System and method for encryption of network data

摘要

A system and method involve determining that one or more data packets received from a first device on a communications network are one of data at rest and data in transit, performing one of an encryption operation and a decryption operation on the data packets, and storing the data packets in a memory device if they are data at rest or transmitting the data packets over the communications network if they are data in transit. If the data packets are data in transit, the method may involve, prior to transmission, encapsulating information into a frame of the data packets to indicate they are data in transit. The data packets may be compressed prior to encryption. The determination that the data packets are one of data at rest and data in transit may be based upon a value of at least one data field of the data packets.

主权项

1. A method comprising the steps of:
providing a security device comprising a security controller connected to both a first network processing device and a second network processing device; using the first network processing device to determine that one or more data packets received at the first network processing device from a first device on a communications network are one of data to be stored and data to be transmitted based upon a value of at least one data field of the data packets; using the security controller to perform one of an encryption operation and a decryption operation on the data packets; using the first network processing device to store the data packets in a memory device within the security device if they are data to be stored; and using the second network processing device to transmit the data packets over the communications network to a second device on the communications network if they are data to be transmitted.