IEEE 1394 link layer chip with “5C” authentication and key exchange accelerator
View Patent ↗Authentication and key exchange functions, such as those conforming to the Digital Transmission Licensing Authority's (DTLA) Digital Transmission Content Protection (5C) Specification, are incorporated into a link-layer access device of a conventional processing system. Because of the suitability of IEEE 1394 for transferring audio/video information, these functions are preferably embodied in an IEEE 1394 compatible link-layer access device. The link-layer access device of this invention is configured to support, for example, the elliptic curve multiplication functions of a Diffie-Hellman key exchange process, as well as digital signature generation and digital signature verification. By incorporating the authentication and key exchange functions into a link-layer access device, the system architecture and devices that are commonly used in conventional processing systems can be used, thereby providing an incremental path toward increased protection of copyright material. In a preferred embodiment, the conventional link-layer controller is configured to implement the authentication and key exchange processes, via calls to the link-layer access device to perform the complex mathematical operations, thereby eliminating the need for each application-layer program or device to implement these processes.
1. An integrated circuit command comprising:
a link layer access device responsive to a controller performing communications between an application device and another device across a communications bus in accordance with a communication protocol; and
a cryptographic accelerator responsive to said controller for performing one or more cryptographic functions other than encryption and decryption.
2. The integrated circuit of claim 1 , wherein the one or more cryptographic functions include at least one of:
calculation of a digital signature,
verification of a digital signature, and
calculation of a cryptographic key item.
3. The integrated circuit of claim 1 , wherein
the link-layer access device includes a multiplication device that is configured to derive a second point on an elliptic curve from a first point on the elliptic curve, based on one or more of the parameters from the controller.
4. The integrated circuit of claim 1 , wherein
the controller is configured to effect an exchanger cryptographic key with an other processing system, and
the one or more cryptographic functions includes calculation of the cryptographic key.
5. The integrated circuit of claim 1 , wherein
commands from the controller include: a basepoint multiply command, a point multiply command, an EC-DSA verify command, and an EC-DSA sign command.