×

Arrangement in an IP node for preserving security-based sequences by ordering IP packets according to quality of service requirements prior to encryption

  • US 20050182833A1
  • Filed: 01/20/2004
  • Published: 08/18/2005
  • Est. Priority Date: 01/20/2004
  • Status: Active Grant
First Claim
Patent Images

1. A method in a router having at least one outbound interface, the method comprising:

  • establishing, on one of the outbound interfaces, a plurality of Internet Protocol (IP)-based secure connections with respective destinations based on receiving encrypted packets generated by a cryptographic module, each encrypted packet successively output from the cryptographic module having a corresponding successively-unique sequence number;

    controlling supply of data packets to the cryptographic module by;

    (1) assigning, for each secure connection, a corresponding queuing module, (2) reordering, in each queuing module, a corresponding group of the data packets associated with the corresponding secure connection according to a determined quality of service policy and based on a corresponding assigned maximum output bandwidth for the corresponding queuing module, and (3) outputting to the cryptographic module the group of data packets, from each corresponding queuing module according to the corresponding assigned maximum output bandwidth, for generation of the encrypted packets; and

    second outputting the encrypted packets from the cryptographic module to the one outbound interface for transport via their associated secure connections.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×