公开(公告)号：US20240223364A1

公开(公告)日：2024-07-04

申请号：US18392496

申请日：2023-12-21

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Sandeep Kampati ,  De Sheng ,  Dharmanandana Reddy Pothula ,  Bharath Soma Satya Meduri

IPC: H04L9/08 ,  H04L9/40

CPC classification number: H04L9/0891 ,  H04L63/029 ,  H04L63/164

Abstract: In the IKE or IPSec SA rekeying, whether the rekey exchange includes the cryptographic suite in the payload depends on whether the cryptographic suite used in the old SA is changed on both ends, e.g., the initiator and the responder. If the cryptographic suite is not changed, then the rekey exchange does not include the cryptographic suite. Additionally, in the IPSec SA rekey, if the flowing information is not changed in either end, the rekey exchange further does not include the Traffic Selector (TS). As such, the size of the payload is decreased, which saves bandwidth, processing time, and power in the course of the IKE SA or the IPSec SA rekey.

公开(公告)号：US20210273799A1

公开(公告)日：2021-09-02

申请号：US17321494

申请日：2021-05-16

Applicant: HUAWEI TECHNOLOGIES CO.,LTD.

Inventor： Sandeep Kampati ,  De Sheng ,  Dharmanandana Reddy Pothula ,  Bharath Soma Satya Meduri

IPC: H04L9/08 ,  H04L29/06

Abstract: In the IKE or IPSec SA rekeying, whether the rekey exchange includes the cryptographic suite in the payload depends on whether the cryptographic suite used in the old SA is changed on both ends, e.g., the initiator and the responder. If the cryptographic suite is not changed, then the rekey exchange does not include the cryptographic suite. Additionally, in the IPSec SA rekey, if the flowing information is not changed in either end, the rekey exchange further does not include the Traffic Selector (TS). As such, the size of the payload is decreased, which saves bandwidth, more processing time and power in the course of the IKE SA or the IPSec SA rekey.

公开(公告)号：US11943209B2

公开(公告)日：2024-03-26

申请号：US17321499

申请日：2021-05-17

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Sandeep Kampati ,  Bharath Soma Satya Meduri ,  Dharmanandana Reddy Pothula ,  De Sheng

IPC: H04L9/40

CPC classification number: H04L63/061 ,  H04L63/0245 ,  H04L63/029 ,  H04L63/0435

Abstract: In the IKE or IPSec SA rekeying, whether the rekey exchange includes the cryptographic suite in the payload depends on whether the cryptographic suite used in the old SA is changed on both ends, e.g., the initiator and the responder. If the cryptographic suite is not changed, then the rekey exchange does not include the cryptographic suite. Additionally, in the IPSec SA rekey, if the flowing information is not changed in either end, the rekey exchange further does not include the Traffic Selector (TS). As such, the size of the payload is decreased, which saves bandwidth, more processing time and power in the course of the IKE SA or the IPSec SA rekey.

公开(公告)号：US20210273928A1

公开(公告)日：2021-09-02

申请号：US17321499

申请日：2021-05-17

Applicant: HUAWEI TECHNOLOGIES CO.,LTD.

Inventor： Sandeep Kampati ,  Bharath Soma Satya Meduri ,  Dharmanandana Reddy Pothula ,  De Sheng

IPC: H04L29/06

Abstract: In the IKE or IPSec SA rekeying, whether the rekey exchange includes the cryptographic suite in the payload depends on whether the cryptographic suite used in the old SA is changed on both ends, e.g., the initiator and the responder. If the cryptographic suite is not changed, then the rekey exchange does not include the cryptographic suite. Additionally, in the IPSec SA rekey, if the flowing information is not changed in either end, the rekey exchange further does not include the Traffic Selector (TS). As such, the size of the payload is decreased, which saves bandwidth, more processing time and power in the course of the IKE SA or the IPSec SA rekey.

公开(公告)号：US11888982B2

公开(公告)日：2024-01-30

申请号：US17321494

申请日：2021-05-16

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Sandeep Kampati ,  De Sheng ,  Dharmanandana Reddy Pothula ,  Bharath Soma Satya Meduri

IPC: H04L29/06 ,  H04L9/08 ,  H04L9/40

CPC classification number: H04L9/0891 ,  H04L63/029 ,  H04L63/164

Abstract: In the IKE or IPSec SA rekeying, whether the rekey exchange includes the cryptographic suite in the payload depends on whether the cryptographic suite used in the old SA is changed on both ends, e.g., the initiator and the responder. If the cryptographic suite is not changed, then the rekey exchange does not include the cryptographic suite. Additionally, in the IPSec SA rekey, if the flowing information is not changed in either end, the rekey exchange further does not include the Traffic Selector (TS). As such, the size of the payload is decreased, which saves bandwidth, more processing time and power in the course of the IKE SA or the IPSec SA rekey.

公开(公告)号：US20220263811A1

公开(公告)日：2022-08-18

申请号：US17716470

申请日：2022-04-08

Applicant: Huawei Technologies Co., Ltd.

Inventor： Sandeep Kampati ,  Lohit S ,  Shubham Mamodiya ,  Bharath Soma Satya Meduri ,  Vishnu Vardhan Bachu V N ,  Dharmanandana Reddy Pothula ,  Karthigaasri R T

IPC: H04L9/40

Abstract: A method for Internet Key Exchange (IKE) re-authentication optimization includes sending, by a first network device and a second network device, a notification, which contains new Security Parameters Index (SPI) for new security association (SA), and sending, by the first network device alone, an OLD_SPI notification to map SPI of Internet Protocol Security (IPsec) (Authentication Header (AH)/Encapsulating Security Payload (ESP)) with the old IPSec SA.