Computer network with modified host-to-host encryption keys

Claim 2

A computer network packet receiver, coupled to a first host computer and to a computer network from which data packets originated by other host computers are received, said computer network packet receiver comprising: key storage means for storing a master key; receiver means coupled to said computer network for receiving data packets, wherein each received data packet includes (A) a first, unencrypted portion in which is stored a buffer queue value corresponding to a memory address in said first host computer to which said data packet is to be delivered, (B) an encrypted host-to-host key, and (C) a second portion that is encrypted; logic means, coupled to said receiver means and said key storage means, for (A) extracting from each received data packet said buffer queue value, (B) decrypting with said master key said encrypted host-to-host key in said each received data packet, and (C) generating a corresponding decryption key by computing a predefined combination of (1) said extracted buffer queue value and (2) said decrypted host-to-host key for said each received data packet; packet processing means, coupled to said logic means, for decrypting said second portion of said each received data packet using said corresponding decryption key generated by said logic means, and for delivering said first portion and second decrypted second portion of said each received data packet to said memory address in said first host computer corresponding to said each received data packet's buffer queue value.

Claim 3

The network packet receiver of claim 1, each received data packet incorporating an embedded error checking value to enable error checking thereof; said packet processing means including means for error checking said each received data packet as it is delivered to said first host computer.

Claim 4

The network packet receiver of claim 1, each received data packet incorporating an embedded error checking value to enable error checking thereof; said packet processing means including pipelined decryption means and error checking means that, respectively, decrypt the encrypted portion of said each received data packet and error check said each received data packet as said each received data packet is delivered to said first host computer; wherein said packet processing means includes means for delivering portions of said each received data packet to said first host computer before said error checking means error checks other portions of said each received packet.

Claim 5

The network packet receiver of claim 1, wherein said logic means generates said corresponding decryption key by exclusive ORing said extracted buffer queue value with said decrypted host-to-host key for said each received data packet.

Claim 6

A computer network packet receiver, coupled to a first host computer and to a computer network from which data packets originated by other host computers are received, said computer network packet receiver comprising: key storage means for storing a distinct host-to-host key for each host computer from which said computer network packet receiver may receive data packets; receiver means coupled to said computer network for receiving data packets, wherein each received data packet includes (A) a first, unencrypted portion in which is stored source identifying data indicating which other host computer originated said data packet and a buffer queue value corresponding to a memory address in said first host computer to which said data packet is to be delivered, and (B) a second portion that is encrypted; logic means, coupled to said receiver means and said key storage means, for (A) extracting from each received data packet said buffer queue value, (B) retrieving from said key storage means the host-to-host key corresponding to the host computer that originated said each received data packet, and (C) generating a corresponding decryption key by computing a predefined combination of (1) said extracted buffer queue value and (2) said retrieved host-to-host key for said each received data packet; packet processing means, coupled to said logic means, for decrypting said second portion of said each received data packet using said corresponding decryption key generated by said logic means, and for delivering said first portion and second decrypted second portion of said each received data packet to said memory address in said first host computer corresponding to said each received data packet's buffer queue value.

Claim 7

A computer network packet receiver, coupled to a first host computer and to a computer network from which data packets originated by other host computers are received, said computer network packet receiver comprising: key storage means for storing a distinct host-to-host key for each host computer from which said computer network packet receiver may receive data packets; receiver means coupled to said computer network for receiving data packets, wherein each received data packet includes (A) a first, unencrypted portion in which is stored source identifying data indicating which other host computer originated said data packet and a buffer queue value corresponding to a memory address in said first host computer to which said data packet is to be delivered, and (B) a second portion that is encrypted; logic means, coupled to said receiver means and said key storage means, for (A) extracting from each received data packet said buffer queue value, (B) retrieving from said key storage means the host-to-host key corresponding to the host computer that originated said each received data packet, and (C) generating a corresponding decryption key by computing a predefined combination of (1) said extracted buffer queue value and (2) said retrieved host-to-host key for said each received data packet; packet processing means, coupled to said logic means, for decrypting said second portion of said each received data packet using said corresponding decryption key generated by said logic means, and for delivering said first portion and second decrypted second portion of said each received data packet to said memory address in said first host computer corresponding to said each received data packet's buffer queue value.

Claim 8

The network packet receiver of claim 5, each received data packet incorporating an embedded error checking value to enable error checking thereof; said packet processing means including means for error checking said each received data packet as it is delivered to said first host computer.

Claim 9

The network packet receiver of claim 5, each received data packet incorporating an embedded error checking value to enable error checking thereof; said packet processing means including pipelined decryption means and error checking means that, respectively, decrypt the encrypted portion of said each received data packet and error check said each received data packet as said each received data packet is delivered to said first host computer; wherein said packet processing means includes means for delivering portions of said each received data packet to said first host computer before said error checking means error checks other portions of said each received packet.

Claim 10

The network packet receiver of claim 5, wherein said logic means generates said corresponding decryption key by exclusive ORing said extracted buffer queue value with said retrieved host-to-host key for said each received data packet.

Claim 11

A computer network packet receiver, coupled to a first host computer and to a computer network from which data packets originated by other host computers are received, said computer network packet receiver comprising: means for establishing a host-to-host key for each host computer from which said computer network packet receiver may receive data packets; receiver means coupled to said computer network for receiving data packets, wherein each received data packet includes (A) a first, unencrypted portion in which is stored source identifying data indicating which other host computer originated said data packet and a buffer queue value corresponding to a memory address in said first host computer to which said data packet is to be delivered, and (B) a second portion that is encrypted; logic means, coupled to said receiver means and said key storage means, including means for extracting from each received data packet said buffer queue value, means for determining said established host-to-host key corresponding to the host computer that originated said each received data packet, and decryption key generating means for generating a corresponding decryption key by computing a predefined combination of (1) said extracted buffer queue value and (2) said determined host-to-host key for said each received data packet; packet processing means, coupled to said logic means, for decrypting said second portion of said each received data packet using said corresponding decryption key generated by said logic means, and for delivering said first portion and second decrypted second portion of said each received data packet to said memory address in said first host computer corresponding to said each received data packet's buffer queue value.

Claim 12

A computer network packet receiver, coupled to a first host computer and to a computer network from which data packets originated by other host computers are received, said computer network packet receiver comprising: means for establishing a host-to-host key for each host computer from which said computer network packet receiver may receive data packets; receiver means coupled to said computer network for receiving data packets, wherein each received data packet includes (A) a first, unencrypted portion in which is stored source identifying data indicating which other host computer originated said data packet and a buffer queue value corresponding to a memory address in said first host computer to which said data packet is to be delivered, and (B) a second portion that is encrypted; logic means, coupled to said receiver means and said key storage means, including means for extracting from each received data packet said buffer queue value, means for determining said established host-to-host key corresponding to the host computer that originated said each received data packet, and decryption key generating means for generating a corresponding decryption key by computing a predefined combination of (1) said extracted buffer queue value and (2) said determined host-to-host key for said each received data packet; packet processing means, coupled to said logic means, for decrypting said second portion of said each received data packet using said corresponding decryption key generated by said logic means, and for delivering said first portion and second decrypted second portion of said each received data packet to said memory address in said first host computer corresponding to said each received data packet's buffer queue value.

Claim 13

The network packet receiver of claim 9, wherein said logic means generates said corresponding decryption key by exclusive ORing said extracted buffer queue value with said determined host-to-host key for said each received data packet.

Claim 14

A computer system, comprising: a multiplicity of host computers, each host computer having a corresponding network controller that couples said host computer to a common computer network; means for establishing, for each pair of host computers of said multiplicity of host computers that will transmit data packets therebetween, a host-to-host encryption key; each network controller including packet transmitting means for transmitting data packets, originated by its corresponding host computer, to other ones of said multiplicity of host computers via said computer network, and packet receiving means coupled to said computer network for receiving data packets; wherein each transmitted data packet includes (A) a first, unencrypted portion in which is stored source identifying data indicating that said corresponding host computer originated said data packet and a buffer queue value corresponding to a memory address in a specified one of said multiplicity of host computers to which said data packet is to be delivered, and (B) a second portion that is encrypted; said packet transmitting means of said each network controller including means for encrypting said second portion of each data packet transmitted thereby using an encryption key comprising a predefined combination of (1) said transmitted data packet's buffer queue value and (2) said established host-to-host encryption key corresponding to the pair of host computers comprising said originating host computer and said specified one of said multiplicity of host computers to which said data packet is being transmitted; said packet receiving means of said each network controller including first logic means for extracting from each received data packet said buffer queue value, second logic means for determining said established host-to-host encryption key corresponding to the one of said multiplicity of host computers that originated said each received data packet, and decryption key generating means for generating a corresponding decryption key by computing said predefined combination of (1) said extracted buffer queue value and (2) said determined host-to-host encryption key for said each received data packet; said packet receiving means of said each network controller further including packet processing means, for decrypting said second portion of said each received data packet using said corresponding decryption key generated by said decryption key generating means, and for delivering said first portion and second decrypted second portion of said each received data packet to said memory address in said network controller's host computer corresponding to said each received data packet's buffer queue value.

Claim 15

A computer system, comprising: a multiplicity of host computers, each host computer having a corresponding network controller that couples said host computer to a common computer network; means for establishing, for each pair of host computers of said multiplicity of host computers that will transmit data packets therebetween, a host-to-host encryption key; each network controller including packet transmitting means for transmitting data packets, originated by its corresponding host computer, to other ones of said multiplicity of host computers via said computer network, and packet receiving means coupled to said computer network for receiving data packets; wherein each transmitted data packet includes (A) a first, unencrypted portion in which is stored source identifying data indicating that said corresponding host computer originated said data packet and a buffer queue value corresponding to a memory address in a specified one of said multiplicity of host computers to which said data packet is to be delivered, and (B) a second portion that is encrypted; said packet transmitting means of said each network controller including means for encrypting said second portion of each data packet transmitted thereby using an encryption key comprising a predefined combination of (1) said transmitted data packet's buffer queue value and (2) said established host-to-host encryption key corresponding to the pair of host computers comprising said originating host computer and said specified one of said multiplicity of host computers to which said data packet is being transmitted; said packet receiving means of said each network controller including first logic means for extracting from each received data packet said buffer queue value, second logic means for determining said established host-to-host encryption key corresponding to the one of said multiplicity of host computers that originated said each received data packet, and decryption key generating means for generating a corresponding decryption key by computing said predefined combination of (1) said extracted buffer queue value and (2) said determined host-to-host encryption key for said each received data packet; said packet receiving means of said each network controller further including packet processing means, for decrypting said second portion of said each received data packet using said corresponding decryption key generated by said decryption key generating means, and for delivering said first portion and second decrypted second portion of said each received data packet to said memory address in said network controller's host computer corresponding to said each received data packet's buffer queue value.

Claim 16

The computer system of claim 11, each said transmitted data packet incorporating an embedded error checking value to enable error checking thereof; each said packet receiving means including means for error checking said each received data packet as it is delivered to said network controller's host computer.

Claim 17

The computer system of claim 11, each said transmitted data packet incorporating an embedded error checking value to enable error checking thereof; said packet receiving means including pipelined decryption means and error checking means that, respectively, decrypt the encrypted portion of said each received data packet and error check said each received data packet as said each received data packet is delivered to said network controller's host computer; wherein said packet processing means includes means for delivering portions of said each received data packet to said first host computer before said error checking means error checks other portions of said each received packet.

Claim 18

The network packet receiver of claim 11, wherein said predefined combination of said extracted buffer queue value and said determined host-to-host encryption key for said each received data packet comprises said extracted buffer queue value exclusive ORed with said determined host-to-host key for said each received data packet.

Claim 21

The method of claim 15, said each received data packet incorporating an embedded error checking value to enable error checking thereof; said method further including: error checking said each received data packet as it is delivered to said first host computer; and delivering portions of said each received data packet to said first host computer before said error checking step error checks other portions of said each received packet.

Claim 22

The method of claim 15, said generating step including exclusive ORing said extracted buffer queue value with said decrypted host-to-host key for said each received data packet.

Claim 25

The method of claim 18, said each received data packet incorporating an embedded error checking value to enable error checking thereof; said method further including: error checking said each received data packet as it is delivered to said first host computer; and delivering portions of said each received data packet to said first host computer before said error checking step error checks other portions of said each received packet.

Claim 26

The method of claim 18, said generating step including exclusive ORing said extracted buffer queue value with said retrieved host-to-host key for said each received data packet.

Claim 29

The method of claim 21, said each received data packet incorporating an embedded error checking value to enable error checking thereof; said method further including; error checking said each received data packet as it is delivered to said first host computer; and delivering portions of said each received data packet to said first host computer before said error checking step error checks other portions of said each received packet.

Claim 30

The method of claim 21, said generating step including exclusive ORing said extracted buffer queue value with said determined host-to-host key for said each received data packet.

Claim 33

The method of claim 24, each said data packet incorporating an embedded error checking value to enable error checking thereof; said method further including: error checking each said received data packet as it is delivered; and delivering portions of each said received data packet to said first host computer before said error checking step error checks other portions of each said received packet.

Claim 34

The method of claim 24, said generating step including exclusive ORing said extracted buffer queue value with said determined host-to-host key for said each received data packet.