Samsung Electronics Co., Ltd.

Broadcom Corporation

Avago Technologies International Sales Pte. Limited

Victor Liang

Fei Xie

Shiang-Feng Lee

David Ho Suk Chung

Xuemin Chen

Yong Li

Weimin Zhang

Binfan Liu

Shiangfeng Lee

Ashish Singhal

Kitae Nahm

Juan Carlos Trujillo

In some aspects, the disclosure is directed to methods and systems for providing coordinative security among network devices across multi-level networks. Shared cryptographic secrets among the network devices are used as the basis for mutual security authentication and peering among these devices. The cryptographic secrets can be embedded in the SoC devices for these devices or dynamically generated based on unique identification information and attributes of these SoC devices. The messages for authentication and peering can be communicated directly among the network devices or indirectly via a cloud security portal entity that acts as a messaging proxy. The mutual authentication and peering process can be carried out coordinately among the network devices and a cloud security portal in a one-to-one mesh relationship, or in a transitive layering relationship, where each network entity authenticates and peers with its direct subordinates in a multi-level network.

System for coordinative security across multi-level networks

Aspects of a virtualized security processor are described herein. In various embodiments, one or more virtual security modules may be instantiated at a port interface between a security module and a processing environment of a host device. In one embodiment, a virtual security module is instantiated for each service of the host device. Each virtual security module is configured for at least one command supported by the security module for an associated service of the host device. After being configured, a virtual security module may receive a security command request from an associated service and, before submitting the security command request to the security module, verify and prioritize the security command request. In certain aspects, the use of virtual security modules assists the host device to interface multiple services with the security module, while prioritizing tasks for and offloading certain tasks from the security module.

Virtualized security processor

A method and system for tuning to a scrambled television channel is provided. One implementation involves receiving a channel selection from a user, tuning to the selected scrambled channel, checking a cache for Conditional Access (CA) descrambling information associated with the selected channel, and in case of a cache hit, then retrieving the descrambling information associated with the selected channel from the cache for descrambling the scrambled channel.

Method and system for tuning to encrypted digital television channels

A system and method which provides for efficient data transmission between multiple microprocessors in a computer system is disclosed. A physical data path is divided into one or more data queues which may be virtual connection queues. The virtual connection queues are configured to adaptively split or merge based on traffic conditions therein.

System and method for efficient data transmission in a multi-processor environment

System and method for filtering a data packet using a combined filter are disclosed. In one aspect, the method includes receiving a data packet and N filters. The method includes receiving a data packet and N (wherein N is an integer and N&#x3e;1) filters, each filter comprising a bit mask and corresponding bit values. The method further includes, for each of the N filters, identifying a key element from a portion of the filter corresponding to a combined filter, the key element being a segment of the filter portion having the richest bit pattern. The method further includes generating the combined filter by combining the key element of the N filters. The method further includes filtering the data packet with the combined filter to determine whether there is a match between the data packet and each key element.

System and method for filtering a data packet using a combined filter

System and method for filtering a data packet using a combined filter are disclosed. In one aspect, the method includes receiving a data packet and N filters each comprising a mask and value. The method includes receiving a data packet and N (wherein N is an integer and N&#x3e;1) filters, each filter comprising a bit mask and corresponding bit values. The method further includes generating a common filter mask and the corresponding bit values by taking the overlapping mask bits among portions of the N filters corresponding to the common filter, the common filter being of a length smaller than each filter. The method further includes applying the common filter mask to the data packet to determine whether there is a match between the filtered data packet and each of the N filters.

System and method for filtering a data packet using a common filter

A system and method which provides for efficient data transmission between multiple microprocessors in a computer system is disclosed. A physical data path is divided into a plurality connection queues. The connection queue size is compared to thresholds. Bandwidth allocation weights associates with the queues can be progressively refined based upon the comparison.

System and method for context-based hierarchical adaptive round robin scheduling

A method and system for filtering data packets, is provided. One implementation involves filtering data packets using a set of filters, each filter having a bit mask and corresponding bit values, by categorizing the filters into different groups based on their bit mask value differences, and generating a new mask of bits having corresponding bit values, applying the new mask to the incoming packet to select a filter category for the incoming packet, and filtering the incoming packet by applying the group of filters for the selected category to the incoming packet.

Growing community of inventors

Irvine, CA, United States of America

Victor Liang