IP Library Granted Patent US 8,392,968
Granted Patent B2
US 8,392,968 · App. 13/069,221 · Granted Mar 5, 2013

Stateless cryptographic protocol-based hardware acceleration

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,392,968
App. No.
13/069,221
Granted
Mar 5, 2013
Kind
B2
Abstract

According to one embodiment of the invention, a method comprises an operation of commencing a first phrase and transfer processing of an authentication handshaking protocol. The first state is commenced for establishing a secure communication path by a first processor within a first network device. The first phrase comprises an exchange of data during a networking protocol. The transfer of processing for the networking protocol by the first processor to a second processor is conducted to complete the networking protocol.

Claims (30)

1. A method comprising:

commencing a first state in establishing a secure communication path by a first processor within a first network device, the first state comprises an exchange of data during a networking protocol; and

transfer processing of the networking protocol by the first processor to a second processor that is in communication with the first processor, the second processor is adapted to perform a second state so as to complete the networking protocol and establish the secure communication path.

2. The method of claim 1 , wherein the networking protocol is an authentication handshaking protocol including a Secure Socket Layer (SSL) Handshaking Protocol.

3. The method of claim 1 , wherein the networking protocol is an authentication handshaking protocol including a Transport Layer Security (TLS) Handshaking Protocol.

4. The method of claim 3 , wherein the commencing of the authentication handshaking-protocol comprises performing initial stages of the TLS Handshaking Protocol by the first processor.

5. The method of claim 4 , wherein the completing of the authentication handshaking-protocol comprises completing the TLS Handshaking Protocol by the second processor by computing a symmetric key that is used to maintain cryptographically secure communications with a second network device physically separated from the first network device that includes the first processor and the second processor.

6. The method of claim 1 , wherein the secure communication path is formed via a wired link.

7. The method of claim 1 , wherein the first state is an outer authentication phrase in which a primary exchange of the data during an SSL/TLS Handshake.

8. The method of claim 7 , wherein the second state is an inner authentication phrase where control of the SSL/TLS Handshake is passed from the first processor to the second processor.

9. The method of claim 1 , wherein the first processor is a data path processor.

10. The method of claim 9 , wherein the second processor is a control path processor.

11. A system comprising:

a first processing element commencing a first state in establishing a secure communication path, the first phrase comprises an exchange of data during a networking protocol and transfer processing of the networking protocol prior to completion; and

a second processing element in communication with and physically separated from the first processing element, the second processing element is adapted to perform a second state so as to complete the networking protocol and establish the secure communication path.

12. The system of claim 11 , wherein the networking protocol is a Secure Socket Layer (SSL) Handshaking Protocol.

13. The system of claim 11 , wherein the networking protocol is a Transport Layer Security (TLS) Handshaking Protocol.

14. The system of claim 11 , wherein the first processing element is a data path (DP) processor and a second processing element is a control path (CP) processor.

15. A method comprising:

commencing a networking protocol by a first processing element;

transfer processing of the networking protocol by the first processing element to a second processing element prior to completion of the networking protocol; and

completing the networking protocol by the second processing element.

16. The method of claim 15 , wherein the first processing element is a data path (DP) processor and the second processing element is a control path (CP) processor.

17. The method of claim 15 , wherein the first processing element is remotely located from the second processing element.

18. A non-transitory device storage medium including software that is executed by a first processing element and a second processing element to perform operations comprising:

commencing a networking protocol;

transfer processing of the networking protocol by the first processing element to the second processing element after completion of a first state of the networking protocol; and

completing the networking protocol by the second processing element.

19. The non-transitory device storage medium of claim 18 , wherein the completing the networking protocol comprises processing a second state of the networking protocol by the second processing element.

20. The non-transitory device storage medium of claim 18 , wherein the first processing element is a first processor, the second processing element is a second processor different than the first processor, and the networking protocol is an authentication handshaking protocol.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 11, 2018
From: ARUBA NETWORKS, INC.
To: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Reel/Frame 045921/0055 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 10, 2015
From: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.
To: ARUBA NETWORKS, INC.
Reel/Frame 036379/0274 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 3, 2015
From: ARUBA NETWORKS, INC.
To: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.
Reel/Frame 035814/0518 →