Hardware security module, and trusted hardware network interconnection device and resources

1. A hardware security module comprising:

two or more hardware ports, each one of which operable to electronically receive given input hardware port-specific cryptographic data thereon to initiate execution of an internal cryptographic process as a function thereof;

two or more segregated hardware port-specific storage spaces, each physically isolated in hardware from any other of said hardware port-specific storage spaces, operatively linked to a corresponding hardware port via a corresponding hardware link, and storing respective secured hardware port-specific cryptographic data thereon exclusively retrievable upon said given input hardware port-specific cryptographic data corresponding thereto and being received via said corresponding hardware port such that said respective secured hardware port-specific cryptographic data is inaccessible in hardware upon said given input hardware port-specific data being received via a distinct hardware port; and

a cryptographic engine operable to execute said cryptographic process based on said secured port-specific cryptographic data retrieved from said segregated hardware port-specific storage spaces as a function of said given input port-specific cryptographic data;

wherein a given segregated hardware port-specific storage space is exclusively accessible in hardware, independent of said given input hardware port-specific cryptographic data, via said corresponding hardware link.

2. The hardware security module of claim 1 , wherein the hardware security module further comprises a hardwired port interconnection matrix that operatively interconnects at least two of said hardware ports in accordance with predefined hardwired port-specific logic, wherein said interconnection matrix is reconfigurable to redefine said hardwired port-specific logic.

3. The hardware security module of claim 1 , wherein at least one said hardware link invokes an embedded communication channel resource operable on selected hardware port-specific data communicated therethrough, wherein said communication channel resource comprises at least one of an inline channel cryptographic resource, a data channel diode resource, a data channel filter resource, a data channel comparator resource, a trusted metering function, a trusted flow control function, a trusted function expander, a trusted controllable event counter, or a data channel sniffer resource.

4. The hardware security module of claim 1 , wherein at least one said hardware link invokes a trusted metering function operable on hardware port-specific data communicated therethrough, wherein said trusted metering function is operable to track transactions communicated on a given hardware channel and output cryptographically authenticated metering messages accordingly.

5. The hardware security module of claim 1 , wherein at least one said hardware link invokes a trusted flow control function, wherein said trusted flow control function applies cryptographically authenticated flow control restrictions on transactions communicated on a given hardware channel.

6. The hardware security module of claim 1 , wherein at least one said hardware link invokes a trusted function expander, wherein a data transaction relayed or triggered on a given input hardware channel is securely distributed and synchronized across multiple output hardware channels.

7. The hardware security module of claim 1 , wherein at least one said hardware link invokes a trusted controllable event counter.

8. The hardware security module of claim 7 , wherein said trusted controllable event counter applies cryptographically authenticated control over a designated event counting threshold thereof such that a trigger invoked upon reaching said threshold is securely adjustable.

9. The hardware security module of claim 8 , wherein said trusted controllable event counter is operatively associated with an onboard clock frequency signal to securely adjust output timing data associated therewith.

10. The hardware security module of claim 1 , wherein each said segregated hardware port-specific storage space is physically isolated in hardware from any other said segregated hardware port-specific storage space.

11. The hardware security module of claim 1 , wherein said cryptographic engine comprises distinct hardware port-specific cryptographic engines or a same said cryptographic engine that is commonly operable to execute a same said cryptographic process for each of said secured port-specific cryptographic data irrespective of hardware port-specificity.

12. The hardware security module of claim 1 , wherein each of said segregated hardware port-specific storage spaces comprises distinct partitions of a common embedded storage media each operatively hardwired to said corresponding one of said hardware ports.

13. The hardware security module of claim 1 , wherein each said segregated hardware port-specific storage space comprises distinctly embedded storage media operatively hardwired to said corresponding one of said hardware ports.

14. A hardware security module comprising:

two or more hardware ports, each one of which operable to electronically receive given input hardware port-specific cryptographic data thereon to initiate execution of an internal cryptographic process as a function thereof;

two or more segregated hardware port-specific storage spaces, each operatively linked to a corresponding hardware port via a corresponding hardware link, and storing respective secured hardware port-specific cryptographic data thereon exclusively retrievable upon said given input hardware port-specific cryptographic data corresponding thereto and being received via said corresponding hardware port;

a cryptographic engine operable to execute said cryptographic process based on said secured port-specific cryptographic data retrieved from said segregated hardware port-specific storage spaces as a function of said given input port-specific cryptographic data; and

a hardwired port interconnection matrix that operatively interconnects at least two some of said hardware ports in accordance with predefined hardwired port-specific logic and invokes an embedded communication channel resource operable on selected hardware port-specific data communicated via said matrix;

wherein a given segregated hardware port-specific storage space is exclusively accessible in hardware, independent of said given input hardware port-specific cryptographic data, via said corresponding hardware link.

15. The hardware security module of claim 14 , wherein said communication channel resource comprises a trusted metering function that tracks transactions communicated on a given hardware channel and outputs cryptographically authenticated metering messages accordingly.

16. The hardware security module of claim 15 , wherein said transactions comprise at least one of data transactions, event transactions or request transactions.

17. The hardware security module of claim 14 , wherein said communication channel resource comprises a trusted flow control function that applies cryptographically authenticated flow control restrictions on transactions communicated on a given hardware channel.

18. The hardware security module of claim 14 , wherein said communication channel resource comprises a trusted function expander, wherein a data transaction relayed or triggered on a given input hardware channel is securely distributed and synchronized across multiple output hardware channels.

19. The hardware security module of claim 14 , wherein said communication channel resource comprises a trusted controllable event counter that applies cryptographically authenticated control over a designated event counting threshold thereof such that a trigger invoked upon reaching said threshold is securely adjustable.