EP2194671A2 - Efficient key derivation for end-to-end network security with traffic visibility