Apparatus and method for maintaining a security association for manageability across power failures

• US 6,629,248 B1
• Filed: 03/30/2000
• Issued: 09/30/2003
• Est. Priority Date: 03/30/2000
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Vasudevan, Anil, Stachura, Thomas L.
• Primary Examiner(s): Lee, Thomas
• Assistant Examiner(s): DU, THUAN N
• Application Number:
  US09/539,730
• Time in Patent Office: 1,279 Days
• Field of Search: 713/300, 713/340, 713/200, 714/15, 714/22, 327/365, 326/8, 326/104, 711/102, 711/103
• US Class Current: 713/340
• CPC Class Codes: G06F 1/30 Means for acting in the event of power-supply failure or interruption, e.g. power-supply fluctuations for resetting only G06F1/24
• CPC Class Codes: G06F 11/1441 Resetting or repowering

Abstract

A network includes a host personal computer (PC) that can securely communicate with other PCs connected to the network based on the use of security association information. A power-loss detection circuit receives an input signal indicative of a voltage supply level to the network and outputs an output signal indicative of a change in the voltage supply level. The security association information is stored in a storage device if the output signal from the detection circuit indicates that a change in the voltage supply level, such as a power failure or change in power states, has occurred. The security information or other information can be stored in the storage device while the voltage supply level is falling.

Claims

1. An apparatus, comprising:

a power-loss detection circuit to receive an input signal indicative of a voltage supply level and to output a first output signal indicative of a change in the voltage supply level;

a logic device having the first output signal from the detection circuit as a first signal input and a signal indicative of a valid security association as a second signal input, the logic device coupled to generate a second output signal based on the first and second signal inputs and to change the state of the second output signal if a state of the first signal input changes;

a unit to receive the second output signal from the logic device and to effectuate a storage of information to a storage device if the second output signal from the logic device indicates that a change in the voltage supply level has occurred.

2. The apparatus of claim 1 wherein the storage device comprises an electronically erasable programmable read only memory (EEPROM) device.

3. The apparatus of claim 1 wherein the information comprises security association information.

4. The apparatus of claim 1 wherein the unit comprises a processor.

5. The apparatus of claim 1 wherein the detection circuit comprises a comparator circuit having the input signal as a first input and a reference signal as a second input, the comparator circuit being capable of generating a resulting signal that changes state if the input signal falls to a level below the reference signal.

6. The apparatus of claim 1 wherein the detection circuit comprises:

a diode connected to receive the input signal and to output a resulting signal, the resulting signal comprising the input signal having a voltage reduced by a voltage across the diode; and

a transition circuit to receive the resulting signal, the transition signal being capable of changing states if the resulting signal falls to a level below a transition level of the transition circuit.

7. The apparatus of claim 1, further comprising an isolation power supply circuit coupled between the detection circuit and the storage device, the isolation power supply circuit including a capacitor coupled to a transformer to isolate the capacitor from the detection circuit, the capacitor being capable of storing power while the detection circuit detects that the voltage supply level is at an operational level and being capable of providing the stored power to the storage device if the detection circuit detects that the voltage supply level has fallen below the operational level.

8. The apparatus of claim 1 wherein the unit is capable of effectuating the storage of the information in the storage device while the voltage supply level is falling below a normal operating level.

9. A system, comprising:

a processor;

a voltage supply unit coupled to the processor;

a power-loss detection circuit coupled to the voltage supply unit to receive an input signal indicative of a voltage supply level of the voltage supply unit and to output a first output signal indicative of a change in the voltage supply level;

a logic device coupled to the power-loss detection circuit having the first output signal from the detection circuit as a first signal input and a signal indicative of a valid security association as a second signal input, the logic device coupled to generate a second output signal based on the first and second signal inputs and to change the state of the second output signal if a state of the first signal input changes;

a unit to receive the second output signal from the logic device and to effectuate a storage of information sent from the processor to a storage device if the second output signal indicates that a change in the voltage supply level has occurred.

10. The system of claim 9 wherein the information comprises security association information.

11. The system of claim 9 wherein the storage device comprises an electronically erasable programmable read only memory (EEPROM) device.

12. The system of claim 9 wherein the unit is capable of effectuating the storage of the information in the storage device while the voltage supply level is falling below a normal operating level.

13. A system, comprising:

a network circuit device;

a voltage supply unit coupled to the network circuit device;

a power-loss detection circuit coupled to the voltage supply unit to receive an input signal indicative of a voltage supply level of the voltage supply unit and to output a first output signal indicative of a change in the voltage supply level;

a logic device coupled to the power-loss detection circuit having the first output signal from the detection circuit as a first signal input and a signal indicative of a valid security association as a second signal input, the logic device coupled to generate a second output signal based on the first and second signal inputs and to change the state of the second output signal if a state of the first signal input changes; and

a unit to receive the second output signal from the logic device and to effectuate a storage of information, sent from the network circuit device, to a storage device if the second output signal indicates that a change in the voltage supply level has occurred.

14. The system of claim 13 wherein the network circuit device comprises an application specific integrated circuit.

15. The system of claim 13 wherein the storage device comprises an electronically erasable programmable read only memory (EEPROM) device.

16. The system of claim 13, further comprising an isolation power supply circuit coupled between the detection circuit and the storage device, the isolation power supply circuit including a capacitor coupled to an inductor to isolate the capacitor from the detection circuit, the capacitor being capable of storing power while the detection circuit detects that the voltage supply level is at an operational level and being capable of providing the stored power to the storage device if the detection circuit detects that the voltage supply level has fallen below the operational level.