公开(公告)号：US10904368B2

公开(公告)日：2021-01-26

申请号：US16420959

申请日：2019-05-23

Applicant: Huawei Technologies Co., Ltd.

Inventor： Dharmanandana Reddy Pothula ,  Chandra Mohan Padamati ,  Antony Paul ,  Yun Qin ,  De Sheng

IPC: H04L29/08 ,  H04L9/08 ,  H04L29/06 ,  H04W84/12 ,  H04W12/04

Abstract: Disclosed are a system, method and devices for simultaneous MACsec key agreement (MKA) negotiation between the devices. The present application controls a basic TLV message exchange between supplicant and authenticator in case of race condition to establish the secure association key (SAK) channel. The present application by controlling a basic TLV message exchange enables to establish a secure channel in race condition and achieves a high reliability of the product as this makes product launch MACsec services quickly and available for the service. Accordingly, when both sides (two supplicants) exchange hello with basic TLV at the same time, triggering the race condition, drops first message from the authenticator at supplicant and update the peer MN and the supplicant will not send reply. The authenticator when send next message (basic+potential peer TLV) with peer MN incremented by 1, the supplicant will respond with incremental message with live peer TLV.

公开(公告)号：US20210105348A1

公开(公告)日：2021-04-08

申请号：US17123631

申请日：2020-12-16

Applicant: Huawei Technologies Co., Ltd.

Inventor： Dharmanandana Reddy Pothula ,  Chandra Mohan Padamati ,  Antony Paul ,  Yun Qin ,  De Sheng

IPC: H04L29/08 ,  H04L9/08 ,  H04L29/06 ,  H04W84/12 ,  H04W12/04

Abstract: Disclosed are a system, method and devices for simultaneous MACsec key agreement (MKA) negotiation between the devices. The present application controls a basic TLV message exchange between supplicant and authenticator in case of race condition to establish the secure association key (SAK) channel. The present application by controlling a basic TLV message exchange enables to establish a secure channel in race condition and achieves a high reliability of the product as this makes product launch MACsec services quickly and available for the service. Accordingly, when both sides (two supplicants) exchange hello with basic TLV at the same time, triggering the race condition, drops first message from the authenticator at supplicant and update the peer MN and the supplicant will not send reply. The authenticator when send next message (basic+potential peer TLV) with peer MN incremented by 1, the supplicant will respond with incremental message with live peer TLV.