| |
| | A security architecture for the Internet Protocol |
 | | The term "master key" is used to denote keys with a longer life period than a session key (say, a range of hours), and then they may allow for more time-consuming procedures for their generation and sharing. |
 | | Thus, our approach to key management is hierarchical--namely, session keys are derived from the shared master keys and, in turn, the master keys are derived using any of the well-established key exchange methods: public key exchange, key distribution centers (e.g., Kerberos [13]), and manual key installation. |
 | | The master key is actually a pair of keys: one key is used to authenticate the messages from the session key protocol, and the other is used as an input to the pseudorandom function in order to derive session keys (see Figure 3). |
| www.research.ibm.com /journal/sj/371/cheng.html (8172 words) |
|