Patent ID: 11949776
Assignee: CLOUDFLARE, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method in a key server, comprising:
receiving, from a responder device, a first request for the key server, wherein the first request is responsive to a second request to the responder device to initiate a cryptographic tunnel between an initiator device and the responder device, wherein the first request is requesting the key server to use a static private key and an ephemeral public key of an ephemeral key pair of the initiator device in a plurality of cryptographic operations of an asymmetric cryptography algorithm, wherein the key server has access to the static private key to be used in the asymmetric cryptography algorithm, wherein the responder device does not have access to the static private key to be used in the asymmetric cryptography algorithm, and
wherein the first request to initiate the cryptographic tunnel includes:
the ephemeral public key of the initiator device,
an encrypted static public key of the initiator device, and
an encrypted timestamp;

performing the plurality of cryptographic operations of the asymmetric cryptography algorithm using the static private key and the ephemeral public key of the initiator device; and
transmitting, to the responder device, a response that is based on at least a result of the plurality of cryptographic operations of the asymmetric cryptography algorithm using the static private key.