Patent ID: 7162630
Filing Date: 2007-01-09
Classification: H04L

Abstract:
1. A method for providing end-to-end security for communication between a first networked device and a second networked device, comprising: providing a first integrated circuit at said first networked device, said first integrated circuit including logic for substantially performing both TCP offloading and IPSec offloading on behalf of said first networked device; providing a second integrated circuit at said second networked device, said second integrated circuit including logic for substantially performing both TCP offloading and IPSec offloading on behalf of said second networked device; and routing said communication between said first networked device and said second networked device through said first integrated circuit and said second integrated circuit, thereby allowing said first integrated circuit and said second integrated circuit to perform substantial portions of both said TCP offloading and said IPSec offloading on behalf of said first networked device and said second networked device respectively, wherein said communication pertains to a long-lived connection between said first networked device and said second networked device, said long-lived connection represents a connection that stays open between said first networked device and said second networked device even if no data transfer occurs and wherein said IPSec offloading comprises IPSec security association, said first integrated circuit performs said IPSec security association on behalf of said first networked device, and wherein said IPSec security association is bounded such that only one encryption/decryption ahgorithm would be required for packets associated with said communication between said first networked device and said second networked device.