System and Method for Multi-PHY based MACsec over Secure Tunnels
AssigneeCisco Technology, Inc.
InventorsAnbu Chezhian Gunalan, Chennakesava Reddy Gaddam, Annu Singh, Wanli Wu, SushilKumar G. Jhawar
Life of this patent
Estimating the term…
Abstract
In an embodiment, a method includes receiving a data packet and generating an optimized security tag based on a standard security tag by replacing an 8-byte optional secure channel identifier (SCI) of the standard security tag with 32 most significant bits of a 4 packet number, a 2-byte MAC Security Entities (SecY) engine identifier, and a 2-byte short SCI. The method further includes encrypting the data packet and transmitting the encrypted data packet comprising the optimized security tag to an electronic device.
Claims21
1-20. (canceled)
A system, comprising:
- one or more processors;
- and
- one or more computer-readable non-transitory storage media comprising instructions that, when executed by the one or more processors, cause one or more components of a first electronic device to perform operations comprising:
- receiving, by the first electronic device, a data packet;
- generating, by the first electronic device, an optimized security tag based on a standard security tag by replacing an optional secure channel identifier (SCI) of the standard security tag with a plurality of bits of a packet number, a medium access control (MAC) Security Entities (SecY) engine identifier, and a short SCI;
- encrypting, by the first electronic device, the data packet;
- and
- transmitting, by the first electronic device, the encrypted data packet comprising the optimized security tag to a second electronic device.
A method, comprising:
- receiving, by a first electronic device, a data packet;
- generating, by the first electronic device, an optimized security tag based on a standard security tag by replacing an optional secure channel identifier (SCI) of the standard security tag with a plurality of bits of a packet number, a medium access control (MAC) Security Entities (SecY) engine identifier, and a short SCI;
- encrypting, by the first electronic device, the data packet;
- and
- transmitting, by the first electronic device, the encrypted data packet comprising the optimized security tag to a second electronic device.
A non-transitory computer-readable medium comprising instructions that are configured, when executed by a processor, to:
- receive, by a first electronic device, a data packet;
- generate, by the first electronic device, an optimized security tag based on a standard security tag by replacing an optional secure channel identifier (SCI) of the standard security tag with a plurality of bits of a packet number, a medium access control (MAC) Security Entities (SecY) engine identifier, and a short SCI;
- encrypt, by the first electronic device, the data packet;
- and
- transmit, by the first electronic device, the encrypted data packet comprising the optimized security tag to a second electronic device.
Dependencies are inferred from the claim text.