Patent ID: 6907532
Filing Date: 2005-06-14
Classification: H04L,Y10S

Abstract:
1. A system for recovering from a temporary failure of a communication node, comprising: a volatile memory for containing a security association database comprising a plurality of security associations, wherein each security association includes a header containing a sequence number; a non-volatile memory; and a controller comprising: means for periodically storing the security association database in the non-volatile memory; means responsive to a loss of the security association database in the volatile memory, for retrieving the most recently stored security association database from the non-volatile memory when the node returns to normal operation; means for determining whether any of the security associations in the retrieved database have expired; means responsive to a determination that a given security association has expired, for deleting the expired security association from the retrieved database; and means responsive to a determination that a given security association has not expired, for incrementing the sequence number of the given security association by an amount substantially equal to the product of the time since the given security association was stored and a constant.