Patent ID: 11936691
Assignee: QUEEN'S UNIVERSITY AT KINGSTON
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 19:
20. A non-transitory computer-readable medium having stored thereon instructions that, when executed by processors of two or more cloud entities of a cloud computer network, establish secure data-in-transit cloud communications between the cloud entities;
wherein establishing the secure cloud communications comprises the cloud entities executing processing steps that provide a communication security protocol;
wherein when a first cloud entity communicates with a second cloud entity for the first time, a temporary encrypted session is initialized between the first and second cloud entities;
a pair of messages (PUB-ACK) are transmitted between the first and second cloud entities and the first and second cloud entities store each other's pair of public keys in the temporary session using a hashed session key;
the first and second cloud entities generate a common secret key to proceed with a data transmission phase;
the hashed session key is updated after every successful transaction (encrypted request-response);
wherein the first cloud entity receives the updated session key hidden inside the encrypted response; and
when the session expires, the negotiated public keys and the generated common secret key are destroyed;
wherein the communication security protocol implements security elements using symmetric block encryption, cryptographic hash, public key cryptography, and ephemeral key-exchange in the communications between the two or more cloud entities to provide a secure communication channel;
wherein security for both the data and the cryptographic keys is provided.