Patent ID: 7581093

Claim:
A computer-readable medium storing instructions which, when executed by a network node in a system wherein cryptographic keys are manually refreshed, cause said node to: use cryptographic keys according to a first state, a second state, and a third state, said network node in said first state using a current cryptographic key in respect of outgoing packets and incoming packets, said network node in said second state using said current cryptographic key in respect of outgoing packets and using at least one of said current cryptographic key and a new cryptographic key in respect of incoming packets, said network node in said third state using said new cryptographic key in respect of outgoing packets and using at least one of said current cryptographic key and said new cryptographic key in respect of incoming packets; transition from said first state to said second state upon being provisioned with said new cryptographic key; commence a delay period upon said transition from said first state into said second state; transition from said second state to said third state upon the elapsing of said delay period in said second state without receipt of a packet in respect of which said new cryptographic key has been used; and upon receipt, while in said second state during said delay period, of a packet in respect of which said new cryptographic key has been used, transition from said second state to said first state and use said new cryptographic key as the current cryptographic key.