Isolation Card Design And Implementation Of Multi-dsp-based Network Encryption

Along with the rapid progress of computer networks, the idea of network information security looms so large in modern technology communities. Security requirements from individuals and enterprises have never been more intensive nowadays. It may effectively enhance the network communication security by using the Secure Sockets Layer (SSL) protocol. However, hand-shake and the record disposal processes in SSL must carry on the massive encryptions and the decryption operation, processing of encryption and decryption does take great amount of CPU time, which leads to a system bottleneck.Network isolation is an important security measure,it aims to restrict network resource sharing,preventing information omitting among different networks.Various technologies are proposed with the purpose of implementing efficient network isolation and related researches are hot points in the field of security.Detailed description of the design and implementation of the network encryption and isolation card based on multi-DSP (for short MDSPNEIC card) is presented in this thesis.Encryption and decryption related execution in SSL are processed by the PCI hardware card,this largely reduces the burden of host computers and lows the risk of encryption algorithms being altered or analyzed.Moreover,with the combination of double TCP/IP stacks and multi-DSP technologies,it achives the goal of 2-network isolation on the basis of encryption.The research work mentioned in the thesis is mainly about:(1) Network encryption, network isolation and SSL research.(2) With the research background of PCI and DSP technology, have designed MDSPNEIC card and have designed and realized the DSP implementation.(3) With the research background of multi-port memory principles, have realized multi-DSP connection and dispatch.(4) Based on encryption , have effectively realized 2-netowrk isolation according to characteristics of double TCP/IP stack and multi-DSP architecture.(5) With the deep research of Windows Driver Model,have realized the implementation of MDSPNEIC card hardware driver on the windows platform.(6) With the analysis and study of CryptoAPI/CSP development technology, have realized MDSPNEIC card API for encryption.