Patent ID: 8671273
Filing Date: 2014-03-11
Classification: H04B,H04L

Abstract:
1. A computer implemented method for securing end-to-end communication in hybrid satellite networks, comprising: establishing, by a client node, a connection with a server node in a hybrid satellite network, wherein a first proxy node is associated with the client node and a second proxy node is associated with the server node; sending, by the client node and to the server node, a first certificate corresponding to the first proxy node during Internet Key Exchange (IKE) protocol message exchange for dynamic establishment of session keys for use in subsequent Internet Protocol Security (IPSEC) encryption; receiving, at the client node and from the server node, a second certificate corresponding to the second proxy node during the IKE protocol message exchange; obtaining, by the client node and based upon exchanging the first certificate and the second certificate with the server node, an additional pair of keys for encryption and authentication of messages using the first and second proxy nodes during the subsequent IPSEC encryption, wherein the additional pair of keys are obtained in addition to four primary keys generated during IKE protocol message exchange for encryption and authentication by the client and server nodes during the subsequent IPSEC encryption; and distributing, by the client node, the additional pair of keys to the first proxy node during the IKE protocol message exchange.