KEYSET ID ASSIGNMENT WHICH SUPPORTS INDEPENDENT CRYPTO-GROUP CHANGEOVERS
Original Publication Date: 1999-Jan-01
Included in the Prior Art Database: 2002-Jul-30
A customer wants to manage the encryption keys for two or more secure voice/data communica- tion groups or Crypto-Groups in an Association of Public-safety Communication Officers, Project 25 (APCO-25) system. A system administrator would assign a set of encryption keys or keyset to each group. Each keyset is identified by a Keyset ID. Each group can have their set of keys updated by an over-the-air rekeying (OTAK) service in an APCO- 25 system. With only one set of keys, the OTAR service would interrupt voice communication amongst the group as the OTAK service updates the encryption keys of its members. To minimize the interruption of voice communication, each group can be assigned multiple keysets so a quick changeover of an entire Crypto-Group from an old set of keys to a new set of keys can be done quickly with a simple change active keyset command. The OTAR service can update the keys in the old keyset, without interrupting communications of the group, and prepare the group for the next changeover event.