Method and system for a gigabit Ethernet IP telephone chip with integrated security module

• US 7,746,846 B2
• Filed: 06/13/2005
• Issued: 06/29/2010
• Est. Priority Date: 07/15/2004
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Boora, Balwinder, Shore, Paul, Li, Henry, Mueller, Stephen
• Primary Examiner(s): Cho; Hong
• Assistant Examiner(s): Choi; Eunsook
• Application Number:
  US11/151,614
• Publication Number:
  US 20060013199A1
• Time in Patent Office: 1,842 Days
• Field of Search: None
• US Class Current: 370/352
• CPC Class Codes: H04L 47/10 Flow control; Congestion control
• CPC Class Codes: H04L 47/2416 Real-time traffic
• CPC Class Codes: H04L 47/2433 Allocation of priorities to traffic types
• CPC Class Codes: H04L 47/2441 relying on flow classification, e.g. using integrated services [IntServ]
• CPC Class Codes: H04L 47/6215 Individual queue per QOS, rate or priority
• CPC Class Codes: H04L 49/352 Gigabit ethernet switching [GBPS]
• CPC Class Codes: H04L 49/355 Application aware switches, e.g. for HTTP
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04M 1/2535 adapted for voice communication over an Internet Protocol [IP] network Voice over Internet Protocol (VoIP) network equipment and services H04M7/006; implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP] H04L69/16
• CPC Class Codes: H04M 1/6033 for providing handsfree use or a loudspeaker mode in telephone sets arrangements for preventing acoustic echo H04M9/08
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Methods and systems for processing Ethernet data are disclosed and may comprise receiving Ethernet data via a single gigabit Ethernet IP telephone chip. A secure application key may be received from a secure server by an OSM integrated within the gigabit Ethernet IP telephone chip for processing the received Ethernet data. The received Ethernet data may be processed by the gigabit Ethernet IP telephone chip based on the received secure application key. A unique security identifier internal to the single gigabit Ethernet IP telephone chip may be communicated off-chip to the secure server. The unique security identifier may identify the single gigabit Ethernet IP telephone chip. The secure server may authenticate the gigabit Ethernet IP telephone chip based on the unique security identifier internal to the single gigabit Ethernet IP telephone chip, prior to the receiving of the secure application key.

Claims

1. A method for processing Ethernet data, the method comprising:

receiving Ethernet data via a single gigabit Ethernet IP telephone chip;

receiving from a secure server, at least one secure application key by an on-chip security module (OSM) integrated within said gigabit Ethernet IP telephone chip for processing said received Ethernet data, wherein said at least one secure application key is only communicated from said secure server to said gigabit Ethernet IP telephone chip; and

processing said received Ethernet data by said gigabit Ethernet IP telephone chip based on said received at least one secure application key.

2. The method according to claim 1, comprising communicating at least one unique security identifier internal to said single gigabit Ethernet IP telephone chip off-chip to said secure server, wherein said at least one unique security identifier identifies said single gigabit Ethernet IP telephone chip.

3. The method according to claim 2, wherein said secure server authenticates said gigabit Ethernet IP telephone chip based on said at least one unique security identifier internal to said single gigabit Ethernet IP telephone chip, prior to said receiving of said at least one secure application key.

4. The method according to claim 3, wherein said at least one unique security identifier is stored on-chip in said single gigabit Ethernet IP telephone chip.

5. The method according to claim 1, wherein said at least one secure application key comprises an encrypted application key.

6. The method according to claim 1, wherein said at least one secure application key is received via a secure link established between said single gigabit Ethernet IP telephone chip and said secure server.

7. The method according to claim 1, wherein said received at least one secure application key is authenticated via said secure server.

8. The method according to claim 1, comprising decrypting said received at least one secure application key by said OSM integrated within said gigabit Ethernet IP telephone chip.

9. The method according to claim 8, comprising decrypting at least a first portion of said received Ethernet data utilizing said decrypted at least one secure application key by said OSM integrated within said gigabit Ethernet IP telephone chip.

10. The method according to claim 1, comprising encrypting at least a second portion of said received Ethernet data utilizing at least a portion of said received at least one secure application key by said OSM integrated within said gigabit Ethernet IP telephone chip.

11. The method according to claim 1, wherein said received Ethernet data comprises one or both of network data and/or voice data.

12. A system for processing Ethernet data, the system comprising:

a single gigabit Ethernet IP telephone chip that receives Ethernet data;

an on-chip security module (OSM) integrated within said gigabit Ethernet IP telephone chip for processing said received Ethernet data, wherein said OSM receives from a secure server, at least one secure application key, wherein said at least one secure application key is only communicated from said secure server to said gigabit Ethernet IP telephone chip; and

said gigabit Ethernet IP telephone chip processes said received Ethernet data based on said received at least one secure application key.

13. The system according to claim 12, wherein:

said OSM communicates at least one unique security identifier internal to said single gigabit Ethernet IP telephone chip off-chip to said secure server, and said at least one unique security identifier identifies said single gigabit Ethernet IP telephone chip.

14. The system according to claim 13, wherein said secure server authenticates said gigabit Ethernet IP telephone chip based on said at least one unique security identifier internal to said single gigabit Ethernet IP telephone chip, prior to said receiving of said at least one secure application key.

15. The system according to claim 14, wherein said at least one unique security identifier is stored on-chip in said single gigabit Ethernet IP telephone chip.

16. The system according to claim 12, wherein said at least one secure application key comprises an encrypted application key.

17. The system according to claim 12, wherein said at least one secure application key is received via a secure link established between said single gigabit Ethernet IP telephone chip and said secure server.

18. The system according to claim 12, wherein said received at least one secure application key is authenticated via said secure server.

19. The system according to claim 12, wherein said OSM integrated within said gigabit Ethernet IP telephone chip decrypts said received at least one secure application key.

20. The system according to claim 19, wherein said OSM integrated within said gigabit Ethernet IP telephone chip decrypts at least a first portion of said received Ethernet data utilizing said decrypted at least one secure application key.

21. The system according to claim 12, wherein said OSM integrated within said gigabit Ethernet IP telephone chip encrypts at least a second portion of said received Ethernet data utilizing at least a portion of said received at least one secure application key.

22. The system according to claim 12, wherein said received Ethernet data comprises one or both of network data and/or voice data.