Abstract: System and methods for providing an intelligent overlay for providing dynamic control policies, keys and management of same for a data and/or communications network without requiring any change in the network hardware or architecture.

Abstract: System and methods for providing an intelligent overlay for providing dynamic control policies, keys and management of same for secure communication of information, data and/or communication over a network without requiring any change in the network hardware or infrastructure and requiring a minimum number of policies and SAs to create a full mesh, wherein the number of policies is less than N(N?1) and number of SAs is less than 2N(N?1), where N is the number of end points on the network.

Abstract: A technique for securing message traffic in a data network using various methods for distributing security policies and keys, where policy definition is determined in a Management and Policy (MAP) functional layer that is responsible for policy distribution; a separate Key Authority Point (KAP) that is responsible for key generation, key distribution, and policy distribution; and a separate Policy Enforcement Point (PEP) which is responsible for enforcing the policies and applying the keys.