Patent ID: 8661248
Filing Date: 2014-02-25
Classification: H04L

Abstract:
1. A method for sending a security policy of multicast sessions, comprising: setting up a Datagram Transport Layer Security (DTLS) session between a sender and a receiver after the receiver joining a multicast group to start a SRTP multicast session with the sender; receiving by the sender, a security policy request sent under the DTLS session from the receiver; in response to the received security policy request under the DTLS session, constructing by the sender, a security policy response according to a security policy; multiplexing data by the sender, wherein the multiplexed data comprises the security policy response and Secure Real-Time Transport Protocol (SRTP) multicast session data; and sending by the sender, the multiplexed data to the receiver under the SRTP multicast session; wherein a first key pushing unit comprises: a first key pushing subunit configured to obtain the security policy from a first key managing unit and generate security policy updating data according to the obtained security policy; and a first key encrypting or decrypting subunit configured to obtain a key encryption key (KEK) in the security policy from the first key managing unit and use the KEK to encrypt the security policy updating data.