US5594869A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for end-to-end encryption of a data packet in a computer network
Assignee: Hewlett Packard Development Co LP
•
Filing: 1995-05-01
•
Granted: 1997-01-14
•
Expires: 2015-05-01
Abstract
Abstract A technique to facilitate decryption processing of information packets transmitted over a communication network after encryption in accordance with a specific network protocol, the details of which may be subject to later change as standards are developed or modified. Programmable registers are used in the decryption process to hold information for identifying an incoming information packet as being subject to the specific protocol and requiring decryption, and identifying a starting location of a data field to be decrypted. Specifically one programmable register contains a first offset locating an identifier field in the packet, in which a cryptographic identifier will be found if the packet is one conforming to the protocol; another programmable register contains a cryptographic identifier value that will be found in the identifier field if decryption is to be performed, and a third programmable register contains a second offset to locate the beginning of a data field to be decrypted.
Inventors
- 👤 William R. Hawe
- 👤 Butler W. Lampson
- 👤 Amar Gupta
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 15:18
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L63/0485; H04L63/12; H04L9/00; H04L9/40; H04L63/16; H04L63/162
Claims Analysis
Total Claims: 12
Claim 1
Independent Claim
155 words
A method of processing a packet received from a network, comprising the steps of: storing in a programmable register a protocol identifier corresponding to a particular protocol whose packets require decryption and a data offset value indicating the starting location of encrypted message data relative to a header in said packets; comparing the stored protocol identifier with the contents of a field in the received packet to determine whether the received packet belongs to the particular protocol; selecting data beginning at the indicated starting location in the received packet for decryption if the received packet belongs to the particular protocol; and decrypting the selected data; wherein the method further comprises the steps of: storing in said programmable register an identifier offset value indicating the location of a protocol identifier value relative to said header; and selecting for use in the comparing step the field at the indicated protocol identifier value location in the received packet.
Claim 2
Independent Claim
155 words
A method of processing a packet received from a network, comprising the steps of: storing in a programmable register a protocol identifier corresponding to a particular protocol whose packets require decryption and a data offset value indicating the starting location of encrypted message data relative to a header in said packets; comparing the stored protocol identifier with the contents of a field in the received packet to determine whether the received packet belongs to the particular protocol; selecting data beginning at the indicated starting location in the received packet for decryption if the received packet belongs to the particular protocol; and decrypting the selected data; wherein the method further comprises the steps of: storing in said programmable register an identifier offset value indicating the location of a protocol identifier value relative to said header; and selecting for use in the comparing step the field at the indicated protocol identifier value location in the received packet.
Claim 3
Dependent Claim
154 words
A network interface, comprising: a programmable register to store a protocol identifier corresponding to a particular protocol whose packets require decryption and a data offset value indicating the starting location of encrypted message data relative to a header in said packets; means for comparing the stored protocol identifier with the contents of a field in the received packet to determine whether the received packet belongs to the particular protocol; means for selecting data beginning at the indicated starting location in the received packet for decryption if the received packet belongs to the particular protocol; and means for decrypting the selected data; wherein the network interface further comprises: said programmable register also stores an identifier offset value indicating the location of a protocol identifier value relative to said header; and means for selecting the field at the indicated protocol identifier value location in the received packet and providing the selected field to the comparing means.
Claim 4
Dependent Claim
154 words
A network interface, comprising: a programmable register to store a protocol identifier corresponding to a particular protocol whose packets require decryption and a data offset value indicating the starting location of encrypted message data relative to a header in said packets; means for comparing the stored protocol identifier with the contents of a field in the received packet to determine whether the received packet belongs to the particular protocol; means for selecting data beginning at the indicated starting location in the received packet for decryption if the received packet belongs to the particular protocol; and means for decrypting the selected data; wherein the network interface further comprises: said programmable register also stores an identifier offset value indicating the location of a protocol identifier value relative to said header; and means for selecting the field at the indicated protocol identifier value location in the received packet and providing the selected field to the comparing means.
Claim 5
Independent Claim
161 words
A method of processing a packet received from a network, comprising the steps of: storing in a storage element a protocol identifier corresponding to a particular protocol whose packets require decryption, and a data location value indicating the starting location of encrypted message data therein; comparing the stored protocol identifier with the contents of a field in the received packet to determine whether the received packet belongs to the particular protocol; selecting data whose beginning location in the received packet is indicated by the stored data location value for decryption if it is determined that the received packet belongs to the particular protocol; and decrypting the selected data; wherein the method further comprises the steps of: storing in said storage element an identifier offset value indicating the location of a protocol identifier value relative to said packets; and selecting for use in the comparing step said field whose location in the received packet is indicated by the stored identifier location value.
Claim 6
Independent Claim
161 words
A method of processing a packet received from a network, comprising the steps of: storing in a storage element a protocol identifier corresponding to a particular protocol whose packets require decryption, and a data location value indicating the starting location of encrypted message data therein; comparing the stored protocol identifier with the contents of a field in the received packet to determine whether the received packet belongs to the particular protocol; selecting data whose beginning location in the received packet is indicated by the stored data location value for decryption if it is determined that the received packet belongs to the particular protocol; and decrypting the selected data; wherein the method further comprises the steps of: storing in said storage element an identifier offset value indicating the location of a protocol identifier value relative to said packets; and selecting for use in the comparing step said field whose location in the received packet is indicated by the stored identifier location value.
Claim 7
Dependent Claim
35 words
A method according to claim 3, wherein said storing step further comprises the steps of: storing said protocol identifier in a first programmable register; and storing said data location value in a second programmable register.
Claim 8
Dependent Claim
56 words
A method according to claim 4, further comprising the steps of: storing in a third programmable register an identifier location value indicating the location of a protocol identifier value in said packets; and selecting for use in the comparing step a field whose location in the received packet is indicated by the stored indentifier location value.
Claim 9
Dependent Claim
156 words
A network interface, comprising: a storage element to store a protocol identifier corresponding to a particular protocol whose packets require decryption, and a data location value indicating the starting location of encrypted message data therein; means for comparing the stored protocol identifier with the contents of a field in the received packet to determine whether the received packet belongs to the particular protocol; means for selecting data whose beginning location in the received packet is indicated by the stored data location value for decryption if it is determined that the received packet belongs to the particular protocol; and means for decrypting the selected data; wherein the network interface further comprises: said storage element also stores an identifier offset value indicating the location of a protocol identifier value in said packets; and means for selecting for use by said comparing means said field whose location in the received packet is indicated by the stored identifier location value.
Claim 10
Dependent Claim
156 words
A network interface, comprising: a storage element to store a protocol identifier corresponding to a particular protocol whose packets require decryption, and a data location value indicating the starting location of encrypted message data therein; means for comparing the stored protocol identifier with the contents of a field in the received packet to determine whether the received packet belongs to the particular protocol; means for selecting data whose beginning location in the received packet is indicated by the stored data location value for decryption if it is determined that the received packet belongs to the particular protocol; and means for decrypting the selected data; wherein the network interface further comprises: said storage element also stores an identifier offset value indicating the location of a protocol identifier value in said packets; and means for selecting for use by said comparing means said field whose location in the received packet is indicated by the stored identifier location value.
Claim 11
Dependent Claim
33 words
A network interface according to claim 6, wherein said storage element further comprises: a first programmable register to store said protocol identifier; and a second programmable register to store said data location value.
Claim 12
Dependent Claim
56 words
A network interface according to claim 7, further comprising: a third programmable register to store an indentifier location value indicating the location of a protocol identifier value in said packet; and means for selecting for use by said comparing means said field whose location in the received packet is indicated by the stored identifier location value.
References Cited (Backward Citations)
US4438824A
Cited
US4905277A
Cited
US4588991A
Cited
US4882779A
Cited
US4803725A
Cited
US4943978A
Cited
US4882751A
Cited
GB2200818A
Cited
EP0279232A2
Cited
US4933969A
Cited
EP0289248A2
Cited
US4995080A
Cited
US5048087A
Cited
US5029206A
Cited
US5235644A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-01-14 | 2000-07-15 | 2001-01-14 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-01-14 | 2004-07-15 | 2005-01-14 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-01-14 | 2008-07-15 | 2009-01-14 | $7700.00 | Window Closed / Lapsed |