Patent ID: 7395549
Filing Date: 2008-07-01
Classification: H04L

Abstract:
1. A method for operating a key distribution center (KDC) that provides keys to facilitate secure communications between clients and servers across a computer network, wherein the KDC operates without having to store long-term server secrets, comprising: receiving a communication from a server that is authenticated at the KDC; wherein the communication includes a temporary secret key to be used in communications with the server for a limited time period, and wherein the temporary secret key is shared between the server and the KDC; and storing the temporary secret key in a database at the KDC, so that the temporary secret key can be subsequently used to facilitate one or more communications between a client and the server, wherein the temporary secret key is encrypted with a public key belonging to the KDC, so that the temporary secret key can only be decrypted using a private key belonging to the KDC; wherein the temporary secret key is a short-term secret which becomes invalid after a short time period; and wherein the server generates a new temporary secret key in response to a request from the KDC for a new temporary secret key to replace the invalid temporary secret key.