METHODS AND SYSTEMS OF A PACKET ORCHESTRATION TO PROVIDE DATA ENCRYPTION AT THE IP LAYER, UTILIZING A DATA LINK LAYER ENCRYPTION SCHEME

摘要

In one aspect, A method for packet orchestration to provide data encryption at the Internet protocol (IP) layer, includes the step of providing a quantum secure pre-shared key derivation scheme for a data link layer bulk encryption algorithm, meaning the ability to setup a separate communication channel, via the SSH protocol, and leverage ECDH over said channel to share pre-shared keys. The method includes the step of providing a set of software-based network bridges. The method includes the step of assigning a set of network ports to specific bridges, wherein the set of network ports implement segmentation and isolation based on an organizational policy.