【作者】 徐亮；

【导师】 杨承恩；

【作者基本信息】 大连海事大学 ， 控制理论与控制工程， 2009， 硕士

【摘要】 随着互联网与通讯技术的飞速发展,数据安全问题已成为当今世界关注的热点,而加密技术是实现数据安全的一种非常重要的手段。加密技术可分为软件加密和硬件加密两大类。软件加密最大的优势在于它的成本低,工艺难度小。但需要CPU全程参与,会消耗大量的系统资源,而且加密的速度较慢,尤其是对一些海量数据进行处理时,会造成硬盘读写的瓶颈。硬件加密不但解决了软件加密速度慢和耗费CPU大量资源的缺点,而且还具有加密强度大、可靠性高等优点。加密卡是实现硬件加密的主要方式,加密卡不存在的情况下,被加密软件的功能是不完整的,从根本上防止了软件被破解。因此,研制硬件加密卡对于维护系统的安全具有及其重大的意义。本课题研制的加密卡源自泳池监控系统,采用嵌入式技术和PCI总线技术相结合,利用“代码移植”的加密原理,即PC端应用软件的关键代码和数据“消失”了,被安全地移植到加密卡的硬件中保护起来。在需要使用时,PC端的应用软件可以通过功能调用指令运行硬件中的关键代码和数据,并返回结果,从而实现了对软件系统的加密。本论文主要分五部分:第一部分介绍了数据加密方面的一些基本概念、相关技术背景以及本课题设计的来源;第二部分介绍本课题所设计的加密卡的原理背景;第三部分介绍了基于友善公司的Nano2410A的PCI加密卡硬件电路设计。详细的介绍了PCI模块电路设计、ARM模块电路设计、以及Nano2410A与PCI的接口模块电路的设计;第四部分介绍了加密卡的软件系统的设计。详细的介绍了Windriver环境下的PCI加密卡WDM驱动程序的编写、ADTIDE环境下的ARM模块上的加密程序的设计以及PC机上VC6.0环境下的应用程序的设计;最后一部分总结了本设计所做的工作以及其中的不足和对未来的展望。更多还原

【Abstract】 With the rapid development of the internet and communication technology,data security has become the focus of attention in today’s world,and encryption is a very important tool of data security.Encryption technology can be broadly divided into two major categories of software encryption and hardware encryption.Software encryption’s greatest strength lies in its extremely low cost;and technical does not very difficulty.However,software encryption needs the CPU of computer in full participation,it will consume a large amount of system resources and the speed of encryption is slow.In particular,processing a number of massive data will be the bottleneck caused by the hard disk read and write.Compared with the case of software encryption,hardware encryption not only resolved the problem of the slow speed of and a lot of resources that software encryption cost,but also has stronger encryptionand higher reliability.Encryption card is the main form of hardware encryption,if encryption card does not exist;the functions of the software encrypted were incomplete and prevent fundamentally the software to be break.Therefore,the designing of the hardware encryption card play an important role in the maintenance of system security.The encryption card which the subject studied,adopting embedded technology and PCI bus technology,using the encryption principle of "code transplant",that is,the key code and data of PC-side application software disappear,they have been safely transplanted to encryption cards and protected by hardware.When it’s in use,PC-side application software can run the code and data through the call of function,and return a result,and realize the encryption of software systems.This paper is divided into five main parts:the first part describes information security concepts,some of the related technology background and the source of this issue.The second part of this paper introduces encryption card’s the background of the design principles.The third part discusses the design of the PCI encryption card based on the Nano2410A of friendly company.And discribes the designs of the PCI module,ARM module circuit,as well as the interface module circuit of Navo2410A and PCI in detail.The fourth section describes the design of encryption card’s software system.And discribes the WDM driver of the PCI encryption card in Windriver,the design of encryption program of ARM module in ADTIDE,as well as the design of PC application program in VC6.0.S the last part of the paper summed up the work done by the design,the shortcomings and the vision for the future更多还原