Method and apparatus of communicating security/encryption information to a physical layer transceiver

Abstract

An apparatus for providing link layer security in a Physical Layer Transceiver (PHY) is disclosed. In one embodiment, the apparatus may comprise analog circuitry configured to interface with a data transmission medium, digital circuitry configured to interface with a Media Access Controller (MAC); and a crypto engine coupled to the digital circuitry. Single interface and multiple interface schemes are provided to control both PHY and crypto functions. Embodiments are disclosed where the PHY controls the crypto device, and where the crypto device controls the PHY.

What is claimed is: 
     
         1 . An apparatus for providing link layer security comprising:
 a Physical Layer Transceiver (PHY) communication module configured to transmit data/control signals to, and receive data/control signals from, a Media Access Controller (MAC);   a crypto communications module including components configured to perform cryptographic functions on data associated with the MAC;   an interface link operatively coupling the PHY communication module to the crypto communications module, wherein at least some of the components configured to perform cryptographic functions are integrated with components of the PHY communication module;   
     
     
         2 . The apparatus of  claim 1 , wherein the PHY communication module comprises analog circuitry configured to transmit to, and receive data from, a data transmission medium. 
     
     
         3 . The apparatus of  claim 1 , wherein the crypto communications module further comprises a crypto engine at least partially integrated with the PHY communication module. 
     
     
         4 . The apparatus of  claim 1 , wherein the cryptographic functions include at least some of encrypting data received from the MAC, decrypting data prior to presentation to the MAC, and authenticating data. 
     
     
         5 . The apparatus of  claim 1 , further comprising a master communications module configured to communicate with both of the PHY communications module and the crypto communications module via the interface link. 
     
     
         6 . The apparatus of  claim 1 , wherein the PHY communications module is configured to provide connectivity through a MDIO/MDC interface, and the crypto communications module is configured to provide connectivity through an interface other than a MDIO/MDC interface. 
     
     
         7 . The apparatus of  claim 1 , wherein the PHY communications module is configured to drop traffic that does not pass the decryption or flag the traffic that does not pass the decryption for dropping by another module. 
     
     
         8 . The apparatus of  claim 1 , wherein he PHY controls the operation of the crypto communications module. 
     
     
         9 . The apparatus of  claim 1 , wherein the plurality of job executors comprises a plurality of threads.