公开(公告)号：US06249739B1

公开(公告)日：2001-06-19

申请号：US09387349

申请日：1999-08-31

申请人： Lee P. Noehring ,  Bruce L. Fleming

发明人： Lee P. Noehring ,  Bruce L. Fleming

IPC分类号： G06F130

CPC分类号： G06F11/1441 ,  G06F1/305

摘要： A processor-based system in a vehicle may be quickly suspended to a lower power consumption state after detecting a signal indicative of engine cranking. Advantageously, the system may be caused to enter the lower power consumption state prior to the time that power is reduced as a result of engine cranking. If the operating system is active when the signal is detected, a routine may be called which causes device contexts to be saved before returning the system to a reduced power consumption state. Otherwise, if the operating system is inactive, an interrupt handler may be called which immediately returns the system to a reduced power consumption state. In this way, the system may be reliably restored to a lower power consumption state before being exposed to the power reduction inherent in engine cranking.

摘要翻译： 在检测到指示发动机起动的信号之后，车辆中的基于处理器的系统可以被快速地暂停到较低的功率消耗状态。 有利地，可以在由于发动机起动而减少功率的时间之前使系统进入较低的功率消耗状态。 如果在检测到信号时操作系统处于活动状态，则可能会调用一个程序，这样可以在将系统恢复到降低功耗状态之前保存设备上下文。 否则，如果操作系统不活动，则可以调用中断处理程序，该中断处理程序立即将系统返回到降低的功耗状态。 以这种方式，在暴露于发动机起动中固有的功率降低之前，系统可以可靠地恢复到较低的功率消耗状态。

公开(公告)号：US07958098B2

公开(公告)日：2011-06-07

申请号：US12558188

申请日：2009-09-11

申请人： Lee P. Noehring ,  Chad W. Mercer ,  Steve J. Brown

发明人： Lee P. Noehring ,  Chad W. Mercer ,  Steve J. Brown

IPC分类号： G06F17/30

CPC分类号： H04L63/0485 ,  H04L63/164 ,  Y10S707/99939 ,  Y10S707/99952

摘要： An apparatus and method for updating security association database entries in a system having multiple security channels by selectively granting access to the entries by a plurality of the multiple security channels that may need to update the same entry using a first-come, first-served scheme. The apparatus includes a controller circuit that functions to carry out the method which, for each of the multiple security channels, includes determining whether another of the security channels has a higher priority to access a particular security association database entry. If no other channel has a higher priority, then the channel requesting access to the entry retrieves it from its address location, modifies it, and writes the modified entry back to its address location. The controller prevents other channels from simultaneously, or substantially simultaneously, retrieving and modifying the same entry.

摘要翻译： 一种用于在具有多个安全通道的系统中更新安全关联数据库条目的装置和方法，其通过选择性地授予多个安全通道对条目的访问，所述多个安全通道可能需要使用先来先服务方案来更新相同条目 。 该装置包括控制器电路，其用于执行对于每个多个安全信道包括确定另一个安全信道是否具有访问特定安全关联数据库条目的较高优先级的方法。 如果没有其他信道具有较高的优先权，则请求访问该条目的信道从其地址位置检索它，修改它，并将修改的条目写回其地址位置。 控制器防止其他通道同时或基本上同时检索和修改相同的条目。

公开(公告)号：US07496748B2

公开(公告)日：2009-02-24

申请号：US09911149

申请日：2001-07-23

申请人： Chad W. Mercer ,  Lee P. Noehring

发明人： Chad W. Mercer ,  Lee P. Noehring

IPC分类号： H04L9/00

CPC分类号： H04L63/0485 ,  H04L63/061 ,  H04L63/164

摘要： A method for establishing a secure communication channel for information flow between two or more computers communicating via an interconnected computer network, and a system for implementing the method, in response to receiving a security association data structure from one of the computers. The received security association data structure is stored in a memory region having a specific memory address value, and the specific memory address value is assigned as the security parameter index value associated with the received inbound security association data structure. Additionally, a method of processing information received over a previously established secure communication channel, and a system for implementing the method, in response to receiving a data packet that includes an encrypted data portion, and a header portion that includes a security parameter index value. A memory region is located using the security parameter index value as an address pointer. The encrypted data portion of the received data packet is then processed based on a security association data structure stored in the located memory region.

摘要翻译： 响应于从所述计算机之一接收安全关联数据结构，建立用于经由互连计算机网络通信的两台或多台计算机之间的信息流的安全通信信道的方法和用于实现所述方法的系统。 接收到的安全关联数据结构存储在具有特定存储器地址值的存储器区域中，并且将特定存储器地址值分配为与接收的入站安全关联数据结构相关联的安全参数索引值。 此外，响应于接收到包括加密数据部分的数据分组，以及包括安全参数索引值的报头部分，处理通过先前建立的安全通信信道接收的信息的方法以及用于实现该方法的系统。 使用安全参数索引值作为地址指针定位存储器区域。 然后，基于存储在所定位的存储区域中的安全关联数据结构来处理所接收的数据分组的加密数据部分。

公开(公告)号：US08433691B2

公开(公告)日：2013-04-30

申请号：US13004778

申请日：2011-01-11

申请人： Lee P. Noehring ,  Chad W. Mercer ,  Steve J. Brown

发明人： Lee P. Noehring ,  Chad W. Mercer ,  Steve J. Brown

IPC分类号： G06F17/30

CPC分类号： H04L63/0485 ,  H04L63/164 ,  Y10S707/99939 ,  Y10S707/99952

摘要： An apparatus and method for updating security association database entries in a system having multiple security channels by selectively granting access to the entries by a plurality of the multiple security channels that may need to update the same entry using a first-come, first-served scheme. The apparatus includes a controller circuit that functions to carry out the method which, for each of the multiple security channels, includes determining whether another of the security channels has a higher priority to access a particular security association database entry. If no other channel has a higher priority, then the channel requesting access to the entry retrieves it from its address location, modifies it, and writes the modified entry back to its address location. The controller prevents other channels from simultaneously, or substantially simultaneously, retrieving and modifying the same entry.

公开(公告)号：US20100088288A1

公开(公告)日：2010-04-08

申请号：US12558188

申请日：2009-09-11

申请人： Lee P. Noehring ,  Chad W. Mercer ,  Steve J. Brown

发明人： Lee P. Noehring ,  Chad W. Mercer ,  Steve J. Brown

IPC分类号： G06F17/30

CPC分类号： H04L63/0485 ,  H04L63/164 ,  Y10S707/99939 ,  Y10S707/99952

摘要： An apparatus and method for updating security association database entries in a system having multiple security channels by selectively granting access to the entries by a plurality of the multiple security channels that may need to update the same entry using a first-come, first-served scheme. The apparatus includes a controller circuit that functions to carry out the method which, for each of the multiple security channels, includes determining whether another of the security channels has a higher priority to access a particular security association database entry. If no other channel has a higher priority, then the channel requesting access to the entry retrieves it from its address location, modifies it, and writes the modified entry back to its address location. The controller prevents other channels from simultaneously, or substantially simultaneously, retrieving and modifying the same entry.

摘要翻译： 一种用于在具有多个安全通道的系统中更新安全关联数据库条目的装置和方法，其通过选择性地授予多个安全通道对条目的访问，所述多个安全通道可能需要使用先来先服务方案来更新相同条目 。 该装置包括控制器电路，其用于执行对于每个多个安全信道包括确定另一个安全信道是否具有访问特定安全关联数据库条目的较高优先级的方法。 如果没有其他信道具有较高的优先权，则请求访问该条目的信道从其地址位置检索它，修改它，并将修改的条目写回其地址位置。 控制器防止其他通道同时或基本上同时检索和修改相同的条目。

公开(公告)号：US07194766B2

公开(公告)日：2007-03-20

申请号：US09880701

申请日：2001-06-13

申请人： Lee P. Noehring ,  Chad W. Mercer ,  David Cassetti ,  Michael Privett ,  Satish Anand

发明人： Lee P. Noehring ,  Chad W. Mercer ,  David Cassetti ,  Michael Privett ,  Satish Anand

IPC分类号： G06F9/00

CPC分类号： H04L63/0485 ,  H04L29/06 ,  H04L63/0236 ,  H04L63/0272 ,  H04L63/0428 ,  H04L63/08 ,  H04L63/10 ,  H04L63/164 ,  H04L63/20 ,  H04L69/04 ,  H04L69/12 ,  H04L69/22

摘要： A packet processing system is embodied on an ASIC is optimized for processing IPSec security protocol packets in a hardware configuration. Embedded RISC processors operate with hardware support modules providing for IPSec packet processing at OC24 data rates and greater. IPSec packets are received through a streaming interface and buffered in an external memory. When the entire packet is in external memory, portions are buffered in a local memory for crypto-processing. As portions of the packets complete processing, the portions are buffered to an output portion of the external memory associated with the channel. When an entire packet competes processing, portions are buffered to a local memory for streaming. The hardware accordingly reduces the involvement of the RISC processors and significantly increases channel throughput providing for high-speed IPSec packet processing.

摘要翻译： 分组处理系统体现在ASIC上，经过优化，用于处理硬件配置中的IPSec安全协议数据包。 嵌入式RISC处理器采用硬件支持模块，以OC24数据速率和更高的速度提供IPSec数据包处理。 IPSec数据包通过流接口接收并缓存在外部存储器中。 当整个数据包在外部存储器中时，部分缓冲在本地存储器中用于加密处理。 随着分组的一部分完成处理，这些部分被缓冲到与该信道相关联的外部存储器的输出部分。 当整个分组竞争处理时，部分被缓冲到本地存储器以进行流传输。 因此硬件相应地减少了RISC处理器的参与，并显着增加了提供高速IPSec数据包处理的信道吞吐量。

公开(公告)号：US20120311349A1

公开(公告)日：2012-12-06

申请号：US13487312

申请日：2012-06-04

申请人： Michael Dean Collins ,  Lee P. Noehring ,  Bryan Doi

发明人： Michael Dean Collins ,  Lee P. Noehring ,  Bryan Doi

IPC分类号： G06F21/00

CPC分类号： H04L9/06 ,  G09C1/00 ,  H04L2209/125

摘要： Methods and systems are provided for a programmable parallel computation and data manipulation accelerator that may be used, for example, in cryptographic calculations. They allow acceleration of a broad variety of cryptographic algorithms and/or portions of algorithms, and are not algorithm specific. This system comprises a butterfly and inverse butterfly multiplexing permuter network and a lookup table. This system may allow replication of input registers, “expansion,” so that an individual bit may be used in multiple calculations in parallel, accelerating completion of the cryptographic algorithm. The system may allow “diffusion” of the expanded bits through the system's butterfly and inverse butterfly network, and may provide for “confusion” of the resulting bits through the system's lookup table. In some implementations, the system may allow completion of a computation within an algorithm within one clock cycle.

摘要翻译： 提供了可用于例如加密计算中的可编程并行计算和数据操作加速器的方法和系统。 它们允许加速各种加密算法和/或算法的一部分，并且不具有算法特定性。 该系统包括蝴蝶和逆蝴蝶复用置换网络和查找表。 该系统可以允许复制输入寄存器，扩展，使得可以并行地在多个计算中使用单独的位，从而加速完成加密算法。 该系统可以允许扩展的比特扩展通过系统的蝶形和反向蝶形网络，并且可以通过系统的查找表来提供对结果比特的混淆。 在一些实现中，系统可以允许在一个时钟周期内在算法内完成计算。

公开(公告)号：US07613699B2

公开(公告)日：2009-11-03

申请号：US09921677

申请日：2001-08-03

申请人： Lee P. Noehring ,  Chad W. Mercer ,  Steve J. Brown

发明人： Lee P. Noehring ,  Chad W. Mercer ,  Steve J. Brown

IPC分类号： G06F17/30

CPC分类号： H04L63/0485 ,  H04L63/164 ,  Y10S707/99939 ,  Y10S707/99952

摘要： An apparatus and method for updating security association database entries in a system having multiple security channels by selectively granting access to the entries by a plurality of the multiple security channels that may need to update the same entry using a first-come, first-served scheme. The apparatus includes a controller circuit that functions to carry out the method which, for each of the multiple security channels, includes determining whether another of the security channels has a higher priority to access a particular security association database entry. If no other channel has a higher priority, then the channel requesting access to the entry retrieves it from its address location, modifies it, and writes the modified entry back to its address location. The controller prevents other channels from simultaneously, or substantially simultaneously, retrieving and modifying the same entry.

摘要翻译： 一种用于在具有多个安全通道的系统中更新安全关联数据库条目的装置和方法，其通过选择性地授予多个安全通道对条目的访问，所述多个安全通道可能需要使用先来先服务方案来更新相同条目 。 该装置包括控制器电路，其用于执行对于每个多个安全信道包括确定另一个安全信道是否具有访问特定安全关联数据库条目的较高优先级的方法。 如果没有其他信道具有较高的优先权，则请求访问该条目的信道从其地址位置检索它，修改它，并将修改的条目写回其地址位置。 控制器防止其他通道同时或基本上同时检索和修改相同的条目。

公开(公告)号：US09432180B2

公开(公告)日：2016-08-30

申请号：US13487312

申请日：2012-06-04

申请人： Michael Dean Collins ,  Lee P. Noehring ,  Bryan Doi

发明人： Michael Dean Collins ,  Lee P. Noehring ,  Bryan Doi

IPC分类号： H04L9/00 ,  H04L9/06 ,  G09C1/00

CPC分类号： H04L9/06 ,  G09C1/00 ,  H04L2209/125

摘要： Methods and systems are provided for a programmable parallel computation and data manipulation accelerator that may be used, for example, in cryptographic calculations. They allow acceleration of a broad variety of cryptographic algorithms and/or portions of algorithms, and are not algorithm specific. This system comprises a butterfly and inverse butterfly multiplexing permuter network and a lookup table. This system may allow replication of input registers, “expansion,” so that an individual bit may be used in multiple calculations in parallel, accelerating completion of the cryptographic algorithm. The system may allow “diffusion” of the expanded bits through the system's butterfly and inverse butterfly network, and may provide for “confusion” of the resulting bits through the system's lookup table. In some implementations, the system may allow completion of a computation within an algorithm within one clock cycle.

摘要翻译： 提供了可用于例如加密计算中的可编程并行计算和数据操作加速器的方法和系统。 它们允许加速各种加密算法和/或算法的一部分，并且不具有算法特定性。 该系统包括蝴蝶和逆蝴蝶复用置换网络和查找表。 该系统可以允许复制输入寄存器“扩展”，使得可以并行地在多个计算中使用单个位，加速加密算法的完成。 该系统可能允许通过系统的蝶形和逆向蝶形网络扩展位的“扩散”，并且可以通过系统的查找表来提供所得比特的“混淆”。 在一些实现中，系统可以允许在一个时钟周期内在算法内完成计算。

公开(公告)号：US20110119305A1

公开(公告)日：2011-05-19

申请号：US13004778

申请日：2011-01-11

申请人： Lee P. Noehring ,  Chad W. Mercer ,  Steve J. Brown

发明人： Lee P. Noehring ,  Chad W. Mercer ,  Steve J. Brown

IPC分类号： G06F17/30

CPC分类号： H04L63/0485 ,  H04L63/164 ,  Y10S707/99939 ,  Y10S707/99952

摘要： An apparatus and method for updating security association database entries in a system having multiple security channels by selectively granting access to the entries by a plurality of the multiple security channels that may need to update the same entry using a first-come, first-served scheme. The apparatus includes a controller circuit that functions to carry out the method which, for each of the multiple security channels, includes determining whether another of the security channels has a higher priority to access a particular security association database entry. If no other channel has a higher priority, then the channel requesting access to the entry retrieves it from its address location, modifies it, and writes the modified entry back to its address location. The controller prevents other channels from simultaneously, or substantially simultaneously, retrieving and modifying the same entry.

摘要翻译： 一种用于在具有多个安全通道的系统中更新安全关联数据库条目的装置和方法，其通过选择性地授予多个安全通道对条目的访问，所述多个安全通道可能需要使用先来先服务方案来更新相同条目 。 该装置包括控制器电路，其用于执行对于每个多个安全信道包括确定另一个安全信道是否具有访问特定安全关联数据库条目的较高优先级的方法。 如果没有其他信道具有较高的优先权，则请求访问该条目的信道从其地址位置检索它，修改它，并将修改的条目写回其地址位置。 控制器防止其他通道同时或基本上同时检索和修改相同的条目。