Patent ID: 8644510
Filing Date: 2014-02-04
Classification: H04L

Abstract:
1. A method for forming a discoverable security association between a first computing device and a second computing device, comprising: obtaining by the first computing device from a key management entity: (i) a first private key assigned to the first computing device, which is computationally associative with a first public key associated with the first computing device; and (ii) a first root key assigned to the first computing device; choosing by the first computing device a first random value; encrypting by the first computing device the first random value using the first root key to generate a first nonce; generating by the first computing device a first key component based on the first random value; encrypting by the first computing device the first nonce and the first key component with a second public key associated with the second computing device using an identity-based encryption process; and sending by the first computing device the encrypted first nonce and the encrypted first key component to the second computing device so as to establish a security association with the second computing device, wherein the security association is discoverable by a third computing device unbeknownst to the first computing device and the second computing device.