Patent ID: 8122240

Claim:
A method of establishing a security association between a first node and a second node for the purpose of pushing information from the first node to the second node, where the second node and a key generation function share a base secret, the method comprising: sending a request for generation and provision of a service key from the first node to the key generation function, the request containing identities of the first and second nodes; generating the service key at the key generation function using the identity of the first node, the base secret, and additional information, signing the additional information using a derivative of the base secret and sending the service key to the first node together with said additional information; forwarding said additional information and said identity of the first node from the first node to the second node; at the second node, verifying the additional information using the derivative of the base secret, generating said service key using the received additional information, the first node identity, and the base secret; and establishing the security association between the first node and the second node using said service key.