公开(公告)号：US11171953B2

公开(公告)日：2021-11-09

申请号：US16200134

申请日：2018-11-26

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Sharath Srikanth Chellappa ,  Yashavantha Nagaraju Naguvanahalli ,  Dileep Bangalore Sridhara ,  Thomas M. Laffey

IPC: H04L29/06

Abstract: A technique includes receiving a request from a first electronic device to connect to a network and receiving a first part from the first electronic device. The technique includes regulating onboarding of the first electronic device. Regulating the onboarding includes authenticating the first electronic device. Authenticating the first electronic device includes communicating with a plurality of electronic devices that are connected to the network to receive a set of second secret parts; constructing a first secret from the first secret part and the set of second secret parts; and comparing the first secret to a second secret. Regulating the onboarding of the first electronic device includes allowing the first electronic device to connect to the network based on a result of the comparison.

公开(公告)号：US10686595B2

公开(公告)日：2020-06-16

申请号：US15816400

申请日：2017-11-17

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Sudhir Kumar Chimakurthy ,  Chaitanya Kumar Gali ,  Dileep Bangalore Sridhara

IPC: H04L9/08 ,  H04L29/06 ,  H04L9/32

Abstract: Examples disclosed herein relate to configuring a connectivity association key and a connectivity association name in a MACsec capable device. In an example, a first MACsec device may receive a MAC address and a device identifier of a second MACsec capable device. First MACsec capable device may authenticate the second MACsec capable device based on the device identifier. First MACsec capable device may generate a CAK, a CKN, and a nonce. The CAK, the CKN, and the nonce may be encrypted using a public key of the second MACsec capable device to generate an encrypted packet. The encrypted packet may be sent to the second MACsec capable device. The first MACsec capable device may receive a decrypted nonce from the second MACsec capable device. In response to a determination that the decrypted nonce matches with the nonce, CAK and CKN may be configured on first MACsec capable device.

公开(公告)号：US20200059469A1

公开(公告)日：2020-02-20

申请号：US16200134

申请日：2018-11-26

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Sharath Srikanth Chellappa ,  Yashavantha Nagaraju Naguvanahalli ,  Dileep Bangalore Sridhara ,  Thomas M. Laffey

IPC: H04L29/06

Abstract: A technique includes receiving a request from a first electronic device to connect to a network and receiving a first part from the first electronic device. The technique includes regulating onboarding of the first electronic device. Regulating the onboarding includes authenticating the first electronic device. Authenticating the first electronic device includes communicating with a plurality of electronic devices that are connected to the network to receive a set of second secret parts; constructing a first secret from the first secret part and the set of second secret parts; and comparing the first secret to a second secret. Regulating the onboarding of the first electronic device includes allowing the first electronic device to connect to the network based on a result of the comparison.

公开(公告)号：US20190158279A1

公开(公告)日：2019-05-23

申请号：US15816400

申请日：2017-11-17

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Sudhir Kumar Chimakurthy ,  Chaitanya Kumar Gali ,  Dileep Bangalore Sridhara

IPC: H04L9/08 ,  H04L29/06

Abstract: Examples disclosed herein relate to configuring a connectivity association key and a connectivity association name in a MACsec capable device. In an example, a first MACsec device may receive a MAC address and a device identifier of a second MACsec capable device. First MACsec capable device may authenticate the second MACsec capable device based on the device identifier. First MACsec capable device may generate a CAK, a CKN, and a nonce. The CAK, the CKN, and the nonce may be encrypted using a public key of the second MACsec capable device to generate an encrypted packet. The encrypted packet may be sent to the second MACsec capable device. The first MACsec capable device may receive a decrypted nonce from the second MACsec capable device. In response to a determination that the decrypted nonce matches with the nonce, CAK and CKN may be configured on first MACsec capable device.