作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程

• 开发研究与工程应用 • 上一篇    下一篇

一种高速免驱USB加密卡的设计与实现

张锋 1,2,朱振荣 1,2,史胜伟 1,2   

  1. (1.公安部第一研究所 通信技术事业部,北京 100048; 2.北京迅安网络系统有限责任公司,北京 100048)
  • 收稿日期:2016-09-30 出版日期:2017-11-15 发布日期:2017-11-15
  • 作者简介:张锋(1986—),男,工程师、硕士,主研方向为嵌入式系统开发、通信信息安全;朱振荣,副研究员、博士;史胜伟,工程师、硕士。
  • 基金资助:
    “十二五”国家科技重大专项(2011ZX03004-004)。

Design and Realization of a High-speed and Driver-free USB Encryption Card

ZHANG Feng  1,2,ZHU Zhenrong  1,2,SHI Shengwei  1,2   

  1. (1.Communication Technology Division,First Research Institute of the Ministry of Public Security,Beijing 100048,China;2.SONICOM Co.,Ltd.,Beijing 100048,China)
  • Received:2016-09-30 Online:2017-11-15 Published:2017-11-15

摘要: 针对信息安全业务对安全加密模块处理速率要求日益增高的现状,基于自主研发安全芯片提出一种通用串行总线(USB)加密卡设计方案。开发一个多层结构的高性能片上操作系统,并将USB加密卡配置为大容量存储设备,利用Bulk-Only协议与主机通信,使主机无需安装驱动,同时通过扩展的SCSI私有指令完成加解密操作,提高便捷性与安全性。此外,设计一种USB高速密码算法子系统,其中采用数据流控制单元以及USB直接内存存取、协处理器软件流水线、AHB-Lite总线等多种加速策略。测试结果表明,该方案设计的USB加密卡使用便捷,能够高速完成国密SM1的运算。

关键词: 通用串行总线, 加密卡, 协处理器, 免驱, 片上操作系统

Abstract: Aiming at the growing requirement of processing rate of encryption module in the realm of information security,this paper proposes a design scheme of Universal Serial Bus(USB) encryption card based on self-developed security chip.Firstly,a high-performance Chip Operation System (COS) of multilayered structure is developed which configures the USB encryption card to massive storage device,and Bulk-Only protocol is used to communicate with host without installing driver.Meanwhile,extended SCSI private commands are used to complete encryption and decryption operation,which improve convenience and security.Otherwise,a USB high-speed cryptographic algorithm subsystem is proposed which uses Flow Control Unit(FCU) as cooperator.In addition,some accelerating strategies are adopted,such as USB-DMA,software pipeline,AHB-Lite bus,etc.Test results show that the USB encryption card designed by the proposed scheme can realize high-speed SM1 operation,which is convenient to use.

Key words: Universal Serial Bus(USB), encrypion card, coprocessor, driver-free, Chip Operation System(COS)

中图分类号: