The IPC-NV171A-BRrbmd is an advanced NVMe-to-NVMe bridge designed for environments that mandate a strict physical and logical boundary between unencrypted (Red) and encrypted (Black) data. Utilizing IntelliProp’s proprietary isolation architecture, the core partitions the FPGA fabric to prevent data leakage between secure and non-secure domains. Uniquely, this "rbmd" variant includes specialized hardware to handle NVMe metadata, allowing customers to perform in-line packet inspection, metadata encryption, or LBA remapping without breaking NVMe protocol compliance. It serves as the ultimate "Commander" for secure storage applications, providing the framework for NSA-level data-at-rest (DAR) solutions.
IntelliProp: Experts in Memory and Data Storage IP
Key Features
- Physical Domain Isolation: Strict hardware partitioning between Red (untrusted/plaintext) and Black (trusted/ciphertext) domains.
- Metadata Processing: Full-duplex hardware logic for inspecting, modifying, or encrypting NVMe metadata.
- Protocol Compliance: Fully compliant with NVMe 1.3/1.4 specifications.
- Zero Driver Overhead: Operates transparently to host OS drivers (Linux, Windows, VMware).
- Command Firewall: Built-in hardware logic to intercept and filter specific NVMe Admin and I/O commands.
- High Performance: Designed for line-rate PCIe Gen4/Gen5 data throughput with minimal latency impact.
Offering Brief
Offering Brief
| Device Family | Agilex® 5 FPGA E-Series, Agilex® 7 FPGA F-Series, Agilex® 9 FPGA Direct RF-Series, Stratix® 10 GX FPGA |
|---|---|
| Offering Status | Production |
| Integrated Testbench | Yes |
| Evaluation License | Yes |
| Design Examples Available | Yes |
| Compliance | Yes |
| Latest Quartus Version Supported | 25.3.0 |
| Development Language | Encrypted Verilog, Encrypted VHDL, Verilog, VHDL |
Encrypted Verilog RTL with explicit Red/Black logic domain separation
Advanced verification environment with Metadata-specific error injection models
Reference Design demonstrating Secure Partitioning on an Altera Dev Kit
Synthesis and Place-and-Route scripts with pre-defined Logic Lock regions
High-Assurance Architecture Guide covering metadata handling and isolation boundaries
Ordering Information
IPC-NV171A-BRrbmd
from Direct
Market Segment and Sub-Segments
Access
View Sub-SegmentsAerospace
View Sub-Segments
ASIC Proto
View Sub-SegmentsBroadcast
View Sub-Segments
Consumer
View Sub-Segments
Data Center Cloud (Public, Private, Hybrid)
View Sub-SegmentsDefense
View Sub-SegmentsGovernment
View Sub-Segments
Medical
View Sub-SegmentsMedical
Imaging
Lab/Life Sciences
Non-Imaging Patient Devices
Other Medical
Ultrasound
Video
Image
Test
View Sub-SegmentsTransportation
View Sub-SegmentsTransportation
Automotive (Passenger Vehicles)
Charging Infrastructure
Non-Automotive Transportation
Transportation Infrastructure (non-charging)