Java cryptographic engine to crypto acceleration integration

• US 20050132211A1
• Filed: 08/02/2004
• Published: 06/16/2005
• Est. Priority Date: 08/01/2003
• Status: Abandoned Application

• Current Assignee: Jesse D. Byler, Mamoon Yunus, Rizwan Mallal
• Original Assignee: Jesse D. Byler, Mamoon Yunus, Rizwan Mallal
• Inventors: Byler, Jesse D., Yunus, Mamoon, Mallal, Rizwan
• Application Number:
  US10/909,853
• Publication Number:
  US 20050132211A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols

Abstract

A networking appliance having a Java proxy engine that transparently offloads security functions into a cryptographic accelerator, thereby enabling rapid prototyping and platform independence, while increasing the speed of cryptographic and other security functions.

Claims

1. A method for accelerating processing of security functions in a network, said method comprising the steps of:

1) intercepting data being transferred across the network;

2) determining that a security function to be performed can be offloaded for hardware acceleration;

3) utilizing a proxy engine to transparently offload the data; and

4) performing the security function in hardware.

2. The method as defined in claim 1 wherein the method of utilizing a proxy engine further comprises the step of utilizing a Java Cryptographic Engine (JCE) to transparently offload the data to be offloaded.

3. The method as defined in claim 2 wherein the method further comprises the step of entering a request in the JCE layer for a cryptographic function to be performed.

4. The method as defined in claim 3 wherein the method further comprises the step of invoking Java Native Interface (JNI) hooks to function as an interface to an operating system specific programming language interface library.

5. The method as defined in claim 4 wherein the method further comprises the step of invoking Java Native Interface (JNI) hooks in a JNI layer to function as an interface to a C programming language interface library.

6. The method as defined in claim 5 wherein the method further comprises the step of unpacking data from the intercepted message so that the data can be manipulated in the operating system specific programming language.

7. The method as defined in claim 6 wherein the method further comprises the step of marshalling the data so that the data can be transformed to a standard format.

8. The method as defined in claim 7 wherein the method further comprises the step of marshalling the data in a cryptographic messaging layer.

9. The method as defined in claim 8 wherein the method further comprises the step of marshalling the data so that the data can be transferred across a network having a specific network packet protocol.

10. The method as defined in claim 9 wherein the method further comprises the step of transferring the data to a hardware driver.

11. The method as defined in claim 10 wherein the method further comprises the step of using the hardware driver to prepare a hardware accelerator for receiving data to be cryptographically processed.

12. The method as defined in claim 11 wherein the method further comprises the step of transferring the data from the hardware driver to the hardware accelerator for cryptographic processing.

13. The method as defined in claim 12 wherein the method further comprises the step of selecting the type of cryptographic processing to be performed by the hardware accelerator from the group of cryptographic processes comprised of encrypting, decrypting, verification and signing.

14. The method as defined in claim 12 wherein the method further comprises the step of interrupting the hardware driver when the hardware accelerator has completed its cryptographic processing of the data so that the data can be transferred to a next destination.

15. The method as defined in claim 14 wherein the method further comprises the step of transferring the data from the hardware driver to the cryptographic messaging layer.

16. The method as defined in claim 15 wherein the method further comprises the step of unpacking the data.

17. The method as defined in claim 16 wherein the method further comprises the step of transferring the data from the cryptographic messaging layer to the JNI layer.

18. The method as defined in claim 17 wherein the method further comprises the step of transforming the data in the JNI layer.

19. The method as defined in claim 18 wherein the method further comprises the step of transferring the data from the JNI layer to the JCE layer through the JNI interface.

20. A system for accelerating processing of cryptographic functions in a network, said system comprised of:

a cryptographic hardware accelerator for performing cryptographic functions; and

a cryptographic proxy engine for offloading a message to the cryptographic hardware accelerator for cryptographic processing.

21. The system as defined in claim 20 wherein the system for accelerating processing of cryptographic functions is further comprised of a Java Cryptographic Engine (JCE) as the cryptographic hardware accelerator for transparently offloading the data to be offloaded.

22. The system as defined in claim 21 wherein the system for accelerating processing of cryptographic functions is further comprised of an interface to a Java Native Interface (JNI), wherein the JNI provides hooks to function as an interface to an operating system specific programming language interface library.

23. The system as defined in claim 22 wherein the system for accelerating processing of cryptographic functions is further comprised of a JNI layer for unpacking data from the intercepted message so that the data can be manipulated in the operating system specific programming language.

24. The system as defined in claim 23 wherein the system for accelerating processing of cryptographic functions is further comprised of cryptographic messaging layer, wherein the cryptographic messaging layer marshals the data so that the data can be transformed to a standard format.

25. The system as defined in claim 24 wherein the system for accelerating processing of cryptographic functions is further comprised of a hardware driver, wherein the hardware driver prepares the hardware accelerator to receive the data to be cryptographically processed.