DMA-Coupled Cryptographic Encryption for Low-Bandwidth Data Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Edge computing systems face challenges in managing secure data transfer with limited resources, leading to increased memory bandwidth overhead and potential bottlenecks due to conventional encryption methods like TLS/SSL requiring multiple touches of data in memory.
Innovation Solution
Implementing one-touch inline secure data management functions (SDMF) using a cryptographic engine to encrypt data inline during transfer, reducing memory touches and optimizing resource usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional encryption methods like TLS/SSL are used, then secure data transfer is achieved, but memory bandwidth overhead increases due to multiple touches of data in memory
Solution Approach 1:
The patent combines the cryptographic engine with the DMA engine to merge encryption operations with data transfer operations. This integration allows data to be encrypted inline during the transfer process itself, eliminating the need for separate encryption steps that would require additional memory accesses. The cryptographic engine is directly coupled to the DMA engine, enabling them to work as a unified system where encryption happens concurrently with data movement.
Solution Approach 2:
The patent introduces a secure data manager as an intermediary component that coordinates between the DMA engine and cryptographic engine. This mediator manages the encryption process by providing keys and control signals to the cryptographic engine while monitoring the data transfer operations of the DMA engine. The secure data manager enables the system to achieve secure data transfer with minimal memory bandwidth overhead by orchestrating inline encryption without requiring additional memory touches.
2Reliability
If security support is added to edge computing services, then data privacy requirements are improved, but overhead in terms of memory bandwidth and resources increases
Solution Approach 1:
The patent merges the cryptographic engine with the DMA engine to combine security functions with existing data transfer infrastructure. This integration ensures that encryption capabilities are built into the data path itself rather than being added as a separate layer, thereby meeting data privacy requirements without proportionally increasing resource overhead. The cryptographic operations are performed inline during data transfer, utilizing the same hardware resources efficiently.
3Reliability
If multiple touches of data in memory are used for encryption, then secure data transfer is achieved, but latency increases
Solution Approach 1:
The patent enables continuous data transfer and encryption operations by integrating the cryptographic engine with the DMA engine. Data flows continuously through the system being encrypted inline during transfer rather than being stopped for separate encryption processing. This continuous operation maintains high throughput and minimizes latency while ensuring secure data transfer, as the encryption happens concurrently with the data movement rather than sequentially.
Data Source
AI summary
A computing device includes a direct memory access (DMA) engine coupled to a memory, a network interface, and processing circuitry. The processing circuitry is to perform a secure exchange with a second computing device to negotiate a shared encryption key, based on a request for data received via the network interface from the second computing device. The DMA engine is to retrieve the data from a storage location based on an encryption command. The encryption command indicates the storage location. The DMA engine is to encrypt the data based on the shared encryption key to generate encrypted data, and store the encrypted data in the memory.