Patent ID: 11888982
Assignee: HUAWEI TECHNOLOGIES CO., LTD.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 27:
28. A second network device for rekeying a security association (SA) in a network system comprising a first network device and the second network device, an Internet Key Exchange (IKE) and an Internet Protocol Security (IPSec) tunnel is established between the first network device and the second network device, the second network device comprising:
a memory storing instructions; and
at least one processor in communication with the memory, the at least one processor configured, upon execution of the instructions, to perform the following steps:
receive a first rekey request from the first network device for rekeying an SA, wherein the first rekey request carries a first Security Parameter Index (SPI) and does not carry a cryptographic suite associated with the first network device;
determine whether there is a change in a cryptographic suite associated with the second network device;
send a first rekey response to the first network device; wherein the first rekey response carries a second SPI and does not carry the cryptographic suite associated with the second network device when there is no change in the cryptographic configuration associated with the second network device;
rekey the SA according to the first SPI and second SPI.