Granted Patent B2

US 12,223,068 · App. 17/758,086 · Granted Feb 11, 2025

Inventors: Jie Liu (Shenzhen, CN); Haibo Wang (Shenzhen, CN); Guoqiang Wang (Shenzhen, CN); Yubin Xu (Shenzhen, CN)

Assignee: ZTE CORPORATION

G06F21/606G06F21/71

Abstract

Claims (85)

1. A secure computing control method, comprising:

receiving a first data packet message for secure computing from a processor, the first data packet message comprising data packet information and secure computing configuration information corresponding to the data packet information;

acquiring corresponding first data packet data from a memory according to the data packet information of the first data packet message;

selecting a corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message;

performing secure computing on the first data packet data by means of the selected security algorithm to generate secure computed second data packet data and a second data packet message corresponding to the second data packet data;

transmitting the second data packet data to the memory; and

transmitting the second data packet message to the processor;

wherein, the second data packet message comprises information about a data packet on which secure computing has been performed and secure computing processing information corresponding to the information about the data packet;

wherein, the performing of secure computing on the first data packet data by means of the selected security algorithm comprises:

performing secure computing on each piece of the first data packet data respectively, based on the message input queue according to the security algorithm corresponding to a respective one piece of first data packet data, which in turn comprises:

allocating at least one idle secure computing spatial resource for secure computing in an order of the first data packet message in the input queue; and

performing secure computing on each piece of the first data packet data respectively, according to the security algorithm corresponding to a respective one piece of first data packet data.

2. The secure computing control method of claim 1 , wherein the receiving of the first data packet message for secure computing from a processor comprises:

receiving at least one first data packet message for secure computing from the processer, and the at least one first data packet message forms a message input queue; and

the transmitting of the second data packet message to the processor comprises:

acquiring at least one second data packet message each corresponding to a respective one of the at least one first data packet message, forming the second data packet message into a message output queue, and transmitting the message output queue to the processor.

3. The secure computing control method of claim 1 , wherein the data packet information of the first data packet message comprises segment information of a data packet, the first data packet data comprises segment data corresponding to the segment information, and the acquiring of corresponding first data packet data from the memory according to the data packet information of the first data packet message comprises:

acquiring segment data of the corresponding data packet from the memory according to the segment information of the data packet, and

splicing the segment data to generate data packet cache data.

4. The secure computing control method of claim 3 , wherein the secure computing configuration information of the first data packet message comprises information of security algorithm to be selected, information of an order of processing by security algorithm, and security algorithm configuration information;

the selecting of the corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message comprises:

selecting and acquiring at least one corresponding security algorithm from the memory according to the secure computing configuration information corresponding to the first data packet message; and

the performing of secure computing on the first data packet data by means of the selected security algorithm comprises:

in response to one security algorithm being selected, performing single-stage secure computing, according to the secure computing configuration information, on the data packet cache data by means of the selected security algorithm, or

in response to a plurality of security algorithms being selected, performing multi-stage secure computing, according to the secure computing configuration information and in the processing order of security algorithms, on the data packet cache data by means of the plurality of security algorithms.

5. The secure computing control method of claim 1 , wherein the selecting the corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message comprises:

selecting at least one corresponding security algorithm from the memory according to the secure computing configuration information corresponding to the first data packet message, and

allocating each of the at least one security algorithm to a respective one of the at least one secure computing spatial resource.

6. A secure computing control apparatus, comprising:

a storage device, a processing unit and at least one computer program stored on the storage device and executable by the processing unit which, when executed by the processing unit, causes the processing unit to perform a secure computing control method comprising,

receiving a first data packet message for secure computing from a processor, the first data packet message comprising data packet information and secure computing configuration information corresponding to the data packet information;

acquiring corresponding first data packet data from a memory according to the data packet information of the first data packet message;

selecting a corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message;

performing secure computing on the first data packet data by means of the selected security algorithm to generate secure computed second data packet data and a second data packet message corresponding to the second data packet data;

transmitting the second data packet data to the memory; and

transmitting the second data packet message to the processor;

wherein, the second data packet message comprises information about a data packet on which secure computing has been performed and secure computing processing information corresponding to the information about the data packet; and

wherein, the performing of secure computing on the first data packet data by means of the selected security algorithm comprises:

performing secure computing on each piece of the first data packet data respectively, based on the message input queue according to the security algorithm corresponding to a respective one piece of first data packet data, which in turn comprises:

allocating at least one idle secure computing spatial resource for secure computing in an order of the first data packet message in the input queue; and

performing secure computing on each piece of the first data packet data respectively, according to the security algorithm corresponding to a respective one piece of first data packet data.

7. The secure computing control apparatus of claim 6 , wherein the receiving of the first data packet message for secure computing from a processor comprises:

receiving at least one first data packet message for secure computing from the processer, and the at least one first data packet message forms a message input queue;

the transmitting of the second data packet message to the processor comprises:

acquiring at least one second data packet message each corresponding to a respective one of the at least one first data packet message, forming the second data packet message into a message output queue, and transmitting the message output queue to the processor.

8. The secure computing control apparatus of claim 6 , wherein the data packet information of the first data packet message comprises segment information of a data packet, the first data packet data comprises segment data corresponding to the segment information, and the acquiring of corresponding first data packet data from the memory according to the data packet information of the first data packet message comprises:

acquiring segment data of the corresponding data packet from the memory according to the segment information of the data packet, and

splicing the segment data to generate data packet cache data.

9. The secure computing control apparatus of claim 8 , wherein the secure computing configuration information of the first data packet message comprises information of security algorithm to be selected, information of an order of processing by security algorithm, and security algorithm configuration information;

the selecting of the corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message comprises:

selecting and acquiring at least one corresponding security algorithm from the memory according to the secure computing configuration information corresponding to the first data packet message; and

the performing of secure computing on the first data packet data by means of the selected security algorithm comprises:

in response to one security algorithm being selected, performing single-stage secure computing, according to the secure computing configuration information, on the data packet cache data by means of the selected security algorithm, or

in response to a plurality of security algorithms being selected, performing multi-stage secure computing, according to the secure computing configuration information and in the processing order of security algorithms, on the data packet cache data by means of the plurality of security algorithms.

10. The secure computing control apparatus of claim 6 , wherein the selecting the corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message comprises:

selecting at least one corresponding security algorithm from the memory according to the secure computing configuration information corresponding to the first data packet message, and

allocating each of the at least one security algorithm to a respective one of the at least one secure computing spatial resource.

11. A non-transitory computer-readable storage medium, storing at least one computer program which, when executed by a processor, causes the processor to perform a secure computing control method comprising,

receiving a first data packet message for secure computing from a processor, the first data packet message comprising data packet information and secure computing configuration information corresponding to the data packet information;

acquiring corresponding first data packet data from a memory according to the data packet information of the first data packet message;

selecting a corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message;

performing secure computing on the first data packet data by means of the selected security algorithm to generate secure computed second data packet data and a second data packet message corresponding to the second data packet data;

transmitting the second data packet data to the memory; and

transmitting the second data packet message to the processor;

wherein, the second data packet message comprises information about a data packet on which secure computing has been performed and secure computing processing information corresponding to the information about the data packet; and

wherein, the performing of secure computing on the first data packet data by means of the selected security algorithm comprises:

performing secure computing on each piece of the first data packet data respectively, based on the message input queue according to the security algorithm corresponding to a respective one piece of first data packet data, which in turn comprises:

allocating at least one idle secure computing spatial resource for secure computing in an order of the first data packet message in the input queue; and

performing secure computing on each piece of the first data packet data respectively, according to the security algorithm corresponding to a respective one piece of first data packet data.

12. The non-transitory computer-readable storage medium of claim 11 , wherein the receiving of the first data packet message for secure computing from a processor comprises:

receiving at least one first data packet message for secure computing from the processer, and the at least one first data packet message forms a message input queue;

the transmitting of the second data packet message to the processor comprises:

acquiring at least one second data packet message each corresponding to a respective one of the at least one first data packet message, forming the second data packet message into a message output queue, and transmitting the message output queue to the processor.

13. The non-transitory computer-readable storage medium of claim 11 , wherein the data packet information of the first data packet message comprises segment information of a data packet, the first data packet data comprises segment data corresponding to the segment information, and the acquiring of corresponding first data packet data from the memory according to the data packet information of the first data packet message comprises:

acquiring segment data of the corresponding data packet from the memory according to the segment information of the data packet, and

splicing the segment data to generate data packet cache data.

14. The non-transitory computer-readable storage medium of claim 13 , wherein the secure computing configuration information of the first data packet message comprises information of security algorithm to be selected, information of an order of processing by security algorithm, and security algorithm configuration information;

the selecting of the corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message comprises:

selecting and acquiring at least one corresponding security algorithm from the memory according to the secure computing configuration information corresponding to the first data packet message; and

the performing of secure computing on the first data packet data by means of the selected security algorithm comprises:

in response to one security algorithm being selected, performing single-stage secure computing, according to the secure computing configuration information, on the data packet cache data by means of the selected security algorithm, or

in response to a plurality of security algorithms being selected, performing multi-stage secure computing, according to the secure computing configuration information and in the processing order of security algorithms, on the data packet cache data by means of the plurality of security algorithms.

15. The non-transitory computer-readable storage medium of claim 11 , wherein the selecting the corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message comprises:

selecting at least one corresponding security algorithm from the memory according to the secure computing configuration information corresponding to the first data packet message, and

allocating each of the at least one security algorithm to a respective one of the at least one secure computing spatial resource.

Assignments (1)

Priority Claims (1)

Continuity (1)

References Cited (31)