Patent ID: 7881477
Filing Date: 2011-02-01
Classification: H04L

Abstract:
1. A computer based method for distributing security keys over a network, comprising: partitioning the network into a plurality of security domains each forming different levels of a security hierarchy, the plurality of security domains includes an upper level security domain and a lower level security domain, each of the upper level security domain and the lower level security domain has a security key associated therewith; electing one or more security brokers for each of the plurality of security domains; selecting a primary security broker for the upper level security domain and the lower level security domain in the security hierarchy; using a multicast virtual link, distributing the security key from the upper level security domain in the security hierarchy by the primary security broker located in the upper level security domain at each level to the lower level security domain receiving at each of the security brokers at a given level in the security hierarchy the security key from the upper level security domain that is distributed by the primary security broker for the given level; and electing at each of the security brokers at the given level to distribute either the security key or a local security key to members of the security domain associated with the security broker.