# US 12,223,068 B2 · Secure computing control method, data packet processing method and device and system thereof > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,223,068 B2 - Document ID: US12223068B2 - Status: Granted - Kind: B2 - Application number: 17/758,086 - Filed: 2020-12-22 - Published: 2023-02-02 - Granted: 2025-02-11 - Earliest claimed: 2019-12-31 - Assignees: Zte Corporation - Applicants: Zte Corporation - Inventors: Jie Liu; Haibo Wang; Guoqiang Wang; Yubin Xu - Web page: https://patentgrep.com/patent/US12223068B2 ## CPC - H04L 9/40: Network security protocols - G06F 21/606: {by securing the transmission between two devices or processes} - G06F 21/71: to assure secure computing or processing of information - G06F 21/72: in cryptographic circuits - H04L 49/90: Buffering arrangements - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 63/205: {involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A secure computing control method, a data packet processing method and device, and a system thereof are disclosed. The secure computing method may include: receiving a first data packet message for secure computing from a processor, the first data packet message including data packet information and secure computing configuration information corresponding to the data packet information; acquiring corresponding first data packet data from a memory according to the data packet information of the first data packet message; selecting a corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message; performing secure computing on the first data packet data by the selected security algorithm to generate secure computed second data packet data and a second data packet message corresponding to the second data packet data; transmitting the second data packet data to the memory; and transmitting the second data packet message to the processor. ## Claims ### Claim 1 A secure computing control method, comprising: receiving a first data packet message for secure computing from a processor, the first data packet message comprising data packet information and secure computing configuration information corresponding to the data packet information; acquiring corresponding first data packet data from a memory according to the data packet information of the first data packet message; selecting a corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message; performing secure computing on the first data packet data by means of the selected security algorithm to generate secure computed second data packet data and a second data packet message corresponding to the second data packet data; transmitting the second data packet data to the memory; and transmitting the second data packet message to the processor; wherein, the second data packet message comprises information about a data packet on which secure computing has been performed and secure computing processing information corresponding to the information about the data packet; wherein, the performing of secure computing on the first data packet data by means of the selected security algorithm comprises: performing secure computing on each piece of the first data packet data respectively, based on the message input queue according to the security algorithm corresponding to a respective one piece of first data packet data, which in turn comprises: allocating at least one idle secure computing spatial resource for secure computing in an order of the first data packet message in the input queue; and performing secure computing on each piece of the first data packet data respectively, according to the security algorithm corresponding to a respective one piece of first data packet data. ### Claim 2 (depends on 1) The secure computing control method of claim 1, wherein the receiving of the first data packet message for secure computing from a processor comprises: receiving at least one first data packet message for secure computing from the processer, and the at least one first data packet message forms a message input queue; and the transmitting of the second data packet message to the processor comprises: acquiring at least one second data packet message each corresponding to a respective one of the at least one first data packet message, forming the second data packet message into a message output queue, and transmitting the message output queue to the processor. ### Claim 3 (depends on 1) The secure computing control method of claim 1, wherein the data packet information of the first data packet message comprises segment information of a data packet, the first data packet data comprises segment data corresponding to the segment information, and the acquiring of corresponding first data packet data from the memory according to the data packet information of the first data packet message comprises: acquiring segment data of the corresponding data packet from the memory according to the segment information of the data packet, and splicing the segment data to generate data packet cache data. ### Claim 4 (depends on 3) The secure computing control method of claim 3, wherein the secure computing configuration information of the first data packet message comprises information of security algorithm to be selected, information of an order of processing by security algorithm, and security algorithm configuration information; the selecting of the corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message comprises: selecting and acquiring at least one corresponding security algorithm from the memory according to the secure computing configuration information corresponding to the first data packet message; and the performing of secure computing on the first data packet data by means of the selected security algorithm comprises: in response to one security algorithm being selected, performing single-stage secure computing, according to the secure computing configuration information, on the data packet cache data by means of the selected security algorithm, or in response to a plurality of security algorithms being selected, performing multi-stage secure computing, according to the secure computing configuration information and in the processing order of security algorithms, on the data packet cache data by means of the plurality of security algorithms. ### Claim 5 (depends on 1) The secure computing control method of claim 1, wherein the selecting the corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message comprises: selecting at least one corresponding security algorithm from the memory according to the secure computing configuration information corresponding to the first data packet message, and allocating each of the at least one security algorithm to a respective one of the at least one secure computing spatial resource. ### Claim 6 A secure computing control apparatus, comprising: a storage device, a processing unit and at least one computer program stored on the storage device and executable by the processing unit which, when executed by the processing unit, causes the processing unit to perform a secure computing control method comprising, receiving a first data packet message for secure computing from a processor, the first data packet message comprising data packet information and secure computing configuration information corresponding to the data packet information; acquiring corresponding first data packet data from a memory according to the data packet information of the first data packet message; selecting a corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message; performing secure computing on the first data packet data by means of the selected security algorithm to generate secure computed second data packet data and a second data packet message corresponding to the second data packet data; transmitting the second data packet data to the memory; and transmitting the second data packet message to the processor; wherein, the second data packet message comprises information about a data packet on which secure computing has been performed and secure computing processing information corresponding to the information about the data packet; and wherein, the performing of secure computing on the first data packet data by means of the selected security algorithm comprises: performing secure computing on each piece of the first data packet data respectively, based on the message input queue according to the security algorithm corresponding to a respective one piece of first data packet data, which in turn comprises: allocating at least one idle secure computing spatial resource for secure computing in an order of the first data packet message in the input queue; and performing secure computing on each piece of the first data packet data respectively, according to the security algorithm corresponding to a respective one piece of first data packet data. ### Claim 7 (depends on 6) The secure computing control apparatus of claim 6, wherein the receiving of the first data packet message for secure computing from a processor comprises: receiving at least one first data packet message for secure computing from the processer, and the at least one first data packet message forms a message input queue; the transmitting of the second data packet message to the processor comprises: acquiring at least one second data packet message each corresponding to a respective one of the at least one first data packet message, forming the second data packet message into a message output queue, and transmitting the message output queue to the processor. ### Claim 8 (depends on 6) The secure computing control apparatus of claim 6, wherein the data packet information of the first data packet message comprises segment information of a data packet, the first data packet data comprises segment data corresponding to the segment information, and the acquiring of corresponding first data packet data from the memory according to the data packet information of the first data packet message comprises: acquiring segment data of the corresponding data packet from the memory according to the segment information of the data packet, and splicing the segment data to generate data packet cache data. ### Claim 9 (depends on 8) The secure computing control apparatus of claim 8, wherein the secure computing configuration information of the first data packet message comprises information of security algorithm to be selected, information of an order of processing by security algorithm, and security algorithm configuration information; the selecting of the corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message comprises: selecting and acquiring at least one corresponding security algorithm from the memory according to the secure computing configuration information corresponding to the first data packet message; and the performing of secure computing on the first data packet data by means of the selected security algorithm comprises: in response to one security algorithm being selected, performing single-stage secure computing, according to the secure computing configuration information, on the data packet cache data by means of the selected security algorithm, or in response to a plurality of security algorithms being selected, performing multi-stage secure computing, according to the secure computing configuration information and in the processing order of security algorithms, on the data packet cache data by means of the plurality of security algorithms. ### Claim 10 (depends on 6) The secure computing control apparatus of claim 6, wherein the selecting the corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message comprises: selecting at least one corresponding security algorithm from the memory according to the secure computing configuration information corresponding to the first data packet message, and allocating each of the at least one security algorithm to a respective one of the at least one secure computing spatial resource. ### Claim 11 A non-transitory computer-readable storage medium, storing at least one computer program which, when executed by a processor, causes the processor to perform a secure computing control method comprising, receiving a first data packet message for secure computing from a processor, the first data packet message comprising data packet information and secure computing configuration information corresponding to the data packet information; acquiring corresponding first data packet data from a memory according to the data packet information of the first data packet message; selecting a corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message; performing secure computing on the first data packet data by means of the selected security algorithm to generate secure computed second data packet data and a second data packet message corresponding to the second data packet data; transmitting the second data packet data to the memory; and transmitting the second data packet message to the processor; wherein, the second data packet message comprises information about a data packet on which secure computing has been performed and secure computing processing information corresponding to the information about the data packet; and wherein, the performing of secure computing on the first data packet data by means of the selected security algorithm comprises: performing secure computing on each piece of the first data packet data respectively, based on the message input queue according to the security algorithm corresponding to a respective one piece of first data packet data, which in turn comprises: allocating at least one idle secure computing spatial resource for secure computing in an order of the first data packet message in the input queue; and performing secure computing on each piece of the first data packet data respectively, according to the security algorithm corresponding to a respective one piece of first data packet data. ### Claim 12 (depends on 11) The non-transitory computer-readable storage medium of claim 11, wherein the receiving of the first data packet message for secure computing from a processor comprises: receiving at least one first data packet message for secure computing from the processer, and the at least one first data packet message forms a message input queue; the transmitting of the second data packet message to the processor comprises: acquiring at least one second data packet message each corresponding to a respective one of the at least one first data packet message, forming the second data packet message into a message output queue, and transmitting the message output queue to the processor. ### Claim 13 (depends on 11) The non-transitory computer-readable storage medium of claim 11, wherein the data packet information of the first data packet message comprises segment information of a data packet, the first data packet data comprises segment data corresponding to the segment information, and the acquiring of corresponding first data packet data from the memory according to the data packet information of the first data packet message comprises: acquiring segment data of the corresponding data packet from the memory according to the segment information of the data packet, and splicing the segment data to generate data packet cache data. ### Claim 14 (depends on 13) The non-transitory computer-readable storage medium of claim 13, wherein the secure computing configuration information of the first data packet message comprises information of security algorithm to be selected, information of an order of processing by security algorithm, and security algorithm configuration information; the selecting of the corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message comprises: selecting and acquiring at least one corresponding security algorithm from the memory according to the secure computing configuration information corresponding to the first data packet message; and the performing of secure computing on the first data packet data by means of the selected security algorithm comprises: in response to one security algorithm being selected, performing single-stage secure computing, according to the secure computing configuration information, on the data packet cache data by means of the selected security algorithm, or in response to a plurality of security algorithms being selected, performing multi-stage secure computing, according to the secure computing configuration information and in the processing order of security algorithms, on the data packet cache data by means of the plurality of security algorithms. ### Claim 15 (depends on 11) The non-transitory computer-readable storage medium of claim 11, wherein the selecting the corresponding security algorithm according to the secure computing configuration information corresponding to the first data packet message comprises: selecting at least one corresponding security algorithm from the memory according to the secure computing configuration information corresponding to the first data packet message, and allocating each of the at least one security algorithm to a respective one of the at least one secure computing spatial resource.