VERFAHREN, VORRICHTUNGEN UND COMPUTERPROGRAMMPRODUKT ZUM GEMEINSAMEN BENUTZEN EINES KRYPTOGRAPHISCHEN SCHLÜSSELS MIT EINEM EINGEBETTETEN AGENTEN AUF EINEM NETZWERKENDPUNKT IN EINER NETZWERKDOMÄNE

摘要

Methods and apparatuses associated with sharing cryptographic keys in a network domain. An embedded agent on a network endpoint participates in the distribution of cryptographic keys. In one embodiment the embedded agent receives and stores a shared symmetric key, as do embedded agents on other network endpoints in the same network domain. The embedded agent causes the shared key to be stored in a secure storage not directly accessible by the host. When the host wants to transmit enciphered data, the embedded agent may provide access to cryptographic services. The embedded agent provides isolation of the shared key from parts of the host that are subject to compromise by attack or infection.