Patent ID: 8745374
Filing Date: 2014-06-03
Classification: H04L

Abstract:
1. A method of sending protected data from a sender unit to a receiver unit via an intermediate unit, the method comprising, at the intermediate unit: storing information associated with a certificate belonging to the receiver unit, and information associated with a certificate belonging to the intermediate unit, the certificate belonging to the intermediate unit being signed by the receiver unit; receiving a request from the sender unit to send protected data to the receiver unit; sending a response to the sender unit, the response including the information associated with the certificate belonging to the receiver unit; receiving from the sender unit data protected using the information associated with certificate belonging to the receiver unit for subsequent forwarding to the receiver unit, wherein the request from the sender unit to send protected data to the receiver unit comprises a request for hop-by-hop protection between the sender unit and the intermediate unit, the hop-by-hop protection being based on the certificate belonging to the intermediate unit, and a request for end-to-end protection between the sender unit and the receiver unit; and the response comprises an acceptance of the hop-by-hop protection between the intermediate unit and the sender unit, and a rejection of end-to-end protection between the intermediate unit and the sender unit.