Method for increasing I/O performance in systems having an encryption co-processor

• US 20110138194A1
• Filed: 03/08/2010
• Published: 06/09/2011
• Est. Priority Date: 12/04/2009
• Status: Active Grant

• Current Assignee: STMicroelectronics International N.V. (STMicroelectronics NV)
• Original Assignee: STMicroelectronics Incorporated (STMicroelectronics NV)
• Inventors: Godwin, Kurt
• Granted Patent: US 9,325,492 B2
• Time in Patent Office: Days
• US Class Current: 713/190
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols

Abstract

A system and method for improving performance while transferring encrypted data in an input/output (I/O) operation are provided. The method includes receiving a block of data. The method also includes dividing the block of data into a plurality of sub-blocks of data. The method further includes performing a first operation on a first sub-block. The method also includes performing a second operation on a second sub-block at substantially the same time as performing the first operation on the first sub-block. The method still further includes reassembling the plurality of sub-blocks into the block of data.

Claims

1. For use in a system including an encryption processor, a method for transferring encrypted data in an input/output (I/O) operation, the method comprising:

receiving a block of data;

dividing the block of data into a plurality of sub-blocks of data;

performing a first operation on a first sub-block;

performing a second operation on a second sub-block, at least a portion of the second operation being performed concurrently with at least a portion of the first operation; and

reassembling the plurality of sub-blocks into the block of data.

2. The method of claim 1, wherein the first operation comprises a data encryption or decryption operation and the second operation comprises a data transfer operation.

3. The method of claim 1, wherein the data is transferred to or from a data storage device.

4. The method of claim 3, wherein the data storage device is a hard disk drive.

5. The method of claim 1, wherein the data is transferred to or from a network device.

6. The method of claim 1, wherein the number of sub-blocks in the plurality of sub-blocks is dynamically adjusted to obtain an optimal performance of the I/O operation.

7. The method of claim 1, wherein the encryption processor is an encryption co-processor.

8. A system for transferring encrypted data in an input/output (I/O) operation, the system comprising:

a data splitting engine configured to;

receive a block of data,

divide the block of data into a plurality of sub-blocks of data, and

reassemble the plurality of sub-blocks into the block of data;

a processor configured to perform a first operation on a first sub-block; and

an encryption processor in communication with the processor, the encryption processor configured to perform a second operation on a second sub-block, wherein at least a portion of the second operation is performed concurrently with at least a portion of the first operation.

9. The system of claim 8, wherein the first operation comprises a data encryption or decryption operation and the second operation comprises a data transfer operation.

10. The system of claim 8, wherein the data is transferred to or from a data storage device.

11. The system of claim 10, wherein the data storage device is a hard disk drive.

12. The system of claim 8, wherein the data is transferred to or from a network device.

13. The system of claim 8, wherein the number of sub-blocks in the plurality of sub-blocks is dynamically adjusted to obtain an optimal performance of the I/O operation.

14. The system of claim 8, wherein the encryption processor is an encryption co-processor.

15. A computer program product for transferring encrypted data in an input/output (I/O) operation, the computer program product comprising a tangible machine-readable medium encoded with computer-executable instructions that when executed cause a data processing system to perform the steps of:

receiving a block of data;

dividing the block of data into a plurality of sub-blocks of data;

performing a first operation on a first sub-block;

performing a second operation on a second sub-block, at least a portion of the second operation being performed concurrently with at least a portion of the first operation; and

reassembling the plurality of sub-blocks into the block of data.

16. The computer program product of claim 15, wherein the first operation comprises a data transfer operation and the second operation comprises a data encryption or decryption operation.

17. The computer program product of claim 15, wherein the data is transferred to or from a data storage device.

18. The computer program product of claim 17, wherein the data storage device is a hard disk drive.

19. The computer program product of claim 15, wherein the data is transferred to or from a network device.

20. The computer program product of claim 15, wherein the number of sub-blocks in the plurality of sub-blocks is dynamically adjusted to obtain an optimal performance of the I/O operation.