嵌入式加密卡
摘要
随着互联网的不断普及与发展,数据安全问题成为越来越多的人关注的焦点。加密技术是实现数据保密的一种重要手段,从加密技术的发展历程及发展趋势来看,加密技术大致可分为两大类,软件加密和硬件加密。在处理大量数据时,软件加密的速度较慢,以软件程序方式加密很容易被读取并通过修改程序破解。相对于软件加密而言,硬件加密使系统具有运行速度快、保密性强等特点。硬件加密大多使用加密卡,在加密卡不存在的情况下,被加密软件的功能是不完整的,从根本上防止了软件破解。因此,研制硬件加密卡对于维护系统的安全具有及其重大的意义。
本课题研究了如何采用嵌入式技术来实现数据的高速传输及如何通过硬件实现对系统的加密功能。论文由四部分组成,其中加密卡的设计分三部分完成。第一部分介绍了基于ISA总线和51单片机的加密卡设计方案;第二部分采用嵌入式处理器代替原来的51单片机;第三部分采用PCI总线代替ISA总线。这样不但可实现同时传输四个字节的数据,而且能够解决数据传输过程中的瓶颈问题。第四部分介绍了嵌入式开发软件设计。论文详细介绍了每一部分的软、硬件设计,且整个系统在Protel99SE环境下设计,采用高速PCB设计方法,保证了硬件的可靠性。软件部分主要介绍了嵌入式软件开发平台的建立,及引导程序BIOS的启动流程、操作模式及如何利用JTAG烧写BIOS,最后介绍了Linux内核编译及移植的方法和步骤,其中嵌入式处理器采用三星公司的一款基于ARM920T架构的微处理器S3C2410A作为主控芯片,保证了系统的高速运行。
With the development of Internet, more and more people are focusing on the security of data. The encryption technology is an important way to protect the data. The encryption technology could be divided into two kinds according to the developing process and the growing trend of the encryption technology, which is software encryption and hardware encryption. The software encryption works slowly when dealing with a lot of data. The encrypted program in software will easily be read and destroyed by modifying the program. Yet, the hardware encryption has the characteristic of high speed, high security.The Encryption card are widely used in most of the hardware encryption. The functions of the encrypted software are not intact without the encryption card, which avoid the encryption breakage. So, the study of the hardware encryption has a great important role in protecting the system.
The way how to use the embedded technology to improve the high speed data transportation and how to reach the encryption function by hardware is discussed in the paper.The design consists of four parts and the encryption card is composed of three parts. In the first design, the encryption card based on ISA bus and 51 Singlechip is introduced;in the second design,51 Singlechip in the first design is replaced by the embedded processor;in the third design, ISA bus is replaced by PCI bus.So,not only four bytes data can be transported at the same time but also the question of bottleneck can be resolved successfully.The software design of embedded processor is introduced in the forth design. In the paper, both the software design and the hardware design are introduced in detail in every part.The whole system is designed in the environment of Protel99SE, exploiting the high speed PCB design which makes sure the credibility of hardware. In the software parts the building of embedded software design, and the start of the lead program BIOS, the operation mode and the way to write BIOS using JTAG are introduced. Finally, the method and the step of the debug and the transplant of Linux kernel are introduced. The embedded processor exploits the S3C2410A as the main control chip based on ARM920T core which is made in Samsung company, all of which make sure the high performance of the system.
本课题研究了如何采用嵌入式技术来实现数据的高速传输及如何通过硬件实现对系统的加密功能。论文由四部分组成,其中加密卡的设计分三部分完成。第一部分介绍了基于ISA总线和51单片机的加密卡设计方案;第二部分采用嵌入式处理器代替原来的51单片机;第三部分采用PCI总线代替ISA总线。这样不但可实现同时传输四个字节的数据,而且能够解决数据传输过程中的瓶颈问题。第四部分介绍了嵌入式开发软件设计。论文详细介绍了每一部分的软、硬件设计,且整个系统在Protel99SE环境下设计,采用高速PCB设计方法,保证了硬件的可靠性。软件部分主要介绍了嵌入式软件开发平台的建立,及引导程序BIOS的启动流程、操作模式及如何利用JTAG烧写BIOS,最后介绍了Linux内核编译及移植的方法和步骤,其中嵌入式处理器采用三星公司的一款基于ARM920T架构的微处理器S3C2410A作为主控芯片,保证了系统的高速运行。
With the development of Internet, more and more people are focusing on the security of data. The encryption technology is an important way to protect the data. The encryption technology could be divided into two kinds according to the developing process and the growing trend of the encryption technology, which is software encryption and hardware encryption. The software encryption works slowly when dealing with a lot of data. The encrypted program in software will easily be read and destroyed by modifying the program. Yet, the hardware encryption has the characteristic of high speed, high security.The Encryption card are widely used in most of the hardware encryption. The functions of the encrypted software are not intact without the encryption card, which avoid the encryption breakage. So, the study of the hardware encryption has a great important role in protecting the system.
The way how to use the embedded technology to improve the high speed data transportation and how to reach the encryption function by hardware is discussed in the paper.The design consists of four parts and the encryption card is composed of three parts. In the first design, the encryption card based on ISA bus and 51 Singlechip is introduced;in the second design,51 Singlechip in the first design is replaced by the embedded processor;in the third design, ISA bus is replaced by PCI bus.So,not only four bytes data can be transported at the same time but also the question of bottleneck can be resolved successfully.The software design of embedded processor is introduced in the forth design. In the paper, both the software design and the hardware design are introduced in detail in every part.The whole system is designed in the environment of Protel99SE, exploiting the high speed PCB design which makes sure the credibility of hardware. In the software parts the building of embedded software design, and the start of the lead program BIOS, the operation mode and the way to write BIOS using JTAG are introduced. Finally, the method and the step of the debug and the transplant of Linux kernel are introduced. The embedded processor exploits the S3C2410A as the main control chip based on ARM920T core which is made in Samsung company, all of which make sure the high performance of the system.
引文
[1]http;//www.netl30.com/CMS/Pub/softlevel/softlevel_networkengineer/2007_02_25_50950.Html
[2]http;//sunwgneuqsoft.itpub.net/post/34741/401377
[3]刘永华.网络安全与维护.南京;南京大学出版社,2007.
[4]http;//zhidao.baidu.com/quest ion/41415129.html
[5]胡汉才.单片机原理及其接口技术[M].北京;清华大学出版社,1996.
[6]刘笃仁.用ISP器件设计现代电路与系统.西安;西安电子科技大学出版社,2002.
[7]傅扬烈.单片机原理与应用教程[M].北京;电子工业山版社,2002.
[8]李伯成.基于MCS-51单片机的嵌入式系统设计.北京;电子工业出版社,2004.
[9]Gan,Woon-Seng.Embedded signal processing with the Micro Signal Architecture.Chile.Wiley-Interscience;IEEE Press,2007.
[10]Marwedel,Peter.Embedded system design.China;Science Press,2007.
[11]陈绩主编.ARM嵌入式技术实践教程.北京;北京航空航天大学出版社,2005.2.
[12]马忠梅,李善平.APM&Linux嵌入式系统教程.北京;北京航空航天山版社,2004.
[13]史有建,包孔伟.基于双口RAM的DSP与PCI总线通信的研究与实现.自动化技术与应用,2007,26(8);111-112,99.
[14]杨将军,王水波,郑辉.基于S3C2410的嵌入式串口通信实现.现代电子技术,2007,30(18);40-41,44.
[15]叶涛.JTAG调试系统的设计.科技信息;学术版,2007,25;75-76.
[16]胡婧,杨景常.基于JTAG协议的ARM调试接口设计.西华大学学报;自然科学版,2007,26(2);38-40.
[17]Shanley,Tom.PCI-X system architecture=.Beijing;Pub.House of Tsing Hua,2002.
[18]刘建中,李清宝.基于PCI总线加密卡硬件设计.电子技术应用,2004,30(1);7-9.
[19]李贵山.PCI局部总线及其应用.西安;西安电子科技大学出版社,2003.
[20]Solari,Edward.PCI&PCI-X hardware and software.Xi' an;Electronics Industry.Press,2003.
[21]翁斌.PCI总线接口芯片PCI9052及其应用.电子元器件应用,2006,8(7);118-120.
[22]吕宾,孙小东.PCI9052总线接口芯片及其ISA模式应用.经济技术协作信息,2004,6;50-50.
[23]赵斌.PCI9052及其应用.电子技术应用,2004,30(10);67-68.
[24]李辉.ISP系统设计技术入门与应用.西安;电子工业出版社,2002.
[25]http;//hi.baidu.com/zsw_davy/blog/item/92d5c988c9bela94a5c27275.html
[26]谭浩强.C程序设计教程.北京;清华大学出版社.2007.
[27]刘英杰,岳浩.Linux操作系统教程.北京;机械工业山版社,2005.
[28]http;//www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.18.tar.bz2
[29]Robbins,Arnold.Linux programming by example.China;China Machine Press,2005.
[30]Pottie,Gregory J.Principles of embedded networked systems design.England;Cambridge Univ.Press,2005.
[31]Kim,Seokhyun,Cho,Yookun.The Design and Implementation of Flash Cryptographic File System Based on YAFFS.Information Science and Security,and International Conference on,10-12 Jan.2008 Page(s);62 - 65.
[2]http;//sunwgneuqsoft.itpub.net/post/34741/401377
[3]刘永华.网络安全与维护.南京;南京大学出版社,2007.
[4]http;//zhidao.baidu.com/quest ion/41415129.html
[5]胡汉才.单片机原理及其接口技术[M].北京;清华大学出版社,1996.
[6]刘笃仁.用ISP器件设计现代电路与系统.西安;西安电子科技大学出版社,2002.
[7]傅扬烈.单片机原理与应用教程[M].北京;电子工业山版社,2002.
[8]李伯成.基于MCS-51单片机的嵌入式系统设计.北京;电子工业出版社,2004.
[9]Gan,Woon-Seng.Embedded signal processing with the Micro Signal Architecture.Chile.Wiley-Interscience;IEEE Press,2007.
[10]Marwedel,Peter.Embedded system design.China;Science Press,2007.
[11]陈绩主编.ARM嵌入式技术实践教程.北京;北京航空航天大学出版社,2005.2.
[12]马忠梅,李善平.APM&Linux嵌入式系统教程.北京;北京航空航天山版社,2004.
[13]史有建,包孔伟.基于双口RAM的DSP与PCI总线通信的研究与实现.自动化技术与应用,2007,26(8);111-112,99.
[14]杨将军,王水波,郑辉.基于S3C2410的嵌入式串口通信实现.现代电子技术,2007,30(18);40-41,44.
[15]叶涛.JTAG调试系统的设计.科技信息;学术版,2007,25;75-76.
[16]胡婧,杨景常.基于JTAG协议的ARM调试接口设计.西华大学学报;自然科学版,2007,26(2);38-40.
[17]Shanley,Tom.PCI-X system architecture=.Beijing;Pub.House of Tsing Hua,2002.
[18]刘建中,李清宝.基于PCI总线加密卡硬件设计.电子技术应用,2004,30(1);7-9.
[19]李贵山.PCI局部总线及其应用.西安;西安电子科技大学出版社,2003.
[20]Solari,Edward.PCI&PCI-X hardware and software.Xi' an;Electronics Industry.Press,2003.
[21]翁斌.PCI总线接口芯片PCI9052及其应用.电子元器件应用,2006,8(7);118-120.
[22]吕宾,孙小东.PCI9052总线接口芯片及其ISA模式应用.经济技术协作信息,2004,6;50-50.
[23]赵斌.PCI9052及其应用.电子技术应用,2004,30(10);67-68.
[24]李辉.ISP系统设计技术入门与应用.西安;电子工业出版社,2002.
[25]http;//hi.baidu.com/zsw_davy/blog/item/92d5c988c9bela94a5c27275.html
[26]谭浩强.C程序设计教程.北京;清华大学出版社.2007.
[27]刘英杰,岳浩.Linux操作系统教程.北京;机械工业山版社,2005.
[28]http;//www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.18.tar.bz2
[29]Robbins,Arnold.Linux programming by example.China;China Machine Press,2005.
[30]Pottie,Gregory J.Principles of embedded networked systems design.England;Cambridge Univ.Press,2005.
[31]Kim,Seokhyun,Cho,Yookun.The Design and Implementation of Flash Cryptographic File System Based on YAFFS.Information Science and Security,and International Conference on,10-12 Jan.2008 Page(s);62 - 65.