Generic encryption system for nonsecure datapaths
A secure generic encryption system for nonsecure datapaths comprises a format-specific adaptation layer/data path for receiving and processing nonsecure content data; an authentication engine located within a security perimeter and coupled to an external communication interface for authentication and supplying the format-specific adaptation layer/data path, located outside the security perimeter, with an output signal indicating whether authentication is successful; and a generic encryption module located within the security perimeter and coupled (1) to the authentication engine for receiving from the authentication engine initialization vectors, encryption keys, and the output signal indicating whether authentication is successful, and (2) to the format-specific adaptation layer/data path for (a) receiving a read signal from the format-specific adaptation layer/data path, and (b) providing the format-specific adaptation layer/data path with a data-available signal to indicate whether data is available to be read.
1. A method of encrypting data using a generic encryption module located within a security perimeter, said method comprising:
receiving and processing data in a format-specific adaptation layer module configured to operate in accordance with all of the following types of High-bandwidth Digital Content Protection (HDCP) 2.X specifications: DisplayPort (DP); Multimedia Interface (HDMI), Interface Independent Adaptation (IIA), Mobile High-definition Link (MHL), Digital interface for Video and Audio (DiiVA), Wireless Home Digital Interface (WHDI), Wireless High Definition (WirelessHD), the format-specific adaptation layer module being located outside the security perimeter;
supplying said format-specific adaptation layer module with an authentication signal from an authentication engine, the authentication signal indicating whether authentication is successful;
supplying said format-specific adaptation layer module with a data-available signal from said generic encryption module, the data-available signal indicating whether data is available to be read;
supplying said generic encryption module with initialization vectors, encryption keys, and said authentication signal; and
supplying said generic encryption module with a read signal from said format-specific adaptation layer module.
2. The method of claim 1 which includes providing said format-specific adaptation layer module with encrypted data from said generic encryption module.
3. The method of claim 1 which includes providing said generic encryption module with custom encryption data that is format-specific, from said format-specific adaptation layer module.
4. The method of claim 1 which includes providing said generic encryption module with a mode input, from said authentication engine.
5. The method of claim 1 in which said format-specific adaptation layer module-includes format-specific logic.
6. The method of claim 1 wherein said data HDCP content data and said authentication is HDCP authentication.