Patent ID: 9596076
Date: 2017-03-14
CPC Classifications: G06F,H04L

Claim:
1. A method for encrypting data exchanged between two computer systems with a network encryption key, the computer systems each comprising one or more processing units and a memory and at least one of the computer systems comprising at least one crypto unit, the method comprising: accessing content of a memory on one of the computer systems via a memory address, the accessing by at least one of the processing units of one of the computer systems; based on the accessing being a write operation, encrypting the content of the memory using a memory encryption key, the encrypting by a crypto unit of the at least one of the processing units; based on the accessing being a read operation, decrypting the content of the memory using the same memory encryption key, the decrypting by a crypto unit of the at least once of the processing units; establishing remote direct memory access via memory addresses between the computer systems, the establishing including at least one of the computer systems locally storing a respective network encryption key as memory encryption keys for memory areas used for the data exchange; based on storing new data to the memory: based on encrypted data on the memory of one of the computer systems being accessed by one of the processing units via a cache, the cache decrypting the data via the crypto unit of the respective computer system using the network encryption key stored in its memory key table.