基于Linux系统网络加密卡设计

发布时间：2018-03-25 12:53

本文选题：Linux　切入点：祖冲之算法　出处：《黑龙江大学》2016年硕士论文

【摘要】：随着近几年互联网的飞速发展,电子商务、移动支付、互联网金融、网络银行、O2O平台等已经融入了每个人的生活,搜索引擎、多媒体网络信息传输、社交网络也早就与我们息息相关。人们逐渐习惯并且依赖于通过计算机从网络获取各种各样的信息或者编辑信息在网络上传输,互联网的开放性和匿名性使得网络信息变得非常不安全,这使得网络安全问题不断加剧。因此,网络安全产品的研究有着巨大的前景和意义。本文主要设计了一种基于Linux系统、以FPGA为载体的“网络数据加密卡”的实现方案。硬件主要基于FPGA的开发环境以VHDL语言来实现,网卡芯片采用DM9000芯片。软件驱动部分是基于开源Linux系统来实现。本设计主要实现的功能为数据在发送过程中可以通过本“网络数据加密卡”自主选择是否需要对数据进行加密,然后通过互联网进行加密数据或者非加密数据的传输。在接收过程中可以对加密数据进行解密。本设计在FPGA内部主要对祖冲之算法进行了实现。该系统以硬件加密为基础,实现了网络数据的安全加密传输,保证了网络数据传输的可靠性和安全性。本论文对于硬件部分首先进行整体的需求分析和硬件模块化的总体框架进行研究。阐述了基于PCI协议的PCI接口实现和PCI协议原理、DM9000网卡芯片的控制和工作过程。详细介绍在FPGA内部与DM9000芯片连接的控制模块和DM9000操作模块的原理、序列加密祖冲之算法的原理和实现。在软件部分,主要研究了基于Linux系统的PCI接口网卡驱动。其中阐述PCI接口网络设备驱动的整体框架和工作过程,并且详细介绍其中数据的处理机制和网络数据发送接收的工作原理。本设计经过在互联网多台计算机实验验证,安全可靠的实现了数据加密传输。
[Abstract]:With the rapid development of the Internet in recent years, E-commerce, mobile payment, Internet finance, Internet banking and O2O platform have been integrated into the life of everyone, search engine, multimedia network information transmission, etc. Social networks have long been linked to us. People are getting used to and relying on computers to get all kinds of information from the network or edit it to transmit it. The openness and anonymity of the Internet make the network information become very insecure, which makes the network security problem become more and more serious. Therefore, the research of the network security products has great prospect and significance. This paper mainly designs a kind of system based on Linux. The realization scheme of "network data encryption card" based on FPGA. The hardware is mainly realized by VHDL language based on the development environment of FPGA. The DM9000 chip is used in the network card chip. The software driver part is based on the open source Linux system. The main function of this design is that the data can be sent through the "network data encryption card" to choose whether or not to encrypt the data. Then the encrypted data or non-encrypted data is transmitted through the Internet. In the process of receiving, the encrypted data can be decrypted. This design mainly implements Zu Chongzhi algorithm in FPGA. The system is based on hardware encryption. The secure encryption transmission of network data is realized. This paper studies the whole requirement analysis of hardware and the overall frame of hardware modularization. The realization of PCI interface based on PCI protocol and PCI are expounded. The control and working process of DM9000 network card chip are introduced in detail. The principle of control module and DM9000 operation module connected with DM9000 chip in FPGA are introduced in detail. The principle and implementation of Zu Chongzhi algorithm of sequential encryption. In the software part, the PCI interface network card driver based on Linux system is mainly studied. The whole frame and working process of PCI interface network device driver are expounded. The mechanism of data processing and the working principle of sending and receiving network data are introduced in detail. The design is verified by experiments on many computers on the Internet, and the data encryption transmission is realized safely and reliably.
【学位授予单位】：黑龙江大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：TP393.08;TP316.81

【相似文献】