Patent ID: 8484469
Filing Date: 2013-07-09
Classification: H04L

Abstract:
1. A method for key distribution, comprising: sending, by a client node, a key distribution request to a third party equipment by way of a first message comprising a first serial number generated by the client node and encrypted by a first shared key between the client node and a verification server; after receiving the first message, sending, by the third party equipment, the key distribution request to the verification server by way of a second message; wherein the second message comprises the first message; after receiving the second message, computing, by the verification server, a second shared key between the client node and the third party equipment by using keying materials comprising a second serial number generated by the verification server, and sending a key distribution response to the third party equipment by way of a third message comprising the second shared key and the keying materials; wherein the first serial number is included in a first portion of the third message; after receiving the third message, acquiring by the third party equipment the second shared key, and forwarding the keying materials to the client node by way of a fourth message; wherein the first serial number is included in the fourth message; and after receiving the keying materials, computing, by the client node, the second shared key by using the keying materials in a same method as the one used by the verification server, wherein before computing the second shared key between the client node and the third party equipment, the verification server acquires the first serial number included in the second message, compares the first serial number acquired with a third serial number stored in the verification server, and if the verification condition is satisfied, the verification server stores the first serial number acquired, and continues to compute the second shared key between the client node and the third party equipment, after receiving the first message, the third party equipment stores the first serial number sent by the client node, and when the third message is received, the third party equipment acquires the first serial number included in the third message, compares the first serial number acquired and the first serial number stored in the third party equipment, and forwards the keying materials to the client node if the first serial number acquired is the same as the first serial number stored in the third party equipment, and when receiving the keying materials, the client node compares the first serial number included in the fourth message with the first serial number stored in the client node, and if the two serial numbers are the same, the client node computes the second shared key between the client node and the third party equipment.