公开(公告)号：US20190158279A1

公开(公告)日：2019-05-23

申请号：US15816400

申请日：2017-11-17

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Sudhir Kumar Chimakurthy ,  Chaitanya Kumar Gali ,  Dileep Bangalore Sridhara

IPC: H04L9/08 ,  H04L29/06

Abstract: Examples disclosed herein relate to configuring a connectivity association key and a connectivity association name in a MACsec capable device. In an example, a first MACsec device may receive a MAC address and a device identifier of a second MACsec capable device. First MACsec capable device may authenticate the second MACsec capable device based on the device identifier. First MACsec capable device may generate a CAK, a CKN, and a nonce. The CAK, the CKN, and the nonce may be encrypted using a public key of the second MACsec capable device to generate an encrypted packet. The encrypted packet may be sent to the second MACsec capable device. The first MACsec capable device may receive a decrypted nonce from the second MACsec capable device. In response to a determination that the decrypted nonce matches with the nonce, CAK and CKN may be configured on first MACsec capable device.

公开(公告)号：US10686595B2

公开(公告)日：2020-06-16

申请号：US15816400

申请日：2017-11-17

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Sudhir Kumar Chimakurthy ,  Chaitanya Kumar Gali ,  Dileep Bangalore Sridhara

IPC: H04L9/08 ,  H04L29/06 ,  H04L9/32

Abstract: Examples disclosed herein relate to configuring a connectivity association key and a connectivity association name in a MACsec capable device. In an example, a first MACsec device may receive a MAC address and a device identifier of a second MACsec capable device. First MACsec capable device may authenticate the second MACsec capable device based on the device identifier. First MACsec capable device may generate a CAK, a CKN, and a nonce. The CAK, the CKN, and the nonce may be encrypted using a public key of the second MACsec capable device to generate an encrypted packet. The encrypted packet may be sent to the second MACsec capable device. The first MACsec capable device may receive a decrypted nonce from the second MACsec capable device. In response to a determination that the decrypted nonce matches with the nonce, CAK and CKN may be configured on first MACsec capable device.