Method of and apparatus for data transmission
View Patent ↗A method and apparatus for data transmission between a sending node and a receiving node is provided. The sending node has a transmission executor for sending a decrypted message as a plurality of packets. When the encrypted message includes a message authentication code (MAC), the sending node sets an indicator in the packet that the result of MAC authentication will be sent later. The packet is sent from the sending node to the receiving node in a pipeline mode. The receiving node has buffer, and a preprocessor for preprocessing the payload of the packet. If the operation requested or the preprocessing required by the payload does not require MAC authentication, the requested operation/preprocessing will be executed. Otherwise, the receiving node defers the execution until the corresponding positive notification of MAC authentication is received from the sending node. Handling of negative MAC authentication is policy based at the receiving node.
1. A method of providing a data transmission between a sending node and a receiving node via a third node in a network, the method comprising the steps of:
(1) providing an encrypted message including a message authentication;
(2) fragmenting the encrypted massage into a plurality of sections;
(3) forming a plurality of packets for transporting the plurality of the sections, each of the plurality of packets including a flag indicating a presence of the message authentication;
(4) establishing the data transmission of the plurality of packets between the sending node and the receiving node;
(5) decrypting a member of the plurality of sections at the third node;
(6) authenticating the member at the third node;
(7) sending an explicit notification to the receiving node; and
(8) forwarding the decrypted and authenticated member of the plurality of sections to the receiving node.
2. The method according to claim 1 further comprising the step of executing a transaction requiring the message authentication upon receiving the explicit notification, at the receiving node.
3. The method according to claim 1 wherein the plurality of packets is sent from the sending node to the receiving node in a pipeline mode.
4. The method according to claim 3 further comprising the step of preprocessing the section in the packet.
5. The method according to claim 4 further comprising the step of buffering the packet of the preprocessing step.
6. The method according to claIm 5 further comprising the step of reordering the buffered packets to assemble the encrypted message.
7. The method according to claim 1 further comprising the step of waiting for the explicit notification when required by a policy of the receiving node.
8. The method according to claim 1 wherein the message authentication is a message authentication code (MAC).
9. The method according to claim 1 wherein the sending node is a client.
10. The method according to claim 1 wherein the receiving node is a server.
11. The method according to claim 1 wherein the third node is a switch.
12. The method according to claim 1 wherein the packets are TCP/IP packets.
13. A system for data transmission between a sending node to a receiving node via a third node in a network, the system comprising:
a circuit for providing an encrypted message including a message authentication;
a divider for fragmenting the encrypted message into a plurality of sections;
a transmitter for forming a plurality of packets for transporting the plurality of the sections,
each of the plurality of packets including a flag indicating a presence of the message authentication;
means for establishing the data transmission of the plurality of packets between the sending node and the receiving node;
a descriptor for decrypting a member of the plurality of sections;
an authenticator for authenticating the member at the third node;
a sender for sending an explicit notification to the receiving node; and
a forwarder for forwarding the decrypted and authenticated member of the plurality of sections to the receiving node.
14. A computer product comprising:
a memory having microcontroller-readable code embedded therein for providing a data transmission between a sending node and a receiving node via a third node in a network, said code comprising:
code means for providing en encrypted message including a message authentication;
code means for fragmenting the encrypted message into a plurality of sections;
code means for forming a plurality of packets for transporting the plurality of the section,
each of the plurality of packets including a flag indicating a presence of the message authentication;
code means for establishing the data transmission of the plurality of packets between the sending node and the receiving node;
code means for decrypting a member of the plurality of sections at the third node;
code means for authenticating the member at the third node; code means for sending an explicit notification to the receiving node: and
code means for forwarding the decrypted and authenticated member of the plurality of sections to the receiving node.
15. The system according to claim 13 wherein the plurality of packets is sent from the sending node to the receiving node in a pipeline mode.
16. The system according to claim 13 wherein the message authentication is a message authentication code (MAC).
17. The system according to claim 13 wherein the sending node is a client.
18. The system according to claim 13 wherein the receiving node is a server.
19. The system according to claim 13 wherein the third node is a switch.
20. The system according to claim 13 wherein the packets are TCP/IP packets.