A method and
system for
authentication of a plurality of sites in a land
mobile radio (LMR)
system and for
encryption of messages exchanged by the sites. The plurality of sites are connected by a data network (e.g., IP network). The method includes transmitting by a first site its
certificate. The
certificate is created by a
trusted authority by applying a selected function to the public key, the ID and other
relevant information of the first site with the
trusted authority's private key to generate a reduced representation and then encrypting the reduced representation with the
trusted authority's private key. The method further includes receiving, by the other sites in the LMR
system, the
certificate transmitted by the first site. The method further includes decrypting, by the other sites, the certificate transmitted by the first site and authenticating the first site, wherein the certificate is decrypted using the trusted authority's public key. The method further includes generating a
session key, encrypting the
session key with the public key of the first site, and transmitting the encrypted
session key to the first site. The method further includes decrypting, by the first site, the encrypted session key with the first site's private key, and transmitting, by the first site, a message encrypted with the shared session key. The method further includes multicasting the encrypted message over the data network. The method further includes receiving, by the other sites in the LMR system, the encrypted message transmitted by the first site, and decrypting the message with the session key.