobile device; the key server computer generating the rekeying information and sending the rekeying information to the second network address of the mobile device in response to determining that rekeying information is needed.