Secure Windows Terminal Auxiliary Nuclear Communication Module Based On Dual-core And Realization

With the development of the network technology, more and more problems in the network security have appeared.PC terminal information security is the most important part of network security. In this case, a terminal information security defence model based on "Dual-Core(Processor) and Dual-OS" is proposed.In this model the Windows PC terminal which based on "X86" structure is as "master-core",the ENSS(Embedded Network Security System) based on "ARM Computer" is as "slave-core". The ENSS system which can be inserted into the Windows PC terminal and the network provides individualized security services for that Windows PC terminal. The Dual-Processor&Dual-OS Architecture can separate the security disposal from Windows ,it can isolate the Windows from the external networks physically. This solution overcomes shortcomings that traditional network security protection technologies can be bypassed by invaders, so it can offer Windows terminals a better protection than traditional technologies do.Based on the architecture of "Dual-Core and Dual-OS", this paper takes charge the design and realization of the slave-core communication system. This paper accomplished the following four tasks: Firstly, the embedded OS running on the ENSS was chosen, and then transplant Linux to ENSS according to the hardware configuration of this board. Secondly, through analyzing the main means of the communication between the Windows PC and the ARM board, this paper introduces and realises a buffer and communication mechanism based on the Dual-port RAM, with it, the Windows PC can communicate with the arm processor each other.Thirdly,the paper designs the Linux device driver of CS8900A ,with which the ARM board can communicate with the network by the CS8900A chip. Finally,by analyzing the hardware structure of this ENSS board,this paper introduce a new communication model,which is based on the Linux Netfilter structure.though this model ,the data packeges can flow between Dual-port RAM and CS8900A chip after been filterd by the security handling system in the Linux kernel.The slave-core communication system has been experimented under the "Dual-Core and Dual-OS" system.It can provide a communication routeway for the security handling system well.