Patent ID: 11888982
Assignee: HUAWEI TECHNOLOGIES CO., LTD.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 22:
23. A first network device for rekeying a security association (SA) in a network system comprising the first network device and a second network device, an Internet Key Exchange (IKE) and an Internet Protocol Security (IPSec) tunnel are established between the first network device and the second network device, the first network device comprising:
a memory storing instructions; and
at least one processor in communication with the memory, the at least one processor configured, upon execution of the instructions, to perform the following steps:
determine whether there is a change in the cryptographic suite associated with the first network device;
send a first rekey request to the second network device for rekeying an SA when there is no change in the cryptographic suite associated with the first network device, the first rekey request carries a first Security Parameter Index (SPI) and does not carry the cryptographic suite associated with the first network device;
receive a first rekey response from the second network device, the first rekey response carries a second SPI and does not carry a cryptographic suite associated with the second network device when there is no change in the cryptographic suite associated with the second network device;
rekey the SA according to the first SPI and the second SPI when there is no change in the cryptographic suite associated with the first network device and in the cryptographic suite associated with the second network device.