Patent ID: 11888982
Assignee: HUAWEI TECHNOLOGIES CO., LTD.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 14:
15. A method for rekeying a security association (SA) applied in a network system including a first network device and a second network device, wherein an Internet Key Exchange (IKE) tunnel and an Internet Protocol Security (IPSec) tunnel are established between the second network device and the first network device, the method comprising:
receiving, by the second network device, a first rekey request from the first network device for rekeying the SA, wherein the first rekey request carries a first Security Parameter Index (SPI) and does not carry a cryptographic suite associated with the first network device;
determining, by the second network device, whether there is a change in a cryptographic suite associated with the second network device;
sending, by the second network device, a first rekey response to the first network device, wherein the first rekey response carries a second SPI and does not carry the cryptographic suite associated with the second network device when there is no change in the cryptographic configuration associated with the second network device;
rekeying, by the second network device, the SA according to the first SPI and the second SPI.