Patent ID: 8522007
Filing Date: 2013-08-27
Classification: H04L

Abstract:
1. A non-transitory computer-readable medium comprising executable instructions operable, when executed, to: responsive to an initial session key negotiation, store a first security association information, comprising a first encryption key, for a tunnel in a security association memory; responsive to a session key renegotiation, store a second security association information different from the first security association, comprising a second encryption key, for the same tunnel in a cache; prior to an expiration condition, decrypt received packets associated with the tunnel conditionally using the second security association information in the cache or the first security association information in the security association memory based on identifiers associated with each of the received packets, the decryption being prior to the expiration condition and using the second security association information when the identifiers indicate the second security association information should be used for the decryption and the decryption being prior to the expiration condition and using the first security association information when the identifiers indicate the first security association information should be used for the decryption; and upon the expiration condition, overwrite the security association information, for the tunnel, in the security association memory with the security association information, for the tunnel, copied from the cache.