Method and system for an electronic device with integrated security module

Patent metadata

Field	Value
Publication number	US-9118649-B2
Application number	US-201314025940-A
Country	US
Kind code	B2
Filing date	Sep 13, 2013
Priority date	Jul 15, 2004
Publication date	Aug 25, 2015
Grant date	Aug 25, 2015

Abstract

Methods and systems for processing Ethernet data are disclosed and may comprise receiving Ethernet data via a single gigabit Ethernet IP telephone chip. A secure application key may be received from a secure server by an OSM integrated within the gigabit Ethernet IP telephone chip for processing the received Ethernet data. The received Ethernet data may be processed by the gigabit Ethernet IP telephone chip based on the received secure application key. A unique security identifier internal to the single gigabit Ethernet IP telephone chip may be communicated off-chip to the secure server. The unique security identifier may identify the single gigabit Ethernet IP telephone chip. The secure server may authenticate the gigabit Ethernet IP telephone chip based on the unique security identifier internal to the single gigabit Ethernet IP telephone chip, prior to the receiving of the secure application key.

First claim

What is claimed is:

1. A method, comprising:
receiving, by an Ethernet IP telephone chip, a plurality of data packets via at least one Ethernet physical interface transceiver (PHY) integrated within the Ethernet IP telephone chip;
transmitting, by the Ethernet IP phone chip, a unique identifier of an on chip security module integrated within the Ethernet IP telephone chip to a server; and
receiving, by the Ethernet IP telephone chip, a secure application key from the server for processing of the plurality of data packets, wherein the secure application key is sent from the server in response to an authentication of the Ethernet IP telephone chip using the unique identifier on the server.

2. The method of claim 1 , further comprising processing, by the Ethernet IP telephone chip, the plurality of data packets received by the Ethernet IP telephone chip utilizing at least the secure application key.

3. The method of claim 2 , wherein the processing, by the Ethernet IP telephone chip, of the plurality of data packets is conducted in a security module within the Ethernet IP telephone chip.

4. The method of claim 1 , wherein the plurality of data packets comprise video data, voice data, or a combination thereof.

5. The method of claim 1 , wherein the unique identifier is stored in memory within the Ethernet IP telephone chip.

6. The method of claim 1 , wherein the Ethernet IP telephone chip is a single gigabit Ethernet IP telephone chip.

7. The method of claim 1 , wherein the secure application key is received via a secure link established between the Ethernet IP telephone chip and the server.

8. The method of claim 1 , wherein the security module is configured to decrypt the plurality of data packets according to a predefined decryption

9. An Ethernet IP telephone chip, comprising:
circuitry configured to
receive a plurality of data packets via at least one Ethernet physical interface transceiver (PHY) integrated within the Ethernet IP telephone chip;
transmit a unique identifier of an on chip security module integrated within the Ethernet IP telephone chip to a server; and
receive a secure application key from the server for processing of the plurality of data packets, wherein the secure application key is sent from the server in response to an authentication of the Ethernet IP telephone chip using the unique identifier on the server. algorithm.

10. The Ethernet IP telephone chip of claim 9 , wherein the unique identifier is stored in memory within the Ethernet IP telephone chip.

11. The Ethernet IP telephone chip of claim 9 , wherein the circuitry is configured to process the plurality of data packets utilizing at least the secure application key.

12. The Ethernet IP telephone chip of claim 11 , further comprising:
a security module configured to process the plurality of data packets.

13. The Ethernet IP telephone chip of claim 9 , wherein the plurality of data packets comprise video data, voice data, or a combination thereof.

14. The Ethernet IP telephone chip of claim 9 , wherein the Ethernet IP telephone chip is a single gigabit Ethernet IP telephone chip.

15. The Ethernet IP telephone chip of claim 9 , wherein the secure application key is received via a secure link established between the Ethernet IP telephone chip and the server.

16. The Ethernet IP telephone chip of claim 9 , wherein the circuitry is configured to decrypt the plurality of data packets according to a predefined decryption algorithm.

17. A non-transitory computer-readable medium comprising computer readable instructions, which when executed by an Ethernet IP telephone chip, cause the Ethernet IP telephone chip to:
receive a plurality of data packets via at least one Ethernet physical interface transceiver (PHY) integrated within the Ethernet IP telephone chip;
transmit a unique identifier of an on chip security module integrated within the Ethernet IP telephone chip to a server; and
receive a secure application key from the server for processing of the plurality of data packets, wherein the secure application key is sent from the server in response to an authentication of the Ethernet IP telephone chip using the unique identifier on the server.

18. The non-transitory computer-readable medium of claim 17 , further comprising:
processing the plurality of data packets utilizing at least the secure application key.

19. The non-transitory computer-readable medium of claim 17 , further comprising:
processing the plurality of data packets within a security module of the Ethernet IP telephone chip.

Assignees

• Broadcom Corp

Inventors

• Boora Balwinder
• Li Henry
• Shore Paul
• Mueller Stephen

Classifications

• H04L47/10 Primary

  Flow control; Congestion control · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04W88/02

  Terminal devices · CPC title

• H04L47/2433

  Allocation of priorities to traffic types · CPC title

• H04L49/355

  Application aware switches, e.g. for HTTP · CPC title