| CPC H04L 9/0825 (2013.01) [H04L 9/085 (2013.01); H04L 9/088 (2013.01); H04L 61/10 (2013.01); H04L 61/2503 (2013.01)] | 21 Claims |
|
1. A computer-implemented method of implementing end-to-end network public key encryption, comprising:
processing a network packet directed to a destination host by:
determining whether there is a known cryptographic public key associated with the destination host, wherein the cryptographic public key is accessed when known;
when no cryptographic public key is known, determining whether the network packet is a first network packet sent to the destination host;
when it is determined that the network packet is the first network packet, querying a key server requesting access to a cryptographic public key for the destination host using a unique identifier determined based on an IP address of the destination host, wherein the unique identifier is a cryptographic hash based on the IP address of the destination host, wherein the cryptographic public key is accessed when available at the key server;
when it is determined that the network packet is not the first network packet, placing the network packet in an internal queue associated with the destination host until a cryptographic public key associated with the destination host is available; and
processing the network packet using the cryptographic public key associated with the destination host prior to transmitting the network packet upon the cryptographic public key associated with the destination host becoming known.
|