Rekey operation with multiplexing capability

1. A method of providing a protocol for rekeying between two stations, the method comprising:

providing a first set of messages for activating a new key and reserving an auxiliary storage area for the new key, the auxiliary storage area being a temporary location for the new key during a time interval when both an old key and the new key can be active; and

providing a second set of messages to obsolete the old key and switch to the new key.

2. The method of claim 1 , wherein the first set of messages includes a request from a rekey coordinator to a rekey participant to activate the new key and store the new key in the auxiliary storage area.

3. The method of claim 1 , wherein the first set of messages includes a response from a rekey participant to a rekey coordinator that indicates the rekey participant has activated the new key and has stored the new key in its auxiliary storage area.

4. The method of claim 1 , wherein the first set of messages is initiated by a rekey coordinator.

5. The method of claim 1 , wherein the first set of messages is initiated by a rekey participant.

6. The method of claim 1 , wherein the second set of messages includes a request from a rekey coordinator to a rekey participant to start using the new key for new packets.

7. The method of claim 6 , wherein the request from the rekey coordinator to the rekey participant in the second set of messages indicates that the rekey coordinator has no more packets to transmit using the old key.

8. The method of claim 7 , wherein the request from the rekey coordinator to the rekey participant in the second set of messages indicates that the rekey participant can use the old key for messages in its transmitting queue.

9. The method of claim 7 , wherein the request from the rekey coordinator to the rekey participant in the second set of messages indicates that the rekey participant can use the new key for messages received from the rekey coordinator.

10. The method of claim 9 , wherein the request from the rekey coordinator to the rekey participant in the second set of messages indicates that the rekey coordinator will use the new key for new packets.

11. The method of claim 10 , wherein the second set of messages includes a response from the rekey participant to the rekey coordinator that indicates the rekey participant has no more packets to transmit with the old key.

12. The method of claim 11 , wherein the response from the rekey participant to the rekey coordinator in the second set of messages indicates that the rekey participant will only use the new key for new packets.

13. The method of claim 12 , wherein the response from the rekey participant to the rekey coordinator in the second set of messages indicates that the rekey participant has updated its fixed storage area with the new key.

14. The method of claim 13 , wherein the second set of messages includes a confirmation from the rekey coordinator to the rekey participant that indicates the rekey coordinator has updated its fixed storage area with the new key and released its auxiliary storage area.

15. The method of claim 1 , wherein the protocol includes rekeying between multiple stations, and wherein the first set of messages is initiated by a rekey coordinator to a plurality of rekey participants.

16. A rekeying sequence for a controlling station, the rekeying sequence comprising:

determining that another station has activated a new key, stored the new key in a first auxiliary location in the other station, and will use the new key for new packets;

activating the new key and storing the new key in a second auxiliary location in the controlling station;

sending a first message to the other station indicating that the controlling station has sent its last packet using an old key and will use the new key for new packets;

determining that the other station has sent its last packet using the old key; and

updating a fixed location with the new key and releasing the second auxiliary location,

wherein the first and second auxiliary storage areas are temporary locations for the new key during a time interval when both the old key and the new key can be active.

17. The rekeying sequence of claim 16 , further including requesting the other station to activate the new key and to store the new key in the first auxiliary location.

18. The rekeying sequence of claim 16 , wherein if the other station has not yet activated the new key and stored the new key in the first auxiliary location, then entering a predetermined timeout.

19. The rekeying sequence of claim 17 , wherein if a retry count is less than a predetermined number of retries after the predetermined timeout, then repeating the requesting.

20. The rekeying sequence of claim 19 , wherein if the retry count is not less than the predetermined number of retries after the predetermined timeout, then terminating the rekeying sequence.

21. The rekeying sequence of claim 16 , wherein if the other station has not yet sent its last packet using the old key, then entering a predetermined timeout.

22. The rekeying sequence of claim 21 , wherein if a retry count is less than a predetermined number of retries after the predetermined timeout, then repeating sending the first message.

23. The rekeying sequence of claim 21 , wherein if the retry count is not less than the predetermined number of retries after the predetermined timeout, then terminating the rekeying sequence.

24. The rekeying sequence of claim 16 , further including sending a second message to the other station indicating that the controlling station has released the second auxiliary location.