Patent ID: 6052787
Filing Date: 2000-04-18
Classification: H04L

Abstract:
A method for group-based declaration of a cryptographic, common security policy between a first computer unit and group computer units, comprising the steps of:forming in the first computer unit a first message;providing in the first message at least a first security policy proposal and a first identity checking variable;transmitting the first message from the first computer unit to at least some of the group computer units;carrying out the following steps in the group computer units;receiving the first message by a respective group computer unit of the group computers;checking integrity of the first security policy proposal based on the first identity checking variable;forming a second message in each case, the second message having at least a second security policy proposal and a second identity checking variable;transmitting the second messages from the group computer units to the first computer unit;receiving the second messages by the first computer unit;checking integrity of each respective second security proposal using the corresponding second identity checking variable;forming a third message by the first computer unit;providing in the third message at least one group security policy and a third identity checking variable;transmitting the third message from the first computer unit to at least some of the group computer units;carrying out the following steps in the group computer units;receiving the third message by respective group computer units; andchecking the integrity of the group security policy using the third identity checking variable.