Patent ID: 8059817
Filing Date: 2011-11-15
Classification: H04L

Abstract:
1. A method for encrypted communications comprising: configuring at least one processor to perform the steps of: receiving an unprotected data packet; selecting a security association (SA) for the unprotected data packet from a security association database (SAD) by using a selector that identifies at least one endpoint device; determining an indexing parameter from the SA, which relates the SA in the SAD with a key in a key storage database (KSD), wherein the key enables encryption of a data packet; determining an active key location from the KSD using the indexing parameter; encrypting the unprotected data packet using a key from the active key location to generate an encrypted data packet; forming a security parameter index (SPI) in a header of the encrypted data packet by using a key identifier (KeyID) from the active key location; and transmitting the encrypted data packet with the header indicating the SPI to a receiver.