信息通信技术与政策

信息通信技术与政策

信息通信技术与政策 ›› 2021, Vol. 47 ›› Issue (11): 79-.doi: 10.12267/j.issn.2096-5931.2021.11.015

上一篇    下一篇

一种可信万兆加密分流认证装置研究

Research on a trusted ten gigabit encryption shunt authentication device

葛红舞, 陈民   

  1. 南瑞集团有限公司(国网电力科学研究院有限公司),南京 210000
  • 出版日期:2021-11-15 发布日期:2022-01-04
  • 作者简介:
    葛红舞:南瑞集团有限公司(国网电力科学研究院有 限公司)工程师,长期从事电力物联网、可信安全产品和嵌入式硬件开发等方面的工作。
    陈民:南瑞集团有限公司(国网电力科学研究院有限公司)工程师,长期从事电力物联网、嵌入式硬件开发等方面的工作

GE Hongwu, CHEN Min   

  1. Nari Group Corporation / State Grid Electric Power ResearchInstitute , Nanjing 210000, China
  • Online:2021-11-15 Published:2022-01-04

摘要: 以供电时序控制与信任根作为可信启动度量依据,结合电力安全认证防护策略机制,提出了一种 可信万兆加密分流认证装置设计方案。 该方案充分利用 FPGA 内部高性能可编程资源实现万兆报文数 据源解析与定向转发,同时构建多通道数据链路实现并行传输,通过并行总线实现对称加密,千兆以太 网实现密钥配置与协商功能。 

关键词: 可信, 万兆, 分流认证, FPGA

Abstract: Taking power supply timing control and the root of trust as the basis for the credible start-up measurement, combined with the power safety certification protection strategy mechanism, a design scheme of a credible 10 Gigabit encrypted shunt certification device is proposed. This solution makes full use of the high-performance programmable resources inside the FPGA to realize 10 Gigabit message data source analysis and directional forwarding. At the same time, it builds a multi-channel data link to realize parallel transmission, realizes symmetric encryption through a parallel bus, and realizes key configuration and key configuration through Gigabit Ethernet. Negotiation function.

Key words:  trust, 10 gigabit, shunt certification, FPGA