Patent ID: 11936635
Assignee: EMC IP HOLDING COMPANY LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A data encryption method implemented at an edge switch, comprising:
receiving an encryption and/or decryption service request from a source device;
determining whether or not the edge switch can perform at least one of an encryption operation and a decryption operation in accordance with the encryption and/or decryption service request received from the source device;
responsive to determining that the edge switch can perform at least one of the encryption operation and the decryption operation in accordance with the encryption and/or decryption service request, sending a corresponding encryption and/or decryption service response to the source device;
receiving encryption and/or decryption information for the encryption operation and/or the decryption operation from the source device, in response to the encryption and/or decryption service response from the edge switch, the encryption and/or decryption information comprising a key, a lookup table and one or more network addresses of one or more target devices;
receiving a data packet from the source device;
encrypting the data packet received from the source device based on encryption information in the encryption and/or decryption information to generate an encrypted data packet; and
sending the encrypted data packet to a target device indicated by the data packet, utilizing a corresponding one of the one or more network addresses previously supplied by the source device as part of the encryption and/or decryption information;
wherein the source device is an Internet of Things (IoT) device, the target device is a server, and the edge switch is disposed in proximity to the IoT device;
wherein the edge switch comprises (i) a programmable switch configured to perform the encryption operation and/or the decryption operation for each of a plurality of communications between the IoT device and the server, and (ii) at least one register for storing one or more results of the encryption operation and/or the decryption operation; and
wherein encrypting the data packet comprises:
acquiring at least one of the key and the lookup table from the encryption and/or decryption information; and
performing encryption on the data packet based on the at least one of the key and the lookup table.