An apparatus and method for updating security association database entries
in a system having multiple security channels by selectively granting
access to the entries by a plurality of the multiple security channels
that may need to update the same entry using a first-come, first-served
scheme. The apparatus includes a controller circuit that functions to
carry out the method which, for each of the multiple security channels,
includes determining whether another of the security channels has a
higher priority to access a particular security association database
entry. If no other channel has a higher priority, then the channel
requesting access to the entry retrieves it from its address location,
modifies it, and writes the modified entry back to its address location.
The controller prevents other channels from simultaneously, or
substantially simultaneously, retrieving and modifying the same entry.