UPSTREAM APPROACH FOR SECURE CRYPTOGRAPHY KEY DISTRIBUTION AND MANAGEMENT FOR MULTI-SITE DATA CENTERS

A Software-Defined Networking (SDN)-based 'upstream' approach is a controller-based solution that provides secure key distribution and management for multi-site data centers. The approach uses an SDN Multi-Site Controller (MSC) that acts as an intermediary between SDN controllers at sites in a multi-site data center and manages the distribution of keys to sites. The approach is not dependent upon any particular routing protocol, such as the Border Gateway Protocol (BGP), and is well suited for multicast stream encryption by allowing the same key to be used for all replicated packets sent to downstream sites from an upstream source site. The approach distributes keys in a secure manner, ensures that data transferred between sites is done in a secure manner, and supports re-keying with error handling. 一种基于软件定义联网(SDN)的"上游"方案是一种基于控制器的解决方案，其为多站点数据中心提供了安全密钥分发和管理。该方案使用SDN多站点控制器(MSC)，该SDN MSC充当多站点数据中心中的站点处的SDN控制器之间的中介并且管理密钥到站点的分发。该方案不取决于任何特定的路由协议，例如边界网关协议(BGP)，并且很适合于多播流加密，这是通过允许同一密钥被用于从一上游源站点发送到下游站点的所有复制封包来实现的。该方案以安全