Methods and apparatus to perform security related operations on received signals

• US 7,590,135 B2
• Filed: 12/30/2002
• Issued: 09/15/2009
• Est. Priority Date: 12/30/2002
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Beverly, Harlan T., Le, Quang
• Primary Examiner(s): Pezzlo; John
• Application Number:
  US10/334,894
• Publication Number:
  US 20040187107A1
• Time in Patent Office: 2,451 Days
• Field of Search: 370/419, 370/463, 370/465, 370/466, 370/469, 370/386, 370150-152, 370/252, 370/429, 709/250, 709/203, 709220-226, 725/125, 375/354, 713/153
• US Class Current: 370/419
• CPC Class Codes: H04L 63/164 at the network layer

Abstract

Methods and apparatus to perform security related operations on received signals are described. In one embodiment, a security device may perform security related operations on received signals and a logic (such as an Ethernet controller) may include an interface to provide communication with the security device. Other embodiments are also disclosed.

Claims

1. An apparatus comprising:

a security device to perform security related operations on received signals; and

an Ethernet controller comprising an interface to provide communications with the security device,

wherein the security device has an associated unique address and wherein the Ethernet controller selectively slows down transmission of packets to the security device in response to receipt of a message to slow down transmission.

2. The apparatus of claim 1, wherein the Ethernet controller comprises:

a media access control device to perform media access control operations in compliance with Ethernet; and

a GMII extender sublayer to interconnect the security device with the media access control device.

3. The apparatus of claim 1, wherein the interface comprises a XAUI compatible interface.

4. The apparatus of claim 1, wherein the Ethernet controller comprises:

a media access control device to perform media access control operations in compliance with Ethernet; and

an XGMII extender sublayer to interconnect the security device with the media access control device.

5. The apparatus of claim 4, wherein the interface comprises a XAUI compatible interface.

6. The apparatus of claim 1, wherein the Ethernet controller comprises:

a physical medium attachment to perform electrical signal retiming operations;

a media access control device to receive and provide signals with the physical medium attachment and to perform media access control operations in compliance with Ethernet; and

an extender sublayer to interconnect the security device with the media access control device and to provide communications between the media access control device and the security device.

7. The apparatus of claim 6, wherein the extender sublayer comprises a GMII extender sublayer.

8. The apparatus of claim 7, wherein the interface comprises a XAUI compatible interface.

9. The apparatus of claim 6, wherein the extender sublayer comprises an XGMII extender sublayer.

10. The apparatus of claim 9, wherein the interface comprises a XAUI compatible interface.

11. The apparatus of claim 1, wherein the Ethernet controller comprises:

physical medium dependent device to perform optical-to-electrical signal conversion and electrical-to-optical signal conversion; and

physical medium attachment to receive and provide signals with the physical medium dependent device and to perform media access control operations in compliance with Ethernet;

a media access control device to receive and provide signals with the physical medium attachment and to perform media access control operations in compliance with Ethernet; and

an extender sublayer to interconnect the security device with the media access control device and to provide communications between the media access control device and the security device.

12. The apparatus of claim 11, wherein the extender sublayer comprises a GMII extender sublayer.

13. The apparatus of claim 12, wherein the interface comprises a XAUI compatible interface.

14. The apparatus of claim 1, wherein the security device comprises logic circuitry to perform IP security protocol related processing.

15. The apparatus of claim 3, wherein the security device comprises logic circuitry to perform IP security protocol related processing.

16. The apparatus of claim 5, wherein the security device comprises logic circuitry to perform IP security protocol related processing.

17. The apparatus of claim 8, wherein the security device comprises logic circuitry to perform IP security protocol related processing.

18. The apparatus of claim 10, wherein the security device comprises logic circuitry to perform IP security protocol related processing.

19. The apparatus of claim 13, wherein the security device comprises logic circuitry to perform IP security protocol related processing.

20. The apparatus of claim 3, wherein the security device comprises:

logic circuity to perform IP security protocol related processing; and

a media access control device to perform media access control operations in compliance with Ethernet.

21. The apparatus of claim 5, wherein the security device comprises:

logic circuity to perform IP security protocol related processing; and

a media access control device to perform media access control operations in compliance with Ethernet.

22. The apparatus of claim 1, wherein the Ethernet controller selectively inserts a programmable byte space among packets.

23. The apparatus of claim 22, wherein the programmable byte space is based upon an inter-computer connection.

24. The apparatus of claim 22, wherein the programmable byte space is based upon pre-determined information concerning a destination computer.

25. The apparatus of claim 1, wherein the security device transmits a message to slow down to the Ethernet controller in response to packets transmitted from the Ethernet controller to the security device exceeding a specified rate.

26. The apparatus of claim 1, wherein the Ethernet controller selectively transmits a message to a source of packets in response to the Ethernet controller receiving packets at a rate approximately the same or higher than a predetermined threshold rate and wherein the message comprises a message to slow packet transmission to the Ethernet controller.

27. The apparatus of claim 26, wherein the source comprises a host controller.

28. The apparatus of claim 1, wherein the Ethernet controller selectively discards packets in response to packet receipt rate exceeding a predetermined threshold rate.

29. The apparatus of claim 1, wherein the security device selectively discards packets in response to packet receipt rate exceeding a predetermined threshold rate.

30. The apparatus of claim 1, wherein packets communicate commands to the security device based on the address.

31. The apparatus of claim 1, wherein the address comprises an IP address.

32. The apparatus of claim 1, wherein the address comprises a MAC address.

33. A system comprising:

a physical medium dependent device to perform optical-to-electrical signal conversion and electrical-to-optical signal conversion;

a physical medium attachment device to receive and provide signals with the physical medium dependent device and to perform media access control operations in compliance with Ethernet;

a security device to perform security related operations on received signals;

an Ethernet controller to perform media access control operations in compliance with Ethernet and comprising an interface to provide communications with the security device;

a host controller to receive and transmit signals with the Ethernet controller; and

a backplane interconnection to provide intercommunication at least among host controller and physical medium dependent device.

34. The system of claim 33, wherein the interface comprises a XAUI compatible interface.

35. The system of claim 33, wherein the Ethernet controller selectively inserts a programmable byte space among packets.

36. The system of claim 35, wherein the programmable byte space is based upon an inter-computer connection.

37. The system of claim 35, wherein the programmable byte space is based upon pre-determined information concerning a destination computer.

38. The system of claim 33, wherein the Ethernet controller selectively slows down transmission of packets to the security device in response to receipt of a message to slow down transmission.

39. The system of claim 33, wherein the security device transmits the message to slow down to the Ethernet controller in response to packets transmitted from the Ethernet controller to the security device exceeding a specified rate.

40. The system of claim 33, wherein the Ethernet controller selectively transmits a message to the host controller in response to the Ethernet controller receiving packets at a rate approximately the same or higher than a predetermined threshold rate and wherein the message comprises a message to slow packet transmission to the Ethernet controller.

41. The system of claim 33, wherein the Ethernet controller selectively discards packets in response to packet receipt rate exceeding a predetermined threshold rate.

42. The system of claim 33, wherein the security device selectively discards packets in response to packet receipt rate exceeding a predetermined threshold rate.

43. The system of claim 33, wherein the media access control device of the Ethernet controller and the PMA substantially do not perform the same operations.

44. The system of claim 33, wherein the host controller comprises logic to perform media access control in compliance with IEEE 802.3.

45. The system of claim 33, wherein the host controller comprises logic to perform optical transport network de-framing in compliance with ITU-T G.709.

46. The system of claim 33, wherein the host controller comprises logic to perform forward error correction processing in compliance with ITU-T G.975.

47. The system of claim 33, further comprising a switch fabric coupled to the backplane interconnection.

48. The system of claim 33, further comprising a packet processor coupled to the backplane interconnection.

49. A system comprising:

a physical medium dependent device to perform optical-to-electrical signal conversion and electrical-to-optical signal conversion;

a security device to receive and transmit signals with the physical medium dependent device and to perform security related operations on received signals;

an Ethernet controller to perform media access control operations in compliance with Ethernet and comprising an interface to provide communications with the security device;

a host controller to receive and transmit signals with the Ethernet controller; and

a backplane interconnection to provide intercommunication at least among host controller and physical medium dependent device.

50. The system of claim 49, wherein the interface comprises a XAUI compatible interface.

51. The system of claim 49, wherein the Ethernet controller selectively inserts a programmable byte space among packets.

52. The system of claim 51, wherein the programmable byte space is based upon an inter-computer connection.

53. The system of claim 51, wherein the programmable byte space is based upon pre-determined information concerning a destination computer.

54. The system of claim 49, wherein the Ethernet controller selectively slows down transmission of packets to the security device in response to receipt of a message to slow down transmission.

55. The system of claim 49, wherein the security device transmits the message to slow down to the Ethernet controller in response to packets transmitted from the Ethernet controller to the security device exceeding a specified rate.

56. The system of claim 49, wherein the Ethernet controller selectively transmits a message to the host controller in response to the Ethernet controller receiving packets at a rate approximately the same or higher than a predetermined threshold rate and wherein the message comprises a message to slow packet transmission to the Ethernet controller.

57. The system of claim 49, wherein the Ethernet controller selectively discards packets in response to packet receipt rate exceeding a predetermined threshold rate.

58. The system of claim 49, wherein the security device selectively discards packets in response to packet receipt rate exceeding a predetermined threshold rate.

59. The system of claim 49, wherein the host controller comprises logic to perform media access control in compliance with IEEE 802.3.

60. The system of claim 49, wherein the host controller comprises logic to perform optical transport network de-framing in compliance with ITU-T G.709.

61. The system of claim 49, wherein the host controller comprises logic to perform forward error correction processing in compliance with ITU-T G.975.

62. The system of claim 49, further comprising a switch fabric coupled to the backplane interconnection.

63. The system of claim 49, further comprising a packet processor coupled to the backplane interconnection.

64. A system comprising:

a security device to receive and transmit signals through a physical medium dependent device and to perform security related operations on received signals;

an Ethernet controller to perform media access control operations in compliance with Ethernet and comprising an interface to provide communications with the security device;

a host controller to receive and transmit signals with the Ethernet controller;

a backplane interconnection to provide intercommunication at least among host controller and physical medium dependent device; and

a switch fabric coupled to the backplane interconnection.

65. The system of claim 64, wherein the Ethernet controller comprises:

the physical medium dependent device to perform optical-to-electrical signal conversion and electrical-to-optical signal conversion; and

physical medium attachment to receive and provide signals with the physical medium dependent device and to perform media access control operations in compliance with Ethernet;

a media access control device to receive and provide signals with the physical medium attachment and to perform media access control operations in compliance with Ethernet; and

an extender sublayer to interconnect the security device with the media access control device and to provide communications between the media access control device and the security device.

66. The system of claim 64, wherein the interface comprises a XAUI compatible interface.

67. The system of claim 64, wherein the Ethernet controller selectively inserts a programmable byte space among packets.

68. The system of claim 67, wherein the programmable byte space is based upon an inter-computer connection.

69. The system of claim 67, wherein the programmable byte space is based upon pre-determined information concerning a destination computer.

70. The system of claim 64, wherein the Ethernet controller selectively slows down transmission of packets to the security device in response to receipt of a message to slow down transmission.

71. The system of claim 64, wherein the security device transmits the message to slow down to the Ethernet controller in response to packets transmitted from the Ethernet controller to the security device exceeding a specified rate.

72. The system of claim 64, wherein the Ethernet controller selectively transmits a message to the host controller in response to the Ethernet controller receiving packets at a rate approximately the same or higher than a predetermined threshold rate and wherein the message comprises a message to slow packet transmission to the Ethernet controller.

73. The system of claim 64, wherein the Ethernet controller selectively discards packets in response to packet receipt rate exceeding a predetermined threshold rate.

74. The system of claim 64, wherein the security device selectively discards packets in response to packet receipt rate exceeding a predetermined threshold rate.

75. The system of claim 64, wherein the host controller comprises logic to perform media access control in compliance with IEEE 802.3.

76. The system of claim 64, wherein the host controller comprises logic to perform optical transport network de-framing in compliance with ITU-T G.709.

77. The system of claim 64, wherein the host controller comprises logic to perform forward error correction processing in compliance with ITU-T G.975.

78. The system of claim 64, further comprising a packet processor coupled to the backplane interconnection.

79. A method comprising:

performing security related operations on received packets;

receiving security processed packets using a XAUI compatible interface;

performing media access control processing on received security processed packets;

performing media access control processing on transmit packets;

providing transmit packets for security processing using a XAUI compatible interface;

performing security related operations on provided transmit packets; and

selectively slowing down providing of packets for security processing in response to receipt of a message to slow down transmission,

wherein the securing related operations are performed by a security device having an associated unique address.

80. The method of claim 79, further comprising selectively inserting a programmable byte space among packets.

81. The method of claim 80, wherein the programmable byte space is based upon an inter-computer connection.

82. The method of claim 80, wherein the programmable byte space is based upon pre-determined information concerning a destination computer.

83. The method of claim 79, further comprising transmitting a message to slow down transmission of received security processed packets in response to received security processed packets exceeding a specified rate.

84. The method of claim 79, further comprising transmitting a message from an Ethernet controller to a source of packets in response to the Ethernet controller receiving packets from the source at a rate approximately the same or higher than a predetermined threshold rate and wherein the message comprises a message to slow packet transmission to the Ethernet controller.

85. The method of claim 84, wherein the source comprises a host controller.

86. The method of claim 79, further comprising selectively discarding received security processed packets in response to packet receipt rate exceeding a predetermined threshold rate.

87. The method of claim 79, further comprising selectively discarding packets provided for security processing in response to packet receipt rate exceeding a predetermined threshold rate.

88. The method of claim 79, wherein packets communicate commands to the security device based on the address.

89. The method of claim 88, wherein the address comprises an IP address.

90. The method of claim 88, wherein the address comprises a MAC address.