Patent ID: 8891770

Claim:
An apparatus, comprising: an interface; and a processor communicatively coupled with the interface and operable to communicate with a plurality of clients; wherein the processor is operable to generate a first key matrix and a second key matrix, the first and second key matrices comprising key material for the plurality of clients; wherein the processor is operable to encrypt data of the first key matrix with a first key associated therewith and data of the second key matrix with a second key associated therewith; wherein the processor is operable to generate a security association message for at least one designated client of the plurality of clients, wherein the processor is operable to generate a distinct security association message for each designated client, wherein the security association message for each designated client comprises a designated encrypted row of the first key matrix, a designated encrypted row of the second key matrix, and the first key; wherein the processor is operable to transmit the security association messages to each designated client; and wherein subsequent to transmitting the security association messages to each designated client, the processor is operable to transmit a message containing the second key to at least a portion of the designated clients.