Title: BOD Meeting
1CO2064SEC - Smart Secure Ethernet Controller
October 2007 Confidential
2Agenda
- Overview
- Typical Configuration and specifications
- Key Features
- Advantages and benefits
- Evaluation Environment
3Overview
- CO2064SEC is a Smart Secure Ethernet Controller
aimed at applications that requires Ethernet
connectivity characterized with - Narrow range of simultaneously used Internet
Protocols - Need for security
- Sensitivity to cost.
- CO2064SEC is a cost effective, full secure
networking solution replacement for a plain
Ethernet controller - CO2064SEC Offers
- Extensive communication capabilities
- Secure Communication
- Secure Application Architecture
- Easy and seamless integration
- All for the best cost to performance ratio
available.
4iChip CO2xxx Functional Block Diagram
Green IP blocks available only on CO2128
5Specifications
6CO2064 vs. CO2128 Hardware Comparison
7CO2064 System Architecture
8Typical Configurations
- Firmware loaded from dedicated SPI Flash
- Firmware loaded from Host Memory
9CO2064SEC Architecture Benefits
- SecuraGAP - Secure Networking Architecture that
acts as a firewall and enables secure
communication (SSL3).
SecuraGAP
CO2064SEC
Application CPU
Upper Layer Protocols
Ethernet Controller
SECURITY
TCP/IP
PHY
Drivers
Network Controller Ethernet MAC
Secure Zone
Trusted Zone
10SecuraGAP Architecture Benefits
- CO2064SEC acts as a Gate Keeper, keeping
application CPU immune from network hazards - Demanding Security tasks are offloaded from the
Application CPU - Complete secure solution for application and
communication - No license fee or added cost.
11Open Architecture
- Open Architecture - features clustered into
flavors (separate FW files) - Memory size is kept minimal by selecting only
features that are needed for the application (per
firmware file). - Flexibility is retained as additional
functionality can be added at any time.
- Flavor A
- 10 active TCP/UDP
- SerialNET mode
- Sending plain-text Email
- An FTP client
- An HTTP client
- Flavor B
- A single secure SSL3/TLS1 socket
- 9 non-secure TCP/UDP sockets
- Network Time Client
12CO2064SEC benefits
- Focus on your business
- Develop your application, not security and
communication - Best security
- SSL3 in Hardware Faster transactions, require
less external memory, no license fee. - SecuraGAP architecture
- Quick time to market one month design time
- Minimal development software integration
- Minimal testing Minimal certification
- Cost effective
- iChip costs as much as typical plain Ethernet
controller but gives much more - Tried and True Solution
- Used by Tier 1 companies
- Over 1 Million chips in the field
- Use existing CPU, no big redesign
- Simple ATI commands
- Offload all communication and SSL3 security to
iChip
13iChip Key Features
- Host Interface
- High speed serial interface (future support up to
3MB) - SPI interface (future support up to 12Mbps)
- USB Host and Device (future support 12Mbps)
- Security HW
- Full hardware implementation of the entire SSL
mechanism enables extremely fast transaction
time. - Built in Ethernet MAC
- TCP Throughput
- Higher CPU speed and hardware added functions
enables fast and efficient TCP stack. - Includes complete set of low-level drivers,
TCP/IP stack and many upper layers protocols -
tried and true.
14iChip Key Benefits Future Proof
- iChip ease large scale product deployment by
offering - Easy and seamless Access to any iChip located
behind NAT or Firewall, with public or local IP,
known or Dynamically allocated. - Control and configure any of your iChips and
devices on the field. - Remotely Manage your devices and iChips to stay
up to date with ever changing environment.
15Evaluation Environment
The II-EVB-600 connects via RS232 interface to a
PC running the iChip Config Utility and allow
easy configuration and activation of Internet
based protocols.