MACsec Implementation on Physical Layer Devices via Parallel MDIO Buses
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Implementing media access control security (MACsec) in traditional network systems is hindered by the limitations of the MDIO protocol, which restricts access to physical layer devices and causes bottlenecks, making it difficult to integrate security features like data confidentiality and integrity without replacing existing network hardware.
Innovation Solution
The system configures two MDIO buses operating in parallel between a central processing unit and a physical layer device, enabling indirect access to a MACsec function block with expanded register and memory space, allowing MACsec to be implemented on the physical layer device without altering existing network switches or controllers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If MACsec is implemented on layer 2 or layer 3 devices, then network security is improved, but existing network hardware must be replaced
Solution Approach 1:
The patent moves MACsec implementation from traditional layer 2/3 devices to physical layer devices, adding a new dimensional approach to security implementation. This allows security functionality to be integrated at the PHY layer without disrupting existing network infrastructure or requiring hardware replacements at higher layers.
Solution Approach 2:
The patent introduces an intermediary mechanism between the CPU and MACsec function block through extended MDIO bus access. This intermediary approach enables security functionality to be accessed and controlled through existing management interfaces without requiring direct hardware replacement or modification of core network devices.
2Ease of operation
If MDIO protocol is used to access physical layer devices, then device control is simplified, but access bottlenecks prevent MACsec integration
Solution Approach 1:
The patent segments the MDIO bus access into multiple parallel channels, allowing simultaneous access to different MACsec function blocks or registers. This segmentation eliminates the single-channel bottleneck while maintaining the simplicity of MDIO protocol operations.
Solution Approach 2:
The patent extends the MDIO protocol by adding new register spaces and memory access dimensions, allowing parallel and extended access pathways. This dimensional extension enables multiple CPUs or processing units to access MACsec functions simultaneously without contending for a single access channel.
3Adaptability or versatility
If MACsec function block with expanded register space is implemented, then security functionality is enhanced, but access complexity increases
Solution Approach 1:
The patent creates a universal access mechanism through extended MDIO bus that can access both traditional PHY registers and new MACsec function block registers through a unified interface. This multi-functional approach allows the same bus protocol to handle diverse security operations without increasing access complexity.
Solution Approach 2:
The MACsec function block is designed to be self-contained with its own dedicated register space and memory areas that can be accessed through standard MDIO procedures. The function block manages its own security operations autonomously, reducing the complexity of external control while maintaining enhanced functionality.
Data Source
AI summary
A media access control (MAC) security (MACsec) function block may implement MACsec protocols on a network. A physical layer device (PHY) may connect to the MACsec function block and an interface register configured to store command information for the MACsec function block. A central processing unit (CPU) may provide the command information for the MACsec function block to the PHY via a management data input/output (MDIO) bus. The PHY may execute either a read command or a write command against the MACsec function block based on the command information, receive, from the MACsec function block, a response corresponding to the execution of the read command or write command against the MACsec function block, and provide the response to the CPU via the MDIO bus.