Reverting from a new security association to a previous security association in response to an error during a rekey operation

US11245521B2 · kind B2 · utility

Assignee

• International Business Machines Corporation · US

Inventors

• Roger G. Hathorn · Tucson, US
• Patricia G. Driever · Poughkeepsie, US
• Christopher J. Colonna · Ossining, US
• Mooheng Zee · Fishkill, US
• John R. Flanagan · Poughkeepsie, US
• Alol Antony Crasta · Bengaluru, IN
• Mikel W. Welsh · Tucson, US

Key dates

• Filing date: Sep 25, 2019
• Grant date: Feb 8, 2022
• Expiry date: Dec 7, 2039

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F2221/2129
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

Provided are a computer program product, system, and method embodiments for reverting from a new security association to a previous security association in response to an error during a rekey operation. An initiator maintains a first security association with the responder having a first key to use to encrypt and decrypt data transmitted with the responder. The initiator initiates a rekey operation to establish a second security association with the responder using a second key. The initiator detects a failure of the rekey operation after the responder started using the second key for transmissions. A revert message is sent to the responder to revert back to using the first security association and first key in response to detecting the failure of the rekey operation.