## 对比文件与目标专利技术特征比对分析
**对比文件名称：** 2017-01-26_US2017026171A_发明申请_US20170026171A1 CRYPTOGRAPHIC PROTECTION OF I_O DATA FOR DMA CAPABLE I_O CONTROLLERS
**目标专利名称：** 用于外围组件互连(PCI)快速(PCIE)系统的安全技术 CN112714911B
**本次调用模型名称：** DeepSeek-V2.5
---
## 特征比对表格
| 技术特征描述及公开性判断 | 对比文件原文引用 | 公开性论述 |
| **技术特征A**：《直接公开》<br>包括：向TLP分组上前置传输层协议TLP前缀 | **[0031]**段："Each I/O controller 144 may assert an appropriate CID with every DMA transaction, for example as part of a transaction layer packet (TLP) prefix, to uniquely identify the source of the DMA transaction and provide liveness protections."<br>**[0039]**段："Optionally, up to four 32-bit TLP prefixes may be prepended to a TLP. As shown, the computing device 100 may use one of the TLP prefixes to carry the CID information for the DMA transaction."<br>**[0040]**段："After reading the CID from the DMA transaction, in block 308 the cryptographic engine 140 determines whether to protect the DMA transaction based on the CID." | 对比文件[0031]段明确指出DMA交易中包含TLP前缀，[0039]段明确指出"up to four 32-bit TLP prefixes may be prepended to a TLP"（最多四个32位TLP前缀可以被前置到TLP），并使用其中一个TLP前缀携带CID信息。对比文件通过TLP前缀进行DMA交易的安全保护，其前置TLP前缀的技术手段与目标专利A特征完全一致。本领域技术人员能够毫无疑义地从对比文件得出该技术方案。 |
| **技术特征B**：《直接公开》<br>其中所述TLP分组具有与所述TLP前缀不同的报头 | **[0031]**段："The I/O controllers 144...generate PCI Express (PCIe) Transaction Layer Packets (TLPs) to read or write data from/to memory 132."<br>**[0050]**段："The cryptographic engine 140 intercepts a DMA write transaction 606, which includes a plaintext payload 608, a transaction layer packet (TLP) header 610, and a TLP prefix 402."<br>**[0056]**段："The cryptographic engine 140 intercepts a DMA read request transaction 804, which includes a transaction layer packet (TLP) header 610 and a TLP prefix 402." | 对比文件[0050]段明确示出DMA写交易包括：plaintext payload 608（有效载荷）、transaction layer packet (TLP) header 610（报头）、and a TLP prefix 402（TLP前缀），三者并列存在，说明报头与前缀是不同部分。[0056]段同样明确示出TLP header和TLP prefix是不同组成部分。这与目标专利B特征"TLP分组具有与TLP前缀不同的报头"完全一致。 |
| **技术特征C**：《直接公开》<br>并且所述TLP前缀包括所述TLP分组是安全分组的指示 | **[0039]**段："The illustrative TLP prefix 402 also includes other flags which may allow the cryptographic engine 140 to identify and manage its encryption/decryption of the respective transaction."<br>**[0040]**段："After reading the CID from the DMA transaction, in block 308 the cryptographic engine 140 determines whether to protect the DMA transaction based on the CID."<br>**[0041]**段："Each DMA channel of the computing device 100 may be individually programmed to secure operation and out of secure operation...The CID table 142 may include an entry matching the CID if the cryptographic engine 140 has been programmed to secure the associated DMA channel." | 对比文件[0039]段明确指出TLP前缀402包含"other flags"以允许加密引擎识别和管理交易的加密/解密。[0040]-[0041]段进一步说明基于CID确定是否保护DMA交易，且CID表142中的条目指示DMA通道是否被编程为安全操作。这表明TLP前缀中的CID和相关标志用于指示交易是否需要安全保护，即起到"安全分组指示"的作用。 |
| **技术特征D**：《直接公开》<br>向所述TLP分组附加至少部分在所述TLP分组的一部分上计算的密码生成的标识符 | **[0047]**段："In block 510, the cryptographic engine 140 generates an authentication tag structure (ATS) based on the DMA write transaction. The ATS provides authenticity and integrity assurances for the encrypted cipher text."<br>**[0049]**段："The cryptographic engine 140 generates an ATS DMA write transaction. The ATS DMA write transaction includes the ATS and is directed at the address of an authentication tag (AT) buffer stored in the memory 132."<br>**[0060]**段："In block 914, the cryptographic engine 140 verifies the cipher text using ATS data from the ATS read completion transaction."<br>**[0051]**段："The cryptographic engine 140 generates a payload DMA write transaction 620 that includes the cipher text payload 614 and a TLP header 610..." | 对比文件[0047]段明确指出加密引擎"generates an authentication tag structure (ATS) based on the DMA write transaction"（基于DMA写交易生成认证标签结构ATS）。[0049]段进一步说明ATS被写入内存的认证标签缓冲区。这与目标专利D特征中"密码生成的标识符"（即ICV/完整性校验值）完全对应。ATS是基于交易内容计算的密码生成的认证值。 |
| **技术特征E**：《直接公开》<br>通过所述PCIE链路从所述设备中的第一设备向所述设备中的另一设备发送所述TLP分组 | **[0019]**段："The cryptographic engine 140 provides on-the-fly encryption and decryption of data transferred via direct memory access operations (DMAed) between the platform I/O controllers 144 and the memory 132."<br>**[0031]**段："Additionally, one or more of the I/O controllers 144 may be connected to the I/O subsystem 128 and/or the processor 120 via an expansion bus such as PCI Express (PCIe) or other I/O connection."<br>**[0061]**段："The cryptographic engine 140 generates a DMA read completion transaction. The DMA read completion includes the plaintext I/O data and is directed at the I/O controller 144 that generated the original DMA read request transaction." | 对比文件明确指出DMA交易通过PCI Express总线进行数据传输。[0019]段说明加密引擎提供平台I/O控制器和内存之间的数据加密传输。[0031]段明确说明I/O控制器通过PCI Express连接。[0061]段描述生成DMA读完成交易并指向I/O控制器。这与目标专利E特征通过PCIE链路发送TLP分组一致。 |
| **技术特征F**：《直接公开》<br>其中TLP分组包括所述TLP前缀和加密生成的所述标识符，以及加密所述TLP分组中的有效载荷 | **[0046]**段："In block 506, the cryptographic engine 140 encrypts the plaintext I/O data from the DMA write transaction to generate encrypted cipher text."<br>**[0047]**段："In block 510, the cryptographic engine 140 generates an authentication tag structure (ATS) based on the DMA write transaction."<br>**[0048]**段："In block 512, the cryptographic engine 140 generates a payload DMA write transaction. The payload DMA write transaction includes the encrypted cipher text..."<br>**[0049]**段："In block 514, the cryptographic engine 140 generates an ATS DMA write transaction. The ATS DMA write transaction includes the ATS..."<br>**[0050]**段："The cryptographic engine 140 intercepts a DMA write transaction 606, which includes a plaintext payload 608, a transaction layer packet (TLP) header 610, and a TLP prefix 402." | 对比文件[0046]段明确加密有效载荷生成密文。[0047]段明确生成基于DMA交易的ATS（认证标签结构）。[0048]-[0049]段分别生成包含密文的有效载荷DMA写交易和包含ATS的DMA写交易。[0050]段示出原始DMA写交易包括有效载荷、TLP报头和TLP前缀。综合来看，对比文件公开了TLP分组包含TLP前缀、有效载荷加密、以及附加认证标签（ATS）这一完整技术方案。 |
| **技术特征G**：《直接公开》<br>还包括：形成所述TLP分组 | **[0045]**段："In block 504, the cryptographic engine 140 retrieves the encryption key, CID table 142 index, and a counter value from the matching CID entry."<br>**[0046]**段："In block 506, the cryptographic engine 140 encrypts the plaintext I/O data from the DMA write transaction to generate encrypted cipher text."<br>**[0048]**段："In block 512, the cryptographic engine 140 generates a payload DMA write transaction. The payload DMA write transaction includes the encrypted cipher text and is directed at the destination memory address of the original DMA write transaction." | 对比文件[0048]段明确"generates a payload DMA write transaction"（生成有效载荷DMA写交易），即形成/构造TLP分组。这与目标专利G特征"形成所述TLP分组"完全一致。 |
| **技术特征H**：《直接公开》<br>其中形成所述TLP分组包括：在所述TLP分组中做出写入命令 | **[0031]**段："The I/O controllers 144...generate PCI Express (PCIe) Transaction Layer Packets (TLPs) to read or write data from/to memory 132."<br>**[0044]**段："In use, the computing device 100 may execute a method 500 for processing a DMA write transaction."<br>**[0048]**段："In block 512, the cryptographic engine 140 generates a payload DMA write transaction. The payload DMA write transaction includes the encrypted cipher text and is directed at the destination memory address of the original DMA write transaction." | 对比文件[0031]段说明I/O控制器生成PCIe TLP来读写内存数据。[0044]段明确执行处理DMA写交易的方法。[0048]段描述生成有效载荷DMA写交易。这与目标专利H特征"形成TLP分组包括做出写入命令"一致。 |
| **技术特征I**：《直接公开》<br>其中形成所述TLP分组包括：在所述TLP分组中做出读取命令 | **[0053]**段："In block 708, the cryptographic engine 140 generates a payload DMA read request. The payload DMA read request requests data stored at the source address of the original DMA read request transaction."<br>**[0055]**段："After generating the payload DMA read request and the ATS DMA read request, the method 700 is completed." | 对比文件[0053]段明确"generates a payload DMA read request"（生成有效载荷DMA读请求），[0055]段同样描述生成DMA读请求交易。这与目标专利I特征"形成TLP分组包括做出读取命令"一致。 |
| **技术特征J**：《隐含公开》<br>还包括：响应于发送所述TLP分组而接收安全完成分组 | **[0059]**段："In block 904, the cryptographic engine 140 performs a decryption operation on the payload read completion transaction."<br>**[0061]**段："In block 920, the cryptographic engine 140 generates a DMA read completion transaction."<br>**[0057]**段："In block 714, the cryptographic engine 140 generates an authentication tag structure (ATS) DMA read request...The memory 132 may generate a read response transaction that includes encrypted cipher text read from the source address." | 对比文件[0059]段描述对payload read completion transaction执行解密操作，说明接收到读完成交易。[0057]段说明内存生成包含加密密文的读响应交易。这隐含公开了响应发送读请求后接收完成分组的技术特征。 |
| **技术特征K**：《隐含公开》<br>还包括：解密所述安全完成分组中的有效载荷 | **[0059]**段："In block 904, the cryptographic engine 140 performs a decryption operation on the payload read completion transaction."<br>**[0060]**段："In block 910, the cryptographic engine 140 decrypts cipher text from the payload read completion transaction to generate plaintext I/O data." | 对比文件[0059]段明确"performs a decryption operation on the payload read completion transaction"，[0060]段明确"decrypts cipher text from the payload read completion transaction to generate plaintext I/O data"。这隐含公开了解密安全完成分组中有效载荷的技术特征。 |
| **技术特征L**：《直接公开》<br>其中向所述TLP分组上前置所述TLP前缀包括：用包括有效载荷加密位的TLP前缀进行前置 | **[0039]**段："The illustrative TLP prefix 402 also includes other flags which may allow the cryptographic engine 140 to identify and manage its encryption/decryption of the respective transaction."<br>**[0046]**段："In block 506, the cryptographic engine 140 encrypts the plaintext I/O data from the DMA write transaction to generate encrypted cipher text." | 对比文件[0039]段明确TLP前缀包含"other flags"以允许加密引擎识别和管理交易的加密/解密。[0046]段说明执行加密操作。这表明TLP前缀中包含与有效载荷加密相关的标志位。 |
| **技术特征M**：《直接公开》<br>其中向所述TLP分组附加所述密码生成的标识符包括：向所述TLP分组附加完整性校验值(ICV) | **[0047]**段："In block 510, the cryptographic engine 140 generates an authentication tag structure (ATS) based on the DMA write transaction. The ATS provides authenticity and integrity assurances for the encrypted cipher text."<br>**[0060]**段："In block 914, the cryptographic engine 140 verifies the cipher text using ATS data from the ATS read completion transaction." | 对比文件[0047]段明确生成ATS（authentication tag structure，认证标签结构）用于提供真实性和完整性保证。[0060]段使用ATS数据验证密文。这与目标专利M特征中的ICV（完整性校验值）功能完全一致。ATS即为认证标签。 |
| **技术特征N**：《直接公开》<br>其中向所述TLP分组上前置所述TLP前缀包括：用包括分组编号的TLP前缀进行前置 | **[0053]**段："In block 706, the cryptographic engine 140 stores a counter value and CID table 142 index from the matching CID tables 142 entry in the completion queue."<br>**[0041]**段："The cryptographic engine 140 may use information stored in the CID table 142 entry, such as encryption keys, counter values, and other information, to perform the cryptographic operation." | 对比文件多处提及counter value（计数器值），[0053]段说明存储计数器值用于完成队列。这与目标专利N特征中"包括分组编号的TLP前缀"对应，计数器值用于防止重放攻击。 |
| **技术特征O**：《隐含公开》<br>其中向所述TLP分组上前置所述TLP前缀包括：用包括密钥编号位的TLP前缀进行前置 | **[0041]**段："The cryptographic engine 140 may use information stored in the CID table 142 entry, such as encryption keys, counter values, and other information, to perform the cryptographic operation."<br>**[0004]**段："For example, the cryptographic engine 140 may be embodied as any microcontroller, microprocessor, functional block, logic, or other circuit..." | 对比文件提及使用encryption keys（加密密钥）进行密码操作，并提及CID表142中存储相关信息。虽然未明确提及"密钥编号位"，但本领域技术人员可理解多密钥管理场景下需要密钥编号标识。 |
| **技术特征P**：《直接公开》<br>包括：向TLP分组上前置传输层协议TLP前缀，其中所述TLP分组具有与所述TLP前缀不同的报头，并且所述TLP前缀包括所述TLP分组是安全分组的指示 | **[0039]**段："Optionally, up to four 32-bit TLP prefixes may be prepended to a TLP...The TLP prefix 402 includes a channel identifier field 404...The illustrative TLP prefix 402 also includes other flags which may allow the cryptographic engine 140 to identify and manage its encryption/decryption of the respective transaction."<br>**[0050]**段："The cryptographic engine 140 intercepts a DMA write transaction 606, which includes a plaintext payload 608, a transaction layer packet (TLP) header 610, and a TLP prefix 402."<br>**[0040]**段："After reading the CID from the DMA transaction, in block 308 the cryptographic engine 140 determines whether to protect the DMA transaction based on the CID." | 综合[0039]、[0050]、[0040]段，对比文件直接公开了：1)TLP前缀被前置到TLP；2)TLP分组具有与TLP前缀不同的报头；3)TLP前缀包含CID和安全相关标志以指示和管理加密/解密。这与目标专利P特征完全一致。 |
| **技术特征Q**：《直接公开》<br>加密所述TLP分组的有效载荷 | **[0046]**段："In block 506, the cryptographic engine 140 encrypts the plaintext I/O data from the DMA write transaction to generate encrypted cipher text."<br>**[0060]**段："In block 910, the cryptographic engine 140 decrypts cipher text from the payload read completion transaction to generate plaintext I/O data." | 对比文件[0046]段明确"encrypts the plaintext I/O data...to generate encrypted cipher text"（加密明文I/O数据生成加密密文），[0060]段说明解密操作。这直接公开了加密TLP分组有效载荷的技术特征。 |
| **技术特征R**：《直接公开》<br>通过所述PCIE链路从所述设备中的第一设备向所述设备中的另一设备发送所述TLP分组，其中TLP分组包括所述TLP前缀和加密生成的标识符 | **[0031]**段："Additionally, one or more of the I/O controllers 144 may be connected to the I/O subsystem 128 and/or the processor 120 via an expansion bus such as PCI Express (PCIe) or other I/O connection."<br>**[0031]**段："Each I/O controller 144 may assert an appropriate CID with every DMA transaction, for example as part of a transaction layer packet (TLP) prefix..."<br>**[0047]**段："The cryptographic engine 140 generates an authentication tag structure (ATS) based on the DMA write transaction." | 对比文件综合公开了通过PCI Express连接发送TLP分组，TLP分组包含TLP前缀（带CID）和认证标签（ATS）。 |
| **技术特征S**：《直接公开》<br>还包括：形成所述TLP分组 | **[0048]**段："In block 512, the cryptographic engine 140 generates a payload DMA write transaction."<br>**[0053]**段："In block 708, the cryptographic engine 140 generates a payload DMA read request." | 对比文件多处明确"generates"（生成/形成）TLP分组，与目标专利S特征一致。 |
| **技术特征T**：《直接公开》<br>其中形成所述TLP分组包括：在所述TLP分组中做出写入命令 | **[0044]**段："In use, the computing device 100 may execute a method 500 for processing a DMA write transaction."<br>**[0048]**段："In block 512, the cryptographic engine 140 generates a payload DMA write transaction." | 对比文件[0044]、[0048]段明确处理和生成DMA写交易，与目标专利T特征一致。 |
| **技术特征U**：《直接公开》<br>其中向所述TLP分组上前置所述TLP前缀包括：用包括有效载荷加密位的TLP前缀进行前置 | **[0039]**段："The illustrative TLP prefix 402 also includes other flags which may allow the cryptographic engine 140 to identify and manage its encryption/decryption of the respective transaction."<br>**[0046]**段："In block 506, the cryptographic engine 140 encrypts the plaintext I/O data..." | 与技术特征L相同，对比文件[0039]段明确TLP前缀包含加密/解密管理标志。 |
| **技术特征V**：《直接公开》<br>其中向所述TLP分组上前置所述TLP前缀包括：用包括分组编号的TLP前缀进行前置 | **[0041]**段："The cryptographic engine 140 may use information stored in the CID table 142 entry, such as encryption keys, counter values, and other information, to perform the cryptographic operation."<br>**[0053]**段："In block 706, the cryptographic engine 140 stores a counter value..." | 与技术特征N相同，对比文件多处公开使用counter value（计数器值），对应分组编号。 |
| **技术特征W**：《直接公开》<br>包括：向TLP分组上前置传输层协议TLP前缀，其中所述TLP分组具有与所述TLP前缀不同的报头，并且所述TLP前缀包括所述TLP分组是安全分组的指示并且包括表示用于检测重放攻击的单调增加计数器的计数器值 | **[0039]**段："Optionally, up to four 32-bit TLP prefixes may be prepended to a TLP...The TLP prefix 402 includes a channel identifier field 404..."<br>**[0040]**段："After reading the CID from the DMA transaction, in block 308 the cryptographic engine 140 determines whether to protect the DMA transaction based on the CID."<br>**[0041]**段："The cryptographic engine 140 may use information stored in the CID table 142 entry, such as encryption keys, counter values, and other information, to perform the cryptographic operation."<br>**[0050]**段："The cryptographic engine 140 intercepts a DMA write transaction 606, which includes a plaintext payload 608, a transaction layer packet (TLP) header 610, and a TLP prefix 402."<br>**[0031]**段："to uniquely identify the source of the DMA transaction and provide liveness protections"（提供活跃性保护） | 综合[0039]、[0040]、[0041]、[0050]、[0031]段，对比文件公开了：1)TLP前缀前置；2)报头与前缀分离；3)基于CID确定安全保护；4)使用counter value（计数器值）；5)提供liveness protections（活跃性保护，即防重放攻击）。这与目标专利W特征完全一致。 |
| **技术特征X**：《直接公开》<br>通过所述PCIE链路从所述设备中的第一设备向所述设备中的另一设备发送所述TLP分组，其中TLP分组包括所述TLP前缀和加密生成的标识符，以及加密所述TLP分组中的有效载荷 | **[0031]**段："The I/O controllers 144...generate PCI Express (PCIe) Transaction Layer Packets (TLPs)...connected...via an expansion bus such as PCI Express (PCIe)"<br>**[0046]**段："In block 506, the cryptographic engine 140 encrypts the plaintext I/O data from the DMA write transaction to generate encrypted cipher text."<br>**[0047]**段："The cryptographic engine 140 generates an authentication tag structure (ATS) based on the DMA write transaction."<br>**[0039]**段："TLP prefixes may be prepended to a TLP" | 综合[0031]、[0046]、[0047]、[0039]段，对比文件直接公开了通过PCIe发送包含TLP前缀的TLP分组，加密有效载荷并附加认证标签（ATS）的完整技术方案。 |
| **技术特征Y**：《直接公开》<br>还包括：形成所述TLP分组 | **[0048]**段："In block 512, the cryptographic engine 140 generates a payload DMA write transaction."<br>**[0053]**段："In block 708, the cryptographic engine 140 generates a payload DMA read request." | 与技术特征S、G相同，对比文件多处公开生成TLP分组。 |
| **技术特征Z**：《直接公开》<br>其中形成所述TLP分组包括：在所述TLP分组中做出写入命令 | **[0044]**段："In use, the computing device 100 may execute a method 500 for processing a DMA write transaction."<br>**[0048]**段："In block 512, the cryptographic engine 140 generates a payload DMA write transaction." | 与技术特征H、T相同，对比文件明确生成DMA写交易。 |
---
## 总结
对比文件US20170026171A1与目标专利CN112714911B均涉及PCIe/PCIE系统的数据安全传输技术，对比文件通过TLP前缀携带CID实现DMA交易的安全保护，加密有效载荷并生成认证标签（ATS）用于完整性验证，这与目标专利的TLP前缀、安全分组指示、有效载荷加密、ICV认证等核心技术方案高度一致。
<<<A>>><<<B>>><<<C>>><<<D>>><<<E>>><<<F>>><<<G>>><<<H>>><<<I>>><<<L>>><<<M>>><<<N>>><<<P>>><<<Q>>><<<R>>><<<S>>><<<T>>><<<U>>><<<V>>><<<W>>><<<X>>><<<Y>>><<<Z>>><<<a>>><<<b>>><<<c>>><<<j>>><<<k>>><<<o>>>