A Research On Security Mechanism Of Networked Embedded System

Embedded system will result in the pervasive computing in modern society. It is going fashionable and irresistible only with the rapid development of information technologies motivated by the advanced computing, communication and the in-depth application of the Internet. To put embedded equipment into network is an important way for the future development of embedded system. When the embedded equipment is put into Internet, on the one hand it is affected by the complicated system. On the other hand the security problem of Internet is raised because of its frangibility. After the embedded equipment is put into the network, the safety problem is the major problem to effect its development result from its insecurity.The purpose of this thesis is to research the security of networked embedded system. The thesis is set in a specific application --home automation network and analyzes it's characters for its security problems. It provides confidential, authetic and integral security mechanism for remote monitoring and controling of home automation device and then realize it.1. This thesis first discusses the characteristics of embedded systems and networked technologies of embedded systems, moreover, analyzes the security characteristics .of home automation networks and security strategy which aim at networked embedded system.2. And then this thesis describes the system and structure of the IPSec and put emphasis on the analysis of IPSec agreement and the structure of IPSec packages, the process of disposing and the Internet Key Exchanging (IKE). On the basis of analyzing the characteristics of embedded system, the technology of putting embedded systematic network to Internet and the IPSec safe mechanism, according to the characteristics that resources of the embedded equipment are limited, the service offered is relatively single and unable or very difficult to operate some network security softwares, we propose a new security mechanism which is based on IPSec, and sets up a new embedded system in the IP layer.3. Next, the thesis' system designation adopts the embedded hardware...