Back to results
US 12,333,057 B2Granted
Security managers and methods for implementing security protocols in a reconfigurable fabric
OwnerDavid Hulton, Jeremy Chritzinventors
Life of this patent
Estimating the term…
Abstract
An apparatus, and a method therefore, are described, the apparatus according to one embodiment including a security manager and a plurality of clusters of processing elements. Each cluster of the plurality of clusters includes a respective plurality of processing elements. A controller of the apparatus, which may include a security manager, may be configured to control the plurality of clusters to receive a first data stream and a second data stream, control a first plurality of processing elements in a first cluster to process the first data stream using a first security protocol, and control a second plurality of processing elements in a second cluster to process the second data stream using a second security protocol.
Claims19
An apparatus comprising:
- a reconfigurable hardware platform comprising a plurality of processors, wherein the plurality of processors include respective pluralities of instructions execution units/accumulation units and memory lookup units;
- and
- a security manager configured to assign some of the plurality of processors to a first cluster and others of the plurality of processors to a second cluster, wherein the first cluster is configured to implement a first security protocol including a first type of encryption and the second cluster is configured to implement a second security protocol including a second type of encryption, the security manager further configured to examine an incoming data stream to determine a type of data included in the data stream, wherein the security manager is configured to assign the data stream to the first cluster in response to a determination that the data has a first type and to assign the data stream to the second cluster in response to a determination that the data has a second type, wherein the security manager is further configured to reassign processors from the first cluster to the second cluster, or vice versa, and wherein the security manager is configured to selectively restrict results outputted by the first cluster from being shared with the second cluster.
A method comprising:
- receiving, with a plurality of processors of a reconfigurable hardware platform, a data stream;
- assigning, with a security manager, some of the plurality of processors to a first cluster and others of the plurality of processors to a second cluster;
- configuring the first cluster to implement a first security protocol including a first type of encryption;
- configuring the second cluster to implement a second security protocol including a second type of encryption;
- determining a type of the data included in the data stream;
- assigning the data stream to the first cluster in response to a determination that the data has a first type, wherein the security manager selectively restricts results outputted by the first cluster from being shared with at least one other cluster;
- assigning the data stream to the second cluster in response to a determination that the data has as second type;
- and
- reassigning some of the plurality of processors from the first cluster to the second cluster, or vice versa.
6 more elements
An apparatus comprising:
- a reconfigurable hardware platform configured to receive a plurality of data streams, the reconfigurable hardware platform comprising a plurality of processors each assigned to one of a plurality of processor clusters;
- and
- a security manager configured to assign a data stream of the plurality of data streams to a first one of the plurality of processing clusters configured to implement a first security protocol including a first type of encryption in response to a determination that data of the data stream has a first type of data and to assign the data stream to a second one of the plurality of processing clusters configured to implement a second security protocol including a second type of encryption in response to a determination that data of the data stream has a second type of data, wherein each of the plurality of processing clusters is configured to implement a respective security protocol, wherein the security manager is configured to dynamically reassign a number of the plurality of processors from at least one processor cluster of the plurality of processor clusters to at least another processor cluster of the plurality of processor clusters based on processing the plurality of data streams, and wherein the security manager is configured to selectively restrict results outputted by one of the plurality of clusters from being shared with others of the plurality of clusters.
Dependencies are inferred from the claim text.