Method and system for packet encryption
View Patent ↗A data processor and a method for processing data is disclosed. The processor has an input port for receiving packets of data to be processed. A master controller acts to analyse the packets and to provide a header including a list processes to perform on the packet of data and am ordering thereof. The master controller is programmed with process related data relating to the overall processing function of the processor. The header is appended to the packet of data. The packet with the appended header information is stored within a buffer. A buffer controller acts to determine for each packet stored within the buffer based on the header within the packet a next processor to process the packet. The controller then provides the packet to the determined processor for processing. The processed packet is returned with some indication that the processing is done. For example, the process may be deleted from the list of processes. The buffer controller repeatedly makes a determination of a next process until there is not next process for a packet at which time it is provided to an output port.
1. A data encryption system comprising:
a control process which modifies a received packet to include control data which includes a list of processes to be performed on the packet;
a plurality of processors which perform the processes identified by the control data, including an encryption process;
an interconnection including a buffer controller which responds to control data in the packet to determine a processor of the plurality of processors dedicated for processing a process in the list of processes and forwards the packet with control data to the determined processor; and
an output from which the processed packet is forwarded without the control data upon completion of the processes in the list of processes.
2. The system as claimed in claim 1 wherein the interconnection comprises a packet buffer.
3. The system as claimed in claim 1 wherein the buffer controller includes a resource manager which maintains information on resource processor availability.
4. The system as claimed in claim 1 wherein the control data includes code to be processed in at least one of the processors.
5. The system as claimed in claim 1 wherein the control data further includes an encryption or authentication key.
6. The system as claimed in claim 1 wherein individual processors add result data to the control data.
7. The system as claimed in claim 1 wherein the processors perform IPSEC protocol processing.
8. The system as claimed in claim 1 wherein respective processors perform IP header manipulation and encryption.
9. The system as claimed in claim 8 wherein a processor performs authentication processing.
10. A method of encrypting or decrypting data packets comprising:
modifying a received packet to include control data which includes a list of processes to be performed on the packet;
forwarding the packet from processor to processor through an interconnection including a buffer controller which responds to control data in the packets to determine a processor of the plurality of processors dedicated for processing a process in the list of processes; and
in successive processors, performing the processes identified by the control data, including an encryption or decryption process.
11. The method as claimed in claim 10 wherein the interconnection comprises a packet buffer.
12. The method as claimed in claim 10 wherein the buffer controller includes a resource manager which maintains information on resource processor availability.
13. The method as claimed in claim 10 wherein the control data includes code to be processed in at least one of the processors.
14. The method as claimed in claim 10 wherein the control data further includes an encryption or authentication key.
15. The method as claimed in claim 10 wherein individual processors add result data to the control data.
16. The method as claimed in claim 10 wherein the processors perform IPSEC protocol processing.
17. The method as claimed in claim 10 wherein respective processors perform IP header manipulation and encryption.
18. The method as claimed in claim 17 wherein a processor performs authentication processing.
19. The data encryption system of claim 1 wherein the control process is executed by a master processor.
20. The data encryption system of claim 1 wherein the packet processed by the determined processor is forwarded to the buffer controller.