Method and system for securing data communicated in a network
According to a first aspect of the present disclosure, a method is conceived for securing data communicated in a network, the method comprising: receiving, by a destination node in the network, at least one message transmitted by a source node in the network; generating, by said destination node, a session key by executing a one-way function that takes at least a part of a last received message and an initial key as input parameters; using, by said destination node, the session key for encrypting or decrypting said data. Furthermore, according to a second aspect of the present disclosure, a corresponding computer program product is conceived. Furthermore, according to a third aspect of the present disclosure, a corresponding system is conceived.
1. A method for securing data communicated in a network, comprising:
receiving, by a destination node in the network, at least one message transmitted by a source node in the network;
generating, by said destination node, a session key by executing a one-way function that takes at least a part of a last received message and an initial key as input parameters;
using, by said destination node, the session key for block encrypting or block decrypting said data.
2. A method as claimed in claim 1 , wherein said part of the last received message is a message authentication code.
3. A method as claimed in claim 1 , wherein the one-way function is an encryption function.
4. A method as claimed in claim 1 , wherein the session key is also generated by the source node, and wherein the session key is used, by the source node and the destination node, to encrypt and decrypt data communicated between them.
5. A method as claimed in claim 1 , wherein the source node is a network gateway.
6. A method as claimed in claim 1 wherein the initial key is a secret master key.
7. A method as claimed in claim 1 wherein the data are encrypted or decrypted by executing said one-way function.
8. A method as claimed 1 in claim 1 , wherein generating the session key comprises performing a key extraction process after executing the one-way function.
9. A method as claimed in claim 1 , further comprising:
generating, by the destination node, a new session key by executing the one-way function, wherein the one-way function takes said part of the last received message and the session key as input parameters;
using, by the destination node, the new session key for encrypting or decrypting said data.
10. A method as claimed in claim 9 , wherein the new session key is also generated by the source node, and wherein the new session key is used, by the source node and the destination node, to encrypt and decrypt data communicated between them.
11. A computer program product comprising non-transient executable instructions being executed by a processing unit, causing said processing unit to carry out or control the steps of the method as claimed in claim 1 .
12. A system for securing data communicated in a network, comprising:
a destination node in the network, said destination node being arranged to receive messages from a source node in the network;
said destination node further being arranged to generate a session key by executing a one-way function that takes at least a part of a last received message and an initial key as input parameters;
said destination node further being arranged to use the session key for block encrypting or block decrypting said data.
13. A system as claimed in claim 12 , wherein the source node is also arranged to generate the session key, and wherein the source node and the destination node are arranged to encrypt and decrypt data communicated between them using the session key.
14. A system as claimed in claim 12 , wherein:
the destination node is further arranged to generate a new session key by executing the one-way function, wherein the one-way function takes said part of the last received message and the session key as input parameters;
the destination node is further arranged to use the new session key for encrypting or decrypting said data.
15. A system as claimed in claim 14 , wherein the source node is also arranged to generate the new session key, and wherein the source node and the destination node are arranged to encrypt and decrypt data communicated between them using the new session key.
16. The device of claim 12 ,
wherein the destination node device is configured to generate the session key by performing a key extraction process after executing the one-way function.