基于部分自适应路由的片上网络数据传输防护机制  

Network-on-chip data transmission protection mechanism based on partial adaptive routing

作　　者：华屹峰 张颖[1] 姚娇艳 杨济中 李源翔 陈鑫[1] HUA Yifeng;ZHANG Ying;YAO Jiaoyan;YANG Jizhong;LI Yuanxiang;CHEN Xin(College of Electronic and Information Engineering,Nanjing University of Aeronautics and Astronautics,Nanjing 211100,China)

机构地区：[1]南京航空航天大学电子信息工程学院,江苏南京211100

出　　处：《微电子学与计算机》2023年第9期90-97,共8页Microelectronics & Computer

基　　金：国家自然科学基金项目(61701228,61106029)。

摘　　要：现代多处理器片上系统(MPSoC)将应用程序分布在多个IP上,而片上网络(NoC)是广泛采用的IP间数据交换解决方案.由于不同的IP可能由多个第三方供应商提供,而第三方供应商的可信度往往难以保证,在这种情况下,如何确保重要IP之间的安全数据通信是一个重要的研究课题.本文按应用程序的需求构建NoC安全区,并对可能遭受攻击的安全区成员实施防护措施.通过对成员间传输的数据进行认证加密来保证数据的安全,同时,在数据包路由过程中对其进行逐跳认证的方式实现对恶意节点的检测与定位.对于定位到的恶意节点,本设计能通过部分自适应路由技术对其进行路由隔离,防止恶意节点再次危害数据安全.在gem5仿真器的ruby内存模型的garnet框架上实现了该设计,并进行了功能和性能的验证.实验结果表明,所提出的防护设计能够保证NoC数据传输的有效性和可靠性,同时对系统的性能影响较小.Modern Multiprocessor System-on-Chip(MPSoC)distributes applications across multiple IPs,whereas Network-on-Chip(NoC)is a widely adopted solution for IP-to-IP data exchange.Since different IPs are provided by multiple third-party suppliers,and the credibility of third-party suppliers is often difficult to guarantee,ensuring secure data communication among essential IPs has become an important research issue.This paper constructs NoC security zones according to the requirements of applications,and implements protective measures for security zone members which may be attacked.The data transmitted between members will be authenticated and encrypted to ensure the security of the data.At the same time,the detection and location of malicious nodes are realized through hop to hop authentication in the process of packet routing.For the malicious nodes that are located,the proposed architecture can isolate them through partial adaptive routing method to prevent malicious nodes from harming data security again.On the garnet framework of gem5's ruby memory model,the design has been implemented and verified.Experiment results indicate that our proposed architecture can ensure the validity and reliability of NoC data transmission,while having less impact on the performance of system.

关 键 词：片上网络 安全性设计 硬件木马 自适应路由 

分 类 号：TN918.91[电子电信—通信与信息系统] TN47[电子电信—信息与通信工程]