基于可重构密码模块的VPN安全网关  

VPN Security Gateway Based on Reconfigurable Cipher Module

作　　者：褚有睿[1] 王志远 欧阳旦 

机构地区：[1]解放军信息工程大学电子技术学院,郑州450004 [2]空军电子技术研究所,北京100089

出　　处：《计算机工程》2011年第5期152-154,共3页Computer Engineering

摘　　要：结合片上可编程系统和IPSec技术,设计一种基于可重构密码处理模块的虚拟专用网安全网关。该网关采用双处理器结构,主处理器完成系统芯片的初始化配置、系统控制、管理和数据包的预处理,协处理器完成IPSec处理功能,可重构密码处理模块加速加解密处理,从而提高算法执行效率,同时扩展IPSec协议的安全性。实验结果表明,该网关具有较高的吞吐率,能满足中低端网络安全的需求。By combining the System On a Programmable Chip（SOPC） and the IPSec technology,this paper designs a virtual private security gateway based on reconfigurable cipher processing module.A-two CPU architecture is adopted,one CPU is used as main processor and the other is used as IPSec coprocessor.The main processor mainly finishes the following task,which initializing configuration of the chip,controlling the system,management and the preprocessing of the data.The IPSec coprocessor mainly performs the IPSec processing function.The reconfigurable cipher processing module is used to accelerate the encryption and the decryption,so the cipher algorithm is processed faster than before and the security of the IPSec protocol is better at this gateway.Experimental result shows that this gateway has higher processing rate and can satisfy the security demand of small network.

关 键 词：虚拟专用网安全网关 NIOSⅡ处理器 片上可编程系统 可重构密码处理 

分 类 号：TP393.05[自动化与计算机技术—计算机应用技术]