公开(公告)号：EP1016310A1

公开(公告)日：2000-07-05

申请号：EP98950622.5

申请日：1998-09-14

申请人： Celotek Corporation

发明人： WINKELSTEIN, Daniel, R. ,  STEVENSON, Daniel, S. ,  HILLERY, Nathan, H. ,  BYRD, Gregory, T.

IPC分类号： H04Q11/04

CPC分类号： H04Q11/0478 ,  H04L2012/5673 ,  H04L2012/5687

摘要： A communications system employing sending and receiving cryptographic units provides transparent security for digital communications in Asynchronous Transfer Mode Networks. Each cryptographic unit is placed between the untrusted network and a secure host or LAN. The cryptographic unit replaces the cleartext packet with encrypted text, and manages all keys between sender and receiver so as to be transparent to the user. Plural virtual circuits, each with distinct cryptographic state information, are processed in real time. Packet cryptographic processing time is reduced by ordering a list of active virtual circuits and using a binary search to lookup cryptographic state information for each virtual circuit. In addition, triple DES encryption and decryption is implemented in a pipelined data flow architecture using multiple FIFO storage for algorithmic key agility permitting both triple and single DES operations using the same cryptographic unit.