MACsec Core Architecture for Pre-Encryption Error Checking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing MACsec technologies do not effectively handle packet errors and bandwidth management, leading to inefficient use of buffer space and bandwidth due to encryption of invalid packets and potential corruption during transmission.
Innovation Solution
A MACsec core architecture with intelligent error handling and flow control management, including egress and ingress pipelines, that checks for packet errors before encryption and manages bandwidth expansion by dropping invalid packets and supporting CPU packet injection and ejection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If MACsec encryption is applied to all packets, then security is improved, but bandwidth efficiency deteriorates due to encryption of invalid packets
Solution Approach 1:
The patent applies preliminary error detection by checking CRC values before MACsec encryption is applied. The system detects invalid packets using CRC verification in advance, preventing wasted encryption operations on corrupted packets, thus improving bandwidth efficiency while maintaining security for valid packets.
2Reliability
If buffer space is allocated for all incoming packets, then packet loss is reduced, but buffer utilization efficiency deteriorates due to storage of invalid packets
Solution Approach 1:
The system performs preliminary CRC-based error detection before packets are buffered. Invalid packets are identified and excluded from buffer allocation through advance error checking, ensuring that buffer space is allocated only to valid packets that need to be transmitted, thus improving buffer utilization efficiency while preventing packet loss for valid data.
3Productivity
If error checking is performed after encryption, then encryption throughput is maintained, but transmission reliability deteriorates due to corruption of invalid packets
Solution Approach 1:
The patent implements preliminary error checking using CRC verification before the encryption process. This approach maintains encryption throughput by avoiding re-encryption of invalid packets while improving transmission reliability by preventing the propagation of corrupted data through the encryption pipeline and network transmission.
Data Source
AI summary
A Media Access Control Security (MACsec) core architecture implements flow control and bandwidth management when bandwidth is expanded internally due to encryption overhead and packet injection. External flow control requests are merged with internal flow control states and sent to a connected host.