IP Library › Granted Patent US 12712863
Granted Patent B2
US 12712863 · App. 18/809,586 · Granted Aug 18, 2026

System and method for adaptive format configuration in secure data transmission

Inventors: Stephen David Glaser (San Francisco, CA); Jonathon Evans (Santa Clara, CA); Vidhya Krishnan (Folsom, CA); Naveen Kumar Narrishetti (Bengaluru, IN); Peter Paneah (Nesher, IL); Vladimir Vainer (Kiryat Shmona, IL); Ariel Shahar (Jerusalem, IL); Ofir Even Chen (Kfar Saba, IL)
Assignee: NVIDIA Corporation
H04L63/0485H04L63/166
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12712863
App. No.
18/809,586
Granted
Aug 18, 2026
Kind
B2
Abstract

Systems, computer program products, and methods are described for secure data transmission. An example system includes a first end-point device, an intermediate device, and a second-end point device. The first end-point device determines the format requirements of the communication link between the first end-point device and the intermediate device, and the communication link intermediate device and the second end-point device. Based on the format requirements, the first end-point device configures the data packet for transmission, such that the data packet, when received at the intermediate device, is re-configured and routed to the second end-point device. When the second end-point device receives the data packet, it verifies the data packet to confirm that the packet has maintained its integrity throughout transit.

Claims (57)

1 . A system comprising:

a first end-point device comprising a circuitry configured to configure a data packet for transmission by:

initially configuring the data packet in a second transmission format associated with a second communication link, wherein the second transmission format is different from a first transmission format associated with a first communication link coupled to the first end-point device;

encrypting the data packet while the data packet is configured in the second transmission format to generate an encrypted data packet and an integrity signature specifically valid for the second transmission format;

converting the encrypted data packet from the second transmission format to the first transmission format; and

transmitting the encrypted data packet via the first communication link;

an intermediate device operatively coupled to the first end-point device via the first communication link, wherein the intermediate device comprises circuitry configured to:

receive the encrypted data packet in the first transmission format;

re-configure the encrypted data packet from the first transmission format to the second transmission format; and

transmit the re-configured encrypted data packet via the second communication link in the second transmission format; and

a second end-point device operatively coupled to the intermediate device via the second communication link, wherein the second end-point device is configured to:

receive the re-configured encrypted data packet in the second transmission format; and

process the re-configured encrypted data packet using the integrity signature generated by the first end-point device.

2 . The system of claim 1 , wherein the first end-point device is further configured to:

determine that the first communication link is configured to facilitate data transmission in the first transmission format and the second communication link is configured to facilitate data transmission in the second transmission format.

3 . The system of claim 2 , wherein the first transmission format is flit mode format, and the second transmission format is a non-flit mode format.

4 . The system of claim 2 , wherein the first end-point device is configured to encrypt the data packet while the data packet is configured in the second transmission format using an integrity and data encryption (IDE) mechanism.

5 . The system of claim 4 , wherein the first end-point device, in encrypting the data packet, is further configured to:

generate the integrity signature that includes a transmitted message authentication code (MAC) for the encrypted data packet based on at least packet components associated with the data packet and an encryption key associated with the IDE mechanism; and

embed the transmitted MAC within the encrypted data packet.

6 . The system of claim 5 , wherein the first end-point device, in converting the encrypted data packet, is further configured to:

convert the transmitted MAC embedded within the encrypted packet from the second transmission format to the first transmission format.

7 . The system of claim 5 , wherein the intermediate device, in re-configuring the data packet for transmission, is further configured to:

convert the encrypted data packet from the first transmission format to the second transmission format; and

transmit the encrypted data packet via the second communication link in the second transmission format.

8 . The system of claim 7 , wherein the intermediate device, in converting the encrypted packet, is further configured to:

convert the transmitted MAC embedded within the encrypted packet from the first transmission format to the second transmission format.

9 . The system of claim 7 , wherein the second end-point device is further configured to:

process the re-configured encrypted data packet using the integrity signature by generating a recomputed MAC for the received re-configured encrypted data packet based on at least the packet components associated with the data packet and the encryption key associated with the IDE mechanism;

determine whether the recomputed MAC matches the transmitted MAC embedded in the encrypted data packet; and

in an instance in which the recomputed MAC matches the transmitted MAC embedded in the encrypted data packet, acknowledge an integrity of the data packet.

10 . The system of claim 1 , wherein the first communication link and the second communication link are associated with high-speed interconnect technologies, and wherein the data packet is a transport layer packet (TLP).

11 . A method for configuring a data packet, the method comprising:

initially configuring, by a first end-point device, a data packet in a second transmission format associated with a second communication link, wherein the second transmission format is different from a first transmission format associated with a first communication link coupled to the first end-point device;

encrypting, by the first end-point device, the data packet while the data packet is configured in the second transmission format to generate an encrypted data packet and an integrity signature specifically valid for the second transmission format;

converting, by the first end-point device, the encrypted data packet from the second transmission format to the first transmission format; and

transmitting, by the first end-point device, the encrypted data packet via the first communication link in the first transmission format.

12 . The method of claim 11 , wherein the first transmission format is flit mode format, and the second transmission format is a non-flit mode format.

13 . The method of claim 11 , wherein

the data packet is encrypted using an integrity and data encryption (IDE) mechanism.

14 . The method of claim 13 , wherein encrypting the data packet further comprises:

generating, by the first end-point device, the integrity signature that comprises a transmitted message authentication code (MAC) for the encrypted data packet based on at least packet components associated with the data packet and an encryption key associated with the IDE mechanism; and

embedding, by the first end-point device, the transmitted MAC within the encrypted data packet.

15 . The method of claim 14 , wherein converting the encrypted data packet further comprises:

convert, by the first end-point device, the transmitted MAC embedded within the encrypted packet from the second transmission format to the first transmission format.

16 . A computer program product for configuring a data packet, the computer program product comprising a non-transitory computer-readable medium comprising instructions, when executed by a processor, cause a first end-point device to:

initially configure a data packet in a second transmission format associated with a second communication link, wherein the second transmission format is different from a first transmission format associated with a first communication link coupled to the first end-point device;

encrypt the data packet while the data packet is configured in the second transmission format to generate an encrypted data packet and an integrity signature specifically valid for the second transmission format;

convert the encrypted data packet from the second transmission format to the first transmission format; and

transmit the encrypted data packet via the first communication link in the first transmission format.

17 . The computer program product of claim 16 , wherein the first transmission format is flit mode format, and the second transmission format is a non-flit mode format.

18 . The computer program product of claim 16 , wherein the instructions to encrypt the data packet, when executed by a processor, cause the first end-point device to encrypt the data packet using an integrity and data encryption (IDE) mechanism.

19 . The computer program product of claim 18 , wherein the instructions to encrypt the data packet, when executed by a processor, cause the first end-point device to:

generate the integrity signature that comprises a transmitted message authentication code (MAC) for the encrypted data packet based on at least a packet components associated with the data packet and an encryption key associated with the IDE mechanism; and

embed the transmitted MAC within the encrypted data packet.

20 . The computer program product of claim 19 , wherein the instructions to convert the encrypted data packet, when executed by a processor, cause the first end-point device, device to:

convert the transmitted MAC embedded within the encrypted packet from the second transmission format to the first transmission format.