Data encryption integrated circuit with on-board dual-use memory

[0002] 1. Field of the Invention

[0003] The invention relates to data communications interface IC chips for personal computers. More specifically, the present invention relates to an IC chip that functions both as the interface circuit to a host computer and for encryption/decryption of datagrams to and from the host.

[0004] 2. The Background Art

[0005] Data encryption systems fall into two general categories: systems based on public-key (or asymmetric) algorithms and systems using symmetric algorithms. Public-key algorithms use a public/private key pair with one key used for encryption and the other for decryption. In most symmetric algorithms, the encryption key and the decryption key are the same. Public-key and symmetric encryption systems are used to solve different types of data security problems. Symmetric-key encryption, for example, is generally faster and often used to encrypt large amounts of data while public-key encryption is more popular when key management is an issue.

[0006] Data encryption may be used to secure data before it is transmitted across an insecure communications link. An encryption device at one end of a communications link encrypts the data, and possibly routing and protocol information, before the data is transmitted across an insecure data link. In a symmetric key encryption system, users at the other end of the communication link must have a device that decrypts the data using the same encryption algorithm and a common key.

[0007] Data encryption devices may be in the form of software installed in a conventional processing system or specialized hardware such as, for example, encryption modules or chips, dedicated encryption boxes, or encryption boards that plug into personal computers. Specialized hardware is generally faster, more secure, and easier to install than software-based encryption. Encryption is a computation-intensive task which is generally more efficient when performed by a specially-designed chip. Additionally, encryption algorithms implemented in hardware may be securely encapsulated to be tamperproof. Furthermore, it is easier and often more cost-effective to design secure telephones, fax machines, and communications equipment with special purpose encryption hardware than with an added microprocessor and encryption software.

[0008] There exist a number of publicly available cryptographic algorithms suitable for use with special-purpose encryption hardware for data encryption. The Data Encryption Standard (DES), for example, is a symmetric block cipher that encrypts data in 64-bit blocks using the same 56-bit key that is used for decryption. Triple-DES, or 3DES, is simply encryption with DES and three different keys, thus making an effective key length of 168 bits. These algorithms are described in Schneier, Bruce, Applied Cryptography (2nd ed. 1996), pp. 265-85, 294-301.

[0009] International Data Encryption Algorithm (IDEA) is another symmetric block-cipher that also encrypts in 64-bit blocks, but it uses a 128-bit key. RC4 and RC5 are variable-key-size stream ciphers licensed by RSA Data Security Inc. Both RC4 and RC5 are symmetric block algorithm designed to serve as an alternative to DES and are reportedly immune to linear differential cryptanalysis and other mathematical methods of attacking encryption systems, which would make them more secure than DES. These and other suitable algorithms are described in Schneier, Bruce, Applied Cryptography (2nd ed. 1996), pp. 303-355.

[0010] Many of these encryption algorithms and others have been implemented as an application specific integrated circuit (ASIC) or “chip.” The MYK-78 Clipper Chip, for example, is a tamper-resistant chip manufactured by VLSI Technologies that is designed for encrypting voice communications. The Clipper Chip implements the SKIPJACK cryptographic algorithm using 1 micron CMOS technology. VLSI and RSA are reportedly creating other silicon chip-based implementations of RSA's encryption technologies, including the RC4 symmetric stream cipher, for use in high-volume, high-speed consumer applications such as home satellite services and TV set-top boxes.

[0011] Encryption chips may be combined with PC cards to create portable encryption modules for use in adding encryption capabilities to other “host” devices. A PC card is a small 68-pin removable card conforming to physical and electrical interface standards set forth in the PC Card Standard of the Personal Computer Memory Card International Association (PCMCIA) of Sunnyvale, Calif. PC cards may contain hardware and software customized to perform a specific application and may be used to expand the capabilities of a host device, such as a mobile or notebook computer. To use the functions of the PC card, the PC card is inserted into a slot on a host device. The host device powers the card, recognizes the capabilities of the card, and initializes certain interface processes accordingly.

[0012] To reduce compatibility problems between PC cards and host systems, many conventional PC cards use a standardized interface system such as a Card Information Structure (CIS) set forth by the PC Card Standard. Using CIS, a data structure is stored in a PC card's memory that identifies the physical attributes and logical configuration of the card. The physical attributes include such things as the card's type, manufacturer, and part number. The logical configuration includes such things as the card's file system and number of logical partitions.

[0013] Conventional PC cards containing an encryption algorithm may be utilized in a wireless communications network, for example, to increase the secrecy of the communications transmitted between source and destination. An example of a PC card containing an encryption algorithm this is a PC radio card, or PC radio peripheral module, which provides communication between a mobile host computer and stationary base stations or access points over a wireless LAN.

[0014] FIG. 1 is a block diagram illustrating an example of a wireless radio card known in the prior art. Such a card may be used to connect a mobile or notebook computer to a wireless data network, such as an RF LAN. Card 10 may be placed in an interface slot 12 in a computer. The interface slot acts communicatively couples the computer and the card, allowing for the free exchange of data, as well as power derived from a power source 14. Card 10 includes an interface chip 16, which is generally an Application Specific Integrated Circuit (ASIC). The interface chip 16 generally contains a power control circuit 18, which controls the distribution of power to the card. There may be power conservation circuitry included which shuts off power to the rest of the card if the radio is not in use in order to reduce the amount of overall power utilization of the card.

[0015] The interface chip 16 also includes encryption circuitry 20 to perform the encryption and decryption processes. The preferred embodiment utilizes the RSA RC4 variable-key-size stream cipher, but any appropriate encryption algorithm can be used as well. The encryption process utilizes memory, generally in the form of a dedicated static random access memory (SRAM) 22, located within the interface chip 16 to store the data while it is being encrypted. Encipherment may begin with a secret key that has been distributed to cooperating stations by an external key management service. The secret key is concatenated with an initialization vector (IV) and the resulting seed is input to a pseudo random number generator (PRNG). The PRNG outputs a key sequence k of pseudo-random bits equal in length to the largest possible Message Protocol Data Unit (MPDU), the unit of the file format utilized by wireless LANs. Two processes are applied to the plaintext MPDU. To protect against unauthorized data alterations, an integrity algorithm operates on the plaintext to produce an integrity check value (ICV). Then, encryption is performed.

[0016] Encryption takes place by first initializing a 256-byte S-box (S₀. . . S₂₅₅) linearly (i.e. S₀=0, S₁=1, etc.). Then another 256-byte array (K₀. . . K₂₅₅) is filled with the variable length key, repeating the key as necessary to fill the array. The memory is further initialized by performing the following function:

[0017] for i=0 to 255:

[0018] j=(j+S_i+K₁) mod 256

[0019] swap S_iand S_j

[0020] To encrypt the data, the byte K is XORed with the data. K is determined using the following function with two counters i and j, initialized to zero:

[0021] i=(i+1) mod 256

[0022] j=(j+S_i) mod 256

[0023] swap S_iand S_j

[0024] t=(S_i+S_j) mod 256

[0025] K=S_t

[0026] The output is then a message the resulting ciphertext, the IV, and the ICV. The PRNG simplifies the task of key distribution by transforming a relative short secret key into an arbitrarily long key sequence, requiring only the secret key to be communicated between stations. The secret key remains constant while the IV periodically changes. The IV may be changed as frequently as every MPDU and, since it is contained in the message, the receiver will always be able to decipher any message.

[0027] Decipherment is accomplished using the inverse process of encipherment. Both encipherment and decipherment are performed in SRAM 22.

[0028] CPU 24 is used by the card to control the processes performed by the card. When the card 10 is first placed in a computer and the computer is powered up, a signal from the computer is normally sent to the card inquiring as to the type of card or other CIS information. The CIS is generally stored in an Electrically Erasable Programmable Read Only Memory (EEPROM) 26. This allows the information to be periodically changed if the need arises (using a patch), while allowing the information to be maintained when there is no power running through the card (i.e. when the computer is off or the card is unplugged). When the module is powered up, the CIS is automatically transferred out of the EEPROM 26 through CIS circuitry 28 to an SRAM 30 located outside the interface chip 16 for temporary storage. At the appropriate point in the timing cycle of the handshake protocol, the CIS is transferred to the host computer. Storage in an SRAM is necessary because the EEPROM 26 is too slow to access during the handshake protocol and is also not easily addressable. After the CIS is transferred out of the SRAM 30 to the computer under control of the interface chip, the SRAM 30 can then be utilized for other storage purposes by the CPU 24.

[0029] The output of the interface chip 16 is encrypted data or datagrams which need to be converted to packets or frames in accordance with a wireless transmission standard for broadcast over the wireless LAN. Therefore, the card may also contain a Media Access Control (MAC) layer chip 32, which performs the conversion to the appropriate packet or frame structure. A Flash RAM 38, is provided that may contain software for this conversion. A radio circuit 34 then produces a modulated radio signal which is broadcast from the transmitter/receiver 36 at predetermined intervals in order across the wireless media.

[0030] It is a general object of the present invention to provide a single integrated circuit for communications interfacing and encryption.

[0031] It is another object of the invention to provide a single integrated circuit which performs initialization of a communications channel and encryption/decryption of data through such channel.

[0032] It is a further object of the present invention to provide dual use of high speed RAM on a single IC chip used for data encryption.

[0033] A further object of the invention is to provide an interface ASIC chip for use in a peripheral card or module which eliminates the need to have a separate SRAM chip on the module, thus reducing interconnections, module size and component count.

[0034] Devices and methods consistent with the present invention provide a peripheral module for use with a host computer. The module includes an integrated circuit chip including a dual function on-board memory. Module identification characteristics are stored in the memory on the integrated circuit chip and transmitted to the host computer during initialization of the peripheral module. Following initialization, the host transmits and receives data from the peripheral module which encrypts (or decrypts) the data using the same on-board memory of the integrated circuit chip.

[0035] In accordance with one embodiment of the invention, as embodied and broadly described herein, a peripheral module comprises an integrated circuit chip for performing interfacing to a host computer, and encryption/decryption of data to and form the host computer. The integrated circuit chip includes a memory for storing encryption information and module identification information. The integrated circuit chip further includes logic for directing the chip to access module identification information from an external EEPROM, store it in the on-board memory, and transfer it to the host computer.

[0036] More specifically, the present invention provides an interface chip for use in a peripheral module connectable to and for use with a host computer. The chip utilizes a single static random access (SRAM) on the interface chip for both encryption of data packets and temporary storage of Card Information Structure (CIS) information during initialization. The CIS information is stored in the SRAM only during the power-up or initialization phase of operation, when encryption of data packets is not necessary and thus the memory is not being utilized by the encryption algorithm. This precludes the need for any additional SRAM IC outside the interface chip, thus making a more compact module possible.

[0037] Additional objects, advantages and novel features of the present invention will become apparent to those skilled in the art from this disclosure, including the following detailed description, as well as by practice of the invention. While the invention is described below with reference to preferred embodiments, it should be understood that the invention is not limited thereto. Those of ordinary skill in the art having access to the teachings herein will recognize additional applications, modifications and embodiments in other fields, which are within the scope of the invention as disclosed and claimed herein and its equivalents and with respect to which the invention could be of significant utility. The objects and advantages of the invention will be realized and attained by means of the elements and combinations particularly pointed out in the appended claims.

[0038] It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the invention, as claimed.

[0039] The accompanying drawings, which are incorporated in and constitute a part of this specification illustrate an embodiment of the invention and together with the description, serve to explain the principles of the invention.

[0040] FIG. 1 is a block diagram showing a prior art wireless radio module.

[0041] FIG. 2 is a block diagram illustrating wireless radio module in accordance with a presently preferred embodiment of the invention.

[0042] FIG. 3 is a flow diagram illustrating a method for utilizing the random access memory contained on an IC chip in accordance with a presently preferred embodiment of the present invention.

[0043] A data communications interface chip is provided which eliminates the need for SRAM IC in a PC card. FIG. 2 is a block diagram illustrating a PC card in accordance with a presently preferred embodiment of the invention. Card 50 is connected to an PCMCIA interface slot in a host computer. The host computer contains a power source such as a battery 54 which provides power to the host computer. Power source 54 may also provide power to a card connected to the interface slot 52 via the interface slot. Card 50 may contain an interface chip 56, which would generally be an ASIC. The interface chip 56 may contain a power control circuit 58, which controls the distribution of power to the card and may contain power conservation circuitry to shut off power to portions of the card that are not in use.

[0044] In the preferred embodiment, the interface chip 56 will also contain encryption circuitry 60 similar to that described in connection with FIG. 1. The circuitry acts to encrypt and decrypt packets using an encryption process or algorithm along with a key. SRAM 62 may be used during the encryption or decryption process along with central processing unit (CPU) 64. There may be a multiplexor or switch (either in hardware or software) in the control path of the SRAM 62 which is set by a flag or selection criteria depending on whether the card 50 is in the initialization process or not.

[0045] When the card 50 is first placed in a new computer and the computer is powered up, the initialization process begins, the selection criteria allows the CIS or similar data structure containing information regarding the type of the card 50 to be transferred from EEPROM 66 through CIS circuitry 68 to SRAM 62. Use of a high speed memory or SRAM is needed because the EEPROM 66 is generally slow to access and is not easily addressable, so a faster and easily addressable memory must be used, such as the SRAM 62. After the initialization is completed, and the CIS data received by the host, the flag or selection criteria defaults to normal and SRAM 62 performs data storage for the encryption and decryption process as the card 50 is used to transmit and receive data from the host.

[0046] By utilizing the SRAM 62 on the interface chip 56 for the temporary storage of the CIS or similar data structure, this eliminates the need for a separate IC containing additional memory for the CIS procedure, and thus frees up space on the card and makes a more compact card possible. In the preferred embodiment of the invention, SRAM 62 is 256K bytes.

[0047] The output of the interface chip 56 is encrypted data which needs to be converted to a packet or frame structure according to a wireless transmission standard for broadcast over the wireless LAN. Therefore, the card 50 may also contain a Media Access Control (MAC) layer chip 70, which aids in the conversion to the wireless transmission standard as well as a Flash RAM 76, which may contain software for aiding in this conversion. A radio circuit 72 couples to the transmitter/receiver 74 which broadcasts frames at predetermined intervals across the wireless media.

[0048] In the preferred embodiment of the present invention, the transmission standard is the IEEE 802.11 Standard. When the data leaves the interface card 56, it is in the form of datagrams. These datagrams are then converted to IEEE 802.11 frames by the MAC layer chip 70 and flash RAM 76. Cyclical redundancy checking (CRC) may be utilized by the radio circuit 72 to ensure the accuracy of the transmission of data.

[0049] FIG. 3 is a flow diagram illustrating a method for utilizing a random access memory in an interface chip of a peripheral module in accordance with a presently preferred embodiment of the invention. At step 100, the module identification information is transferred the EEPROM to the random access memory. At 102, the module identification information is stored in the random access memory. At step 104, the module identification information is transferred from the random access memory to the host computer. At step 106, data is received from the host computer. At step 108, the random access memory is utilized for encrypting the data. At step 110, the encrypted datagrams are formed into datagrams for transfer to a MAC processor, and ultimately transmission over the communications channel. Then at step 112, the packets are transmitted over the communications channel.

[0050] If data is received over the communications channel, at step 114, the incoming packets are received from the communications channel. At step 116, incoming datagrams are extracted from the incoming packets. At step 118, the random access memory is utilized for decrypting the incoming datagrams. At step 120, the decrypted data is transferred to the host computer.

[0051] While the term “circuitry” is used throughout this document, it is recognized that portions of the present invention may just as easily be performed by software running on a processor or microcontroller, either as a discrete component or contained within an ASIC.

[0052] While embodiments and applications of this invention have been shown and described, it would be apparent to those skilled in the art that many more modifications than mentioned above are possible without departing from the inventive concepts herein. The invention, therefore, is not to be restricted except in the spirit of the appended claims.