Method for establishing a security association between two or more computers communicating via an interconnected computer network
View Patent ↗A method for establishing a secure communication channel for information flow between two or more computers communicating via an interconnected computer network, and a system for implementing the method, in response to receiving a security association data structure from one of the computers. The received security association data structure is stored in a memory region having a specific memory address value, and the specific memory address value is assigned as the security parameter index value associated with the received inbound security association data structure. Additionally, a method of processing information received over a previously established secure communication channel, and a system for implementing the method, in response to receiving a data packet that includes an encrypted data portion, and a header portion that includes a security parameter index value. A memory region is located using the security parameter index value as an address pointer. The encrypted data portion of the received data packet is then processed based on a security association data structure stored in the located memory region.
1. A method of establishing a secure communication channel for information flow between two or more computers communicating via an interconnected computer network, comprising:
receiving a security association data structure from one or more computers via the interconnected computer network;
storing the received security association data structure in a memory region having a specific memory address value associated therewith; and
assigning the specific memory address value as a security parameter index value associated with the received security association data structure.
2. The method of claim 1 , further comprising:
transmitting the security parameter index value to the one or more computers from which the security association data structure was received.
3. The method of claim 1 , wherein the specific memory address value and the security parameter index value, are both 32 bit values.
4. The meted of claim 1 , wherein the received security association data structure is stored in a security association database that includes other security association data structures.
5. The method of claim 1 , wherein the received security association data structure comprises a network destination address value and a security protocol identifier.
6. A computer-readable medium containing computer executable code for instructing a computer to establish a secure communication channel for information flow between one or more other computers communicating via an interconnected computer network, the instructions comprising:
receiving a security association data structure from one or more computers via the interconnected computer network;
storing the received security association data structure in a memory region having a specific memory address value associated therewith; and
assigning the specific memory address value as a security parameter index value associated with the received security association data structure.