Patent ID: 8199916
Filing Date: 2012-06-12
Classification: H04L

Abstract:
1. A method for selectively loading a communication network security enforcement point (“SEP”) with security association (“SA”) information, the method comprising: receiving, by an SEP, at least one encrypted data packet over a secure end-to-end communications path between at least two endpoints, wherein the SEP is independent from and intermediate to the at least two endpoints; determining, by the SEP, that SA information for decrypting the at least one encrypted data packet fails to exist locally at the SEP; sending, by the SEP, a request to a communication network key server for SA information associated with the at least one encrypted data packet, wherein the request further notifies the communication network key server to automatically transmit additional SA information generated under an Internet Key Exchange SA associated with the SA information being requested, wherein the additional SA information includes any new SA information established after the request; and receiving, by the SEP, from the communication network key server the SA information associated with the at least one encrypted data packet.