Design And Realization Of Linux Real-time Improvement And Data Encryption Module For Security Gateway

This thesis realized a security gateway on the basis of study security gateway technology. This security gateway is based on X86 platform, improved real-time performance of Linux, which integrated data packets encryption and authentication.According to the security gateway real-time demand this thesis explains the defects of Linux real-time performance. Three aspects which are preemptive scheduling kernel, real-time task scheduling strategy and the response time of task are designed to improve the real-time performance of Linux. Realizing the security function of system by using IPSec protocol on network layer and reconstructing the standard Linux kernel process, it creates new procedures for IP layer by bundling IP packet processing and data packet encryption and authentication module.After testing, the design realized the function of safety data communication and key negotiation and enhanced the speed performance of data transmitting through the security gateway.