IP Library Granted Patent US 10,419,481
Granted Patent B1
US 10,419,481 · App. 15/596,860 · Granted Sep 17, 2019

Methods and systems for overlapping protection domain in network devices

Inventors: Ali A. Khwaja (Irvine, CA); David T. Kwak (Newport Coast, CA); Biswajit Khandai (Foothill Ranch, CA); Oscar L. Grijalva (Cypress, CA); Rajendra R. Gandhi (Laguna Niguel, CA)
Assignee: Cavium, LLC
H04L63/164G06F11/1004G06F12/1408G06F13/28G06F13/426G06F2212/1052G06F2213/0026H04L9/0631
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,419,481
App. No.
15/596,860
Granted
Sep 17, 2019
Kind
B1
Abstract

Methods and systems for securing data are provided. For example, one method includes receiving at an adapter, data with a first type of error protection code from a host memory of a computing device; adding by the adapter a second type of error protection code to the data before removing the first type of error protection code; generating by the adapter, a frame header for the data with a protocol specific protection code and a third type of error protection code, where the third type of error protection code is generated without using any frame header field; encrypting by the adapter, the data, the protocol specific protection code and the third type of error protection code; and transmitting by the adapter, the encrypted data with encrypted protocol specific protection code and encrypted third type of error protection code to a receiving adapter coupled to the adapter by a network link.

Claims (31)

1. A machine implemented method, comprising:

receiving at an adapter, data with a first type of error protection code from a host memory of a computing device;

adding by the adapter a second type of error protection code to the data before removing the first type of error protection code;

generating by the adapter, a frame header for the data with a protocol specific protection code and a third type of error protection code, where the third type of error protection code is generated without using any frame header field that can change after the data is transmitted by the adapter via a network link;

encrypting by the adapter, the data, the protocol specific protection code and the third type of error protection code; and

transmitting by the adapter, the encrypted data with encrypted protocol specific protection code and encrypted third type of error protection code to a receiving adapter communicating with the adapter by the network link.

2. The method of claim 1 , wherein the first type of error protection code is a local cyclic redundancy code (LCRC).

3. The method of claim 1 , wherein the protocol specific protection code is a Fibre Channel cyclic redundancy code (FC-CRC).

4. The method of claim 1 , wherein the third type of error protection code is a cyclic redundancy code (CRC).

5. The method of claim 1 , wherein the frame header is a Fibre Channel header.

6. The method of claim 1 , wherein an encapsulating security payload (ESP) header and trailer is added by the adapter to the encrypted data transmitted using the network link.

7. The method of claim 1 , wherein the third type of error protection code is embedded as padding in the transmitted encrypted data.

8. A non-transitory, machine readable storage medium having stored thereon instructions for performing a method, comprising machine executable code which when executed by at least one machine, causes the machine to:

receive at an adapter, data with a first type of error protection code from a host memory of a computing device;

add by the adapter a second type of error protection code to the data before removing the first type of error protection code;

generate by the adapter, a frame header for the data with a protocol specific protection code and a third type of error protection code, where the third type of error protection code is generated without using any frame header field that can change after the data is transmitted by the adapter via a network link;

encrypt by the adapter, the data, the protocol specific protection code and the third type of error protection code; and

transmit by the adapter, the encrypted data with encrypted protocol specific protection code and encrypted third type of error protection code to a receiving adapter communicating with the adapter by the network link.

9. The non-transitory storage medium of claim 8 , wherein the first type of error protection code is a local cyclic redundancy code (LCRC).

10. The non-transitory storage medium of claim 8 , wherein the protocol specific protection code is a Fibre Channel cyclic redundancy code (FC-CRC).

11. The non-transitory storage medium of claim 8 , wherein the third type of error protection code is a cyclic redundancy code (CRC).

12. The non-transitory storage medium of claim 8 , wherein the frame header is a Fibre Channel header.

13. The non-transitory storage medium of claim 8 , wherein an encapsulating security payload (ESP) header and trailer is added by the adapter to the encrypted data transmitted using the network link.

14. The non-transitory storage medium of claim 8 , wherein the third type of error protection code is embedded as padding in the transmitted encrypted data.

15. A system comprising:

a processor executing instructions out of a memory and interfacing with an adapter, wherein the adapter is configured to receive, data with a first type of error protection code from the memory; add a second type of error protection code to the data before removing the first type of error protection code; generate a frame header for the data with a protocol specific protection code and a third type of error protection code, where the third type of error protection code is generated without using any frame header field that can change after the data is transmitted by the adapter via a network link; encrypt the data, the protocol specific protection code and the third type of error protection code; and transmit the encrypted data with encrypted protocol specific protection code and encrypted third type of error protection code to a receiving adapter communicating with the adapter by the network link.

16. The system of claim 15 , wherein the first type of error protection code is a local cyclic redundancy code (LCRC).

17. The system of claim 15 , wherein the protocol specific protection code is a Fibre Channel cyclic redundancy code (FC-CRC).

18. The system of claim 15 , wherein the third type of error protection code is a cyclic redundancy code (CRC).

19. The system of claim 15 , wherein the frame header is a Fibre Channel header.

20. The system of claim 15 , wherein an encapsulating security payload (ESP) header and trailer is added by the adapter to the encrypted data transmitted using the network link and the third type of error protection code is embedded as padding in the transmitted encrypted data.

Assignments (4)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 15, 2020
From: CAVIUM INTERNATIONAL
To: MARVELL ASIA PTE, LTD.
Reel/Frame 053179/0320 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 17, 2020
From: CAVIUM, LLC
To: CAVIUM INTERNATIONAL
Reel/Frame 051948/0807 →
CHANGE OF NAME Recorded Oct 8, 2018
From: CAVIUM, INC.
To: CAVIUM, LLC
Reel/Frame 047205/0953 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 16, 2017
From: KHWAJA, ALI A.; KWAK, DAVID T.; KHANDAI, BISWAJIT; GRIJALVA, OSCAR L.; GANDHI, RAJENDRA R.
To: CAVIUM, INC.
Reel/Frame 042399/0591 →