KEY MANAGEMENT METHODS FOR SECURE COMMUNICATION SYSTEMS

摘要

Key management methods adapted to reduce the burden placed upon a key delivery device (e.g., KVL) operator. The KVL stores a record (205) identifying target encryption devices, determines upon connection to candidate devices if they are targets and automatically delivers the proper key management messages to the respective targets. Key management messages are not delivered to candidate devices not determined to be targets. Both the record (205) identifying the targets and the key management messages for those targets may be constructed at a centralized key management facility (KMF) and forwarded to the KVL. The KMF may instruct the KVL to deliver the key management messages in red or black transfer to target mode and set a red flag or black flag in the record as appropriate. Outcomes, e.g., success or failure, of attempted deliveries of key management messages are communicated from the target devices to the KVL, and from the KVL to the KMF. The method is useful for first-time rekeying or for ongoing rekeying.