Method and system for protecting data
AssigneeBroadcom Corporation
InventorAndrew Dellow
Life of this patent
Estimating the term…
Abstract
Methods and systems for protecting data may include controlling encryption and/or decryption and identifying a destination of corresponding encrypted and/or decrypted data, utilizing rules based on a source location of the data prior to the encryption or decryption and an algorithm that may have been previously utilized for encrypting and/or decrypting the data prior to the data being stored in the source location. The source location and/or destination of the data may comprise protected or unprotected memory. One or more of a plurality of algorithms may be utilized for the encryption and/or decryption. The rules may be stored in a key table, which may be stored on-chip, and may be reprogrammable. One or more keys for the encryption and/or decryption may be generated within the chip.
Claims20
A method comprising:
- storing a descriptor in a memory, wherein the descriptor comprises a first encryption/decryption algorithm and a key pointer identifying a key slot;
- storing the key slot in a key table, wherein the key slot comprises a second encryption/decryption algorithm and a key;
- encrypting or decrypting data using the first encryption/decryption algorithm, the second encryption/decryption algorithm, and the key.
A non-transitory computer readable medium storing instructions wherein the instructions when executed are configured to perform a method, wherein the method comprises:
- storing a descriptor in a memory, wherein the descriptor comprises a first encryption/decryption algorithm and a key pointer identifying a key slot;
- storing the key slot in a key table, wherein the key slot comprises a second encryption/decryption algorithm and a key;
- encrypting or decrypting data using the first encryption/decryption algorithm, the second encryption/decryption algorithm, and the key.
A system for data communication, comprising:
- a memory configured to store a descriptor;
- a chip storing a key table configured to store a key slot connected to the memory;
- a security logic block, connected to both the memory and the key table, configured to select a final encryption/decryption algorithm;
- and
- an encryption/decryption block, connected to the security logic block, the memory, and the key table, configured to generate an output data by encrypting/decrypting, an input data using the final encryption/decryption algorithm;
- wherein:
- the descriptor includes a first encryption/decryption algorithm and a key pointer;
- and
- the key slot includes a second encryption/decryption, algorithm and a key.
Dependencies are inferred from the claim text.