Verfahren und System zur Synchronisierung von Verschlüsselungs-/Entschlüsselungsschlüsseln in einem Datenkommunikationsnetz unter Verwendung von Markierungspaketen

摘要

To enhance the security provided by data encryption in a data communication network, encryption/decryption keys are changed periodically at the source and destination nodes for an established connection. A destination node must know not only the value of any new key but also when to begin using that key to decrypt received data packets. Synchronization (making sure a data packet is decrypted using a decryption key correlated with the encryption key used to encrypt the same packet) is achieved through the use of marker cells, special purpose cells. When a source node decides to activate a new key, previously sent to and stored at the destination node, a marker cell is transmitted by the source node to the destination node. When the destination node recognizes the marker packet, it discards it and activates the previously received key for use in decrypting subsequently received packets.