Research And Design Of A Hybrid Encryption Policy Used In Network Communication System

As the development of the Internet technology, the E-commerce has become anvery important part of commercial areas, and the most information of E-commerce istransmissed by the Internet, which is always needed to be encrypted to safeguard thesecurity. However, the software encryption is choosed in most E-commerce securityarea, which has the feature of low security and reability, and is easyed to be cracked. So,a hardware encryption platform integrated with a variety of algorithms is urgent to bebuilded for improving the security of the data in the E-commerce.The source of this issue: Horizontal issue “The safety and encryption platfrom ofE-commerce”. The purpose of this issue is designing a safe and reliable encryptionplatform of E-commerce by the all programmable SoC, which can provide encryptionaisle for E-commerce company. After the analysis and stduty of the encryption platform,an encryption communicationsystem based on the hybridencryptionpolicy is designed.This issue innovativly raises a hybridencryptionpolicy, which is integrated withthree different encryption algorithm included AES, ECC, RSA, the system can choosesuitable encryption algorithm according to the size and type of encrypted data, and theappropriate key management policy is raised, for managing and allocating theencryption and decryption key from user.The encyption communication system adopts the method of embedded systemdesigning based on the FPGA, which is in basic of the all programmble SoC, the systemmodules will be implemented in the ARM and FPGA for the hardware and softwareco-design.The part of hardware consists of the design of the AXI-4bus interface ofthree encryption IP cores and the interface register; the base system is builded in theenvironment of XPS, and the three encryption IP cores is integrated to the XPS system.The part of software consists of the transplanting of Linux OS, included themanufacturing of U-BOOT and the designing of the Linux driver of three encryption IPcore; The program of system is designed in the Linux+Qt, included the designing ofhybridencryptionpolicy, the home GUI and three kinds of encryption algorithm, thetransfer program of ethernet data.In order to make sure that the system can work successfully, it is essential to makefunctional simulation and verification. It contains the functional simulation of encryptedIP core and the reading and writing simulation of the custom bus interface. Bareprogramhas been written to test the system without transplanting the Linux. Besides, theverification platform has been built to test the whole system including the Linuxoperating system. What to do above all is to verify the function of GUI interface.In this paper, it has been built an encryption communication system based on the hybrid encryption policy. There are three encryption algorithms have been integrated inthe system which are formed as IP core(Designed by FPGA). The top applicationprogram is running in the Linux operation system, which accesses the IP core by theAXI-4bus. Then datatransmission inside the system is based on the Ethernet, and thedata would be encrypted to ensure its security.