Increased communication security

1. A method of increasing communication security, said method comprising:

receiving, at a first computer system, a first message including a first data portion and a second data portion, wherein said first data portion is associated with a security token, wherein said first data portion includes a first instance of a session key, and wherein said second data portion includes a second instance of said session key;

generating a second message including said first data portion;

communicating said second message from said first computer system for delivery to a second computer system;

receiving, at said first computer system, a third message from said second computer system; and

performing, using said second instance of said session key, message validation associated with said third message.

2. The method of claim 1 , wherein said first data portion includes said security token, and wherein said security token includes a unique identifier associated with said first computer system, a unique identifier associated with said second computer system, expiration data associated with said security token, and said first instance of said session key.

3. The method of claim 1 , wherein said receiving further comprises receiving said first message from a third computer system, and further comprising:

generating, at said first computer system, a fourth message associated with communication between said first computer system and said second computer system, wherein said fourth message includes a unique identifier associated with said second computer system; and

communicating said fourth message from said first computer system for delivery to said third computer system, and

wherein said receiving further comprises receiving said first message responsive to said communicating said fourth message.

4. The method of claim 1 further comprising:

decrypting, at said first computer system, said second data portion using a key associated with said first computer system; and

storing said second instance of said session key at said first computer system.

5. The method of claim 1 , wherein said first message includes authentication data, and further comprising:

performing, at said first computer system, message validation associated with said first message, wherein said performing message validation associated with said first message comprises performing message validation based on said authentication data, and

wherein said generating further comprises generating said second message if said first message is valid, and

wherein said communicating further comprises communicating said second message if said first message is valid.

6. The method of claim 1 further comprising:

generating authentication data using said second instance of said session key;

generating a fourth message including said authentication data; and

communicating said fourth message from said first computer system for delivery to said second computer system.

7. The method of claim 6 further comprising:

encrypting, using said second instance of said session key, data to generate encrypted data, wherein said data includes said authentication data, and

wherein said generating said fourth message further comprises including said encrypted data as a payload of said fourth message.

8. The method of claim 1 , wherein said third message includes authentication data,

wherein said performing message validation comprises performing message validation based on said authentication data, and further comprising:

if said third message is valid, performing at least one operation associated with said third message.

9. The method of claim 8 further comprising:

decrypting, using said second instance of said session key, a payload of said third message to access said authentication data, and

wherein said performing message validation further comprises performing message validation responsive to said decrypting.

10. The method of claim 1 , wherein said first message, said second message, and said third message are Constrained Application Protocol (CoAP) messages.

11. The method of claim 1 , wherein said receiving said first message comprises receiving said first message using Datagram Transport Layer Security (DTLS), wherein said communicating comprises communicating said second message using DTLS, and wherein said receiving said third message comprises receiving said third message using DTLS.

12. An apparatus comprising:

a communication interface configured to receive a first message including a first data portion and a second data portion, wherein said first data portion is associated with a security token, wherein said first data portion includes a first instance of a session key, and wherein said second data portion includes a second instance of said session key;

a message generation component configured to generate a second message including said first data portion; and

a security component, and

wherein said communication interface is further configured to communicate said second message, wherein said communication interface is further configured to receive a third message, and

wherein said security component is configured to perform, using said second instance of said session key, message validation associated with said third message.

13. The apparatus of claim 12 , wherein said first data portion includes said security token, and wherein said security token includes a unique identifier associated with a first computer system, a unique identifier associated with a second computer system, expiration data associated with said security token, and said first instance of said session key.

14. The apparatus of claim 12 , wherein said communication interface and said message generation component are part of a first computer system, and wherein said communication interface is further configured to communicate said second message from said first computer system for delivery to a second computer system.

15. The apparatus of claim 14 , wherein said communication interface is further configured to receive said first message from a third computer system, wherein said message generation component is further configured to generate a fourth message associated with communication between said first computer system and said second computer system, wherein said fourth message includes a unique identifier associated with said second computer system, wherein said communication interface is further configured to communicate said fourth message from said first computer system for delivery to said third computer system, and wherein said communication interface is further configured to receive said first message responsive to said communicating said fourth message.

16. The apparatus of claim 14 further comprising:

a security component configured to decrypt said second data portion using a key associated with said first computer system; and

a memory configured to store said second instance of said session key, and

wherein said security component and said memory are part of said first computer system.

17. The apparatus of claim 14 , wherein said first message includes authentication data,

wherein said security component is further configured to perform, based on said authentication data, message validation associated with said first message, wherein said security component is part of said first computer system,

wherein said message generation component is further configured to generate said second message if said first message is valid, and

wherein said communication interface is further configured to communicate said second message if said first message is valid.

18. The apparatus of claim 14 , wherein said security component is further configured to generate authentication data using said second instance of said session key, wherein said security component is part of said first computer system, and

wherein said message generation component is further configured to generate a fourth message including said authentication data, and

wherein said communication interface is further configured to communicate said fourth message from said first computer system for delivery to said second computer system.

19. The apparatus of claim 18 , wherein said security component is further configured to encrypt, using said second instance of said session key, data to generate encrypted data, wherein said data includes said authentication data, and wherein said message generation component is further configured to include said encrypted data as a payload of said fourth message.

20. The apparatus of claim 14 , wherein said communication interface is further configured to receive said third message from said second computer system, wherein said third message includes authentication data,

wherein said security component is further configured to perform said message validation based on said authentication data, and further comprising:

an operation component configured to perform, if said third message is valid, at least one operation associated with said third message, and

wherein said security component and said operation component are part of said first computer system.

21. The apparatus of claim 20 , wherein said security component is further configured to decrypt, using said second instance of said session key, a payload of said third message to access said authentication data, and wherein said security component is further configured to perform said message validation responsive to decryption of said payload.

22. The apparatus of claim 14 , wherein said first message, said second message, and said third message are Constrained Application Protocol (CoAP) messages.

23. The apparatus of claim 14 , wherein said communication interface is further configured to receive said first message using Datagram Transport Layer Security (DTLS), wherein said communication interface is further configured to communicate said second message using DTLS, and wherein said communication interface is further configured to receive said third message using DTLS.

24. An apparatus comprising:

means for receiving, at a first computer system, a first message including a first data portion and a second data portion, wherein said first data portion is associated with a security token, wherein said first data portion includes a first instance of a session key, and wherein said second data portion includes a second instance of said session key;

means for generating a second message including said first data portion;

means for communicating said second message from said first computer system for delivery to a second computer system;

means for receiving, at said first computer system, a third message from said second computer system; and

means for performing, using said second instance of said session key, message validation associated with said third message.

25. The apparatus of claim 24 , wherein said first data portion includes said security token, and wherein said security token includes a unique identifier associated with said first computer system, a unique identifier associated with said second computer system, expiration data associated with said security token, and said first instance of said session key.

26. The apparatus of claim 24 , wherein said means for receiving further comprises means for receiving said first message from a third computer system, and further comprising:

means for generating, at said first computer system, a fourth message associated with communication between said first computer system and said second computer system, wherein said fourth message includes a unique identifier associated with said second computer system; and

means for communicating said fourth message from said first computer system for delivery to said third computer system, and

wherein said means for receiving further comprises means for receiving said first message responsive to communication of said fourth message.

27. The apparatus of claim 24 further comprising:

means for decrypting, at said first computer system, said second data portion using a key associated with said first computer system; and

means for storing said second instance of said session key at said first computer system.

28. The apparatus of claim 24 , wherein said first message includes authentication data, and further comprising:

means for performing, at said first computer system, message validation associated with said first message, wherein said means for performing message validation associated with said first message comprises means for performing message validation based on said authentication data, and

wherein said means for generating further comprises means for generating said second message if said first message is valid, and

wherein said means for communicating further comprises means for communicating said second message if said first message is valid.

29. The apparatus of claim 24 further comprising:

means for generating authentication data using said second instance of said session key;

means for generating a fourth message including said authentication data; and

means for communicating said fourth message from said first computer system for delivery to said second computer system.

30. The apparatus of claim 29 further comprising:

means for encrypting, using said second instance of said session key, data to generate encrypted data, wherein said data includes said authentication data, and

wherein said means for generating said fourth message further comprises means for including said encrypted data as a payload of said fourth message.

31. The apparatus of claim 24 , wherein said third message includes authentication data,

wherein said means for performing message validation comprises means for performing message validation based on said authentication data, and further comprising:

means for performing, if said third message is valid, at least one operation associated with said third message.

32. The apparatus of claim 31 further comprising:

means for decrypting, using said second instance of said session key, a payload of said third message to access said authentication data, and

wherein said means for performing message validation further comprises means for performing message validation responsive to decryption of said payload.

33. The apparatus of claim 24 , wherein said first message, said second message, and said third message are Constrained Application Protocol (CoAP) messages.

34. The apparatus of claim 24 , wherein said means for receiving said first message comprises means for receiving said first message using Datagram Transport Layer Security (DTLS), wherein said means for communicating comprises means for communicating said second message using DTLS, and wherein said means for receiving said third message comprises means for receiving said third message using DTLS.