Kernel mode accelerator
AssigneeOpenVPN Technologies, Inc.
InventorsFrancis DINHA, James Yonan
Life of this patent
Estimating the term…
Abstract
A system and method for disposing, in kernel space, a data plane having instructions operable to encrypt and transfer data over a network. The data plane is coupled to a control plane which resides in user space. The control plane has instructions operable to control the transfer of the encrypted data in kernel space. Certain embodiments include an application programming interface (API), which operates to expose a programming interface for encrypted communications which results in a more efficient data transfer because most of the data processing is done in kernel space.
Claims15
A method including the following:
- disposing, in kernel space, a data plane, said data plane including processor-readable instructions operable to encrypt and transfer data over a network;
- disposing, in user space, a control plane, said control plane including processor-readable instructions operable to control the transfer of the encrypted data;
- disposing, in user space, an application programming interface (API), said API operable to expose a programming interface for encrypted communications,
- wherein a substantial portion of the data transferred over the network is processed exclusively in the kernel space.
A device including:
- a processor, said processor coupled to a memory and a network, said memory having a substantially limited access kernel space portion, and a relatively more accessible user space portion;
- a control plane disposed in the user space;
- a data plane, said data plane disposed in the kernel space and operable to effectuate encryption and transfer of data in response to information from the control plane.
A processor-readable storage device having processor readable, non-transitory, code embodied on said storage device, said code for programming one or more processor to perform a method including:
- disposing, in kernel space, a data plane, said data plane including processor-readable instructions operable to encrypt and transfer data over a network;
- disposing, in user space, a control plane, said control plane including processor-readable instructions operable to control the transfer of the encrypted data;
- disposing, in user space, an application programming interface (API), said API operable to expose a programming interface for encrypted communications.
Dependencies are inferred from the claim text.