Patent ID: 7600131
Filing Date: 2009-10-06
Classification: G06F,H04L

Abstract:
1. A device, comprising: a distributor unit in the device that distributes a plurality of packets in a data flow between a source and the device and a set of security association information for each of the plurality of packets according to a distribution scheme, wherein the distributor unit is configured to store per-flow IPSec information for each of the plurality of packets and to update a portion of the per-flow IPSec information for each packet in the plurality of packets; and a plurality of security processing engines in the device, coupled to the distributor unit, configurable to perform authentication, encryption, or decryption functions, wherein each of the plurality of security processing engines receives a packet and at least a portion of the set of security association information associated with the packet, and wherein the plurality of security processing engines process the plurality of packets in parallel.