Patent ID: 8356175
Filing Date: 2013-01-15
Classification: H04L

Abstract:
1. A method to extend a security protocol comprising: determining a first master secret for a first security protocol exchange between a first endpoint and a second endpoint; exchanging identifying information between the first endpoint and the second endpoint, wherein the exchanged identifying information does not include any encryption secret and does not include any encryption key; determining, using a processor, a first secret based on the exchanged identifying information; determining a second master secret for a second security protocol exchange based on the first secret and the first master secret; deriving a session key between the first and second endpoints based on the second master secret; exchanging second identifying information between the second and a third endpoint to determine a second secret, wherein the second master secret is also based on the second secret and cryptographically combines the first master secret, the first secret and the second secret; and configuring an encrypter at the first endpoint with the second master secret, the encrypter to encrypt data sent from the first endpoint to the second endpoint during the second security protocol exchange with the second master secret.