System and method for encrypting traffic on a network

Abstract

According to embodiments of the present invention a system and method for encrypting traffic on a network is disclosed. Encrypted data is transmitted between a first network element and a second network element by: acquiring an encryption seed at the first network element, the encryption seed being substantially similar to a decryption seed at the second network element; generating at least one encryption key from the encryption seed; receiving data; encrypting the data using the encryption key to generate encrypted data; transmitting the encrypted data from the first network element to the second network element via a network; and updating the encryption seed at the first network element in response to an event trigger

1 . A method for transmitting encrypted data between a first network element and a second network element, the method comprising:
 acquiring an encryption seed at said first network element, said encryption seed being substantially similar to a decryption seed at the second network element;   generating at least one encryption key from said encryption seed;   receiving data;   encrypting said data using said encryption key to generate encrypted data;   transmitting said encrypted data from said first network element to said second network element via a network;   updating said encryption seed at said first network element in response to an event trigger.   
   
   
       2 . The method of  claim 1  wherein the event trigger comprises a first event trigger, wherein the method further comprises updating said encryption seed in response to a second event trigger. 
   
   
       3 . The method of  claim 2  wherein a period between said first and second event triggers is less than the period required to derive one of said encryption seed and said at least one encryption key from said encrypted data. 
   
   
       4 . The method of  claim 1  wherein said event trigger is the receipt of an updated encryption seed. 
   
   
       5 . A method for transmitting encrypted data between a first network element and a second network element, the method comprising:
 acquiring an encryption seed at said first network element, said encryption seed being substantially similar to a decryption seed at the second network element;   generating at least one encryption key from said encryption seed;   receiving data;   encrypting said data using said encryption key to generate encrypted data;   transmitting said encrypted data from said first network element to said second network element via a network;   updating said encryption seed at said first network element in response to an event trigger;   wherein the acquiring an encryption seed at the first network element, and the updating said encryption seed at the first network element in response to an event trigger occurs during a single data session.   
   
   
       6 . The method of  claim 5  wherein updating said encryption seed at said first network element in response to an event trigger comprises acquiring an updated encryption seed. 
   
   
       7 . A system for encrypting data for transmission from a computing apparatus to a destination network element via a network, comprising:
 an encryption seed generation apparatus enabled to:
 generate an encryption seed, said encryption seed being substantially similar to a decryption seed at the destination network element; 
 transmit said encryption seed to said computing apparatus; 
 generate an updated encryption seed and transmit said updated encryption seed to said computing apparatus,; 
   a computing apparatus coupled to said network and said encryption seed generation apparatus, said computing apparatus enabled to:
 receive an encryption seed; 
 generate at least one encryption key from said encryption seed; 
 receive data; 
 encrypt said data using said encryption key to generate encrypted data; 
 transmit said encrypted data from said computing apparatus to said destination network element via a network; 
 update said encryption seed with said updated encryption seed in response to an event trigger; 
   wherein a period between the receipt of said encryption seed and the updating said encryption seed is less than the period required to derive one of said encryption seed and said at least one encryption key from said encrypted data.   
   
   
       8 . The system of  claim 7  wherein said event trigger is the receipt of an updated encryption seed. 
   
   
       9 . The system of  claim 7  wherein said event trigger is the receipt of a defined quantity of said data. 
   
   
       10 . The system of  claim 7  wherein said event trigger is the receipt of a signal from a synchronization entity, said entity coupled to said network and said computing apparatus. 
   
   
       11 . The system of  claim 7  wherein the event trigger comprises a first event trigger, wherein the system further comprises updating said encryption seed in response to a second event trigger. 
   
   
       12 . The system of  claim 7  wherein said event trigger is the receipt of an updated encryption seed.