密码安全USB设备控制器IP的系统设计  

System design of cryptographic security USB device controller IP core

作　　者：杨先文[1] 李峥[1] 王安[2] 张宇[1] 

机构地区：[1]解放军信息工程大学电子技术学院,河南郑州450004 [2]山东大学密码技术与信息安全教育部重点实验室,山东济南250100

出　　处：《华中科技大学学报（自然科学版）》2010年第9期59-62,共4页Journal of Huazhong University of Science and Technology(Natural Science Edition)

基　　金：现代通信国家重点实验室基金资助项目(9140C1106021006);军队科研基金资助项目

摘　　要：针对通用串行总线(USB)的安全隐患,提出了USB接口的安全策略,包括主机与设备之间身份双向认证、总线传输安全、数据存储安全等基本功能.给出了一种主机与设备之间双向认证及密钥协商协议,提出了一种密码安全USB设备控制器的系统设计方案,并在现场可编程门阵列(FPGA)上对该方案进行了IP核验证.实验结果表明,该方案能够满足预期的安全功能需求,可为实际的系统开发提供芯片级安全保护.Aiming at the security risks of universal serial bus （USB） devices in daily use, a secure scheme of USB interface was given. The scheme involved many secure functions, such as bidirectional authentication between host and device, transport bus security, data storage security and so on. A USB authentication and key agreement protocol were proposed to achieve above functions. Then, system architecture of a cryptographic security USB device controller was presented, and the implementation of its soft IP core was verified on a field-programmable gate array（FPGA）. Experimental results indicate that the design can support prospective security, and can provide chip-level secure protection for practical systems.

关 键 词：通用串行总线 密码安全 协议 椭圆曲线密码体制 现场可编程门阵列(FPGA) 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]