Method and system for secure processing of authentication key material in an ad hoc wireless network

1. A method for secure processing of authentication key material in an ad hoc wireless network, the method comprising:

deriving a pairwise transient key for key distribution using a mesh key holder security information element;

requesting a mesh authenticator pairwise master key using a first mesh encrypted key information element that includes data origin information; and

decrypting, using the pairwise transient key for key distribution, a second mesh encrypted key information element to obtain the mesh authenticator pairwise master key.

2. The method of claim 1 , further comprising:

completing a supplicant security exchange using the mesh authenticator pairwise master key.

3. The method of claim 1 , wherein the mesh key holder security information element includes a message integrity check value.

4. The method of claim 1 , wherein deriving the pairwise transient key for key distribution comprises processing a three message handshake with a mesh key distributor.

5. The method of claim 4 , wherein the three message handshake comprises a mesh key holder security association request message, a mesh key holder security association response message, and a mesh key holder security association confirm message.

6. The method of claim 1 , wherein deriving the pairwise transient key for key distribution comprises confirming that a mesh key distributor has correctly derived the pairwise transient key for key distribution.

7. The method of claim 1 , wherein the pairwise transient key for key distribution comprises both a key encrypting key and a key confirmation key.

8. The method of claim 7 , wherein the data origin information is computed using the key confirmation key and the second mesh encrypted key information element is decrypted using the key encrypting key.

9. The method of claim 1 , wherein the pairwise transient key for key distribution is based on a master key generated during a mesh authenticator extensible authentication protocol authentication process.

10. The method of claim 1 , wherein the mesh key holder security information element comprises an information count value that indicates a number of information elements protected by a message integrity check value.

11. The method of claim 1 , wherein the mesh encrypted key information element comprises a replay counter.

12. The method of claim 1 , wherein the data origin information comprises a message integrity check value.

13. The method of claim 1 , wherein the second mesh encrypted key information element comprises encrypted contents, including the mesh authenticator pairwise master key, which are encrypted using an advanced encryption standard key wrap.

14. A system for secure processing of authentication key material in an ad hoc wireless network, the system comprising:

a mesh authenticator operating to derive a pairwise transient key for key distribution using a mesh key holder security information element;

the mesh authenticator operating to request a mesh authenticator pairwise master key using a first mesh encrypted key information element that includes data origin information; and

the mesh authenticator operating to decrypt, using the pairwise transient key for key distribution, a second mesh encrypted key information element to obtain the mesh authenticator pairwise master key.

15. The system of claim 14 , further comprising:

the mesh authenticator operating to complete a supplicant security exchange using the mesh authenticator pairwise master key.

16. The system of claim 14 , wherein the mesh key holder security information element includes a message integrity check value.

17. The system of claim 14 , wherein deriving the pairwise transient key for key distribution comprises processing a three message handshake with a mesh key distributor.

18. The system of claim 17 , wherein the three message handshake comprises a mesh key holder security association request message, a mesh key holder security association response message, and a mesh key holder security association confirm message.

19. The system of claim 14 , wherein deriving the pairwise transient key for key distribution comprises confirming that a mesh key distributor has correctly derived the pairwise transient key for key distribution.

20. The system of claim 14 , wherein the pairwise transient key for key distribution comprises both a key encrypting key and a key confirmation key.

21. The system of claim 20 , wherein the data origin information is computed using the key confirmation key and the second mesh encrypted key information element is decrypted using the key encrypting key.

22. The system of claim 14 , wherein the pairwise transient key for key distribution is based on a master key generated during a mesh authenticator extensible authentication protocol authentication process.

23. The system of claim 14 , wherein the mesh key holder security information element comprises an information count value that indicates a number of information elements protected by a message integrity check value.

24. The system of claim 14 , wherein the mesh encrypted key information element comprises a replay counter.

25. The system of claim 14 , wherein the data origin information comprises a message integrity check value.

26. The system of claim 14 , wherein the second mesh encrypted key information element comprises encrypted contents, including the mesh authenticator pairwise master key, which are encrypted using an advanced encryption standard key wrap.