Processing Multiple Wireless Communications Security Policies

Abstract

A computer program product for processing wireless data packets allows for processing packets to consolidate security processing. Security processing is performed in accordance with multiple security policies. This processing is done in a single front end processing block. Different security processes can be performed in parallel. Processing overhead is reduced by eliminating the need to redundantly check packet characteristics to assess the different security requirements imposed by security policies. Further, the present invention also substantially reduces the CPU cycles required to transport data back and forth from memory to a cryptographic coprocessor.

1 . A computer program product comprising a computer useable medium having computer program logic recorded thereon for enabling a processor to process a wirelessly-received data packet having a plurality of layers, comprising:
 a first function that enables a processor to process a first layer in accordance with a first protocol; and   a second function that enables a processor to process a second layer in accordance with a second protocol in parallel with processing of said first layer when processing of said first layers uncovers sufficient information to support processing of said second layer.   
   
   
       2 . A computer program product comprising a computer useable medium having computer program logic recorded thereon for processing a wirelessly-received data packet according to a plurality of security policies, comprising:
 a first function that enables a processor to receive the packet;   a second function that enables a processor to identify a first security policy;   a third function that enables a processor to process the packet according to the first security policy;   a fourth function that enables a processor to identify a second security policy when information associated with said identification of the second security policy becomes available; and   a fifth function that enables a processor to process the packet according to the second security policy, concurrently with third function.   
   
   
       3 . The computer program product of  claim 2 , wherein said third function comprises decryption of data in the packet. 
   
   
       4 . The computer program product of  claim 3 , wherein said decryption is performed according to the data encryption standard (DES). 
   
   
       5 . The computer program product of  claim 3 , wherein said decryption is performed according to the triple data encryption standard (3DES). 
   
   
       6 . The computer program product of  claim 3 , wherein said decryption is performed according to the ARC4 algorithm. 
   
   
       7 . The computer program product of  claim 2 , wherein said fifth function comprises decryption of data in the packet. 
   
   
       8 . The computer program product of  claim 7 , wherein said decryption is performed according to the DES. 
   
   
       9 . The computer program product of  claim 7 , wherein said decryption is performed according to the 3DES. 
   
   
       10 . The computer program product of  claim 7 , wherein said decryption is performed according to the ARC4 standard. 
   
   
       11 . The computer program product of  claim 2 , wherein said fifth function comprises authentication of the data packet. 
   
   
       12 . The computer program product of  claim 11 , wherein said authentication comprises application of the Multilayer Modular Hashing (MMH) algorithm. 
   
   
       13 . The computer program product of  claim 11 , wherein said authentication comprises application of the Hash-based Message Authentication Code (HMAC) Secure Hash Algorithm (SHA)-1. 
   
   
       14 . The computer program product of  claim 2 , wherein said fifth function comprises re-encryption of decrypted data from the packet. 
   
   
       15 . The computer program product of  claim 14 , wherein said re-encryption comprises encryption performed according to the Advanced Encryption Standard (AES).