Key distribution mechanism for IP environment

摘要

A method and apparatus are provided for exchanging Diffie Hellman keys. This may include generating and transferring a first key at a user (such as a mobile node) and generating and transferring the first key to a first domain (such as a home domain). The first key may be certified at the first domain. A second key may be generated at a peer entity and transferred to the first domain. The second key may be certified at the first domain. After being certified, the first key may be transferred to the peer entity and the second key may be transferred to the user. Accordingly, the peer entity and the user are able to exchange their Diffie Hellman information in an authenticated manner and can derive the shared session key.