The Research Of Security Mechanism For FPGA Remote Upgrade System

With the continuous development of semiconductor technology, FPGA is widelyused in various fields. The configurable property of FPGA provides the feasibility fordevice product updates and maintenance. At present, many device manufacturers haveprovided the relevant technology which supporting for FPGA remote upgrade. However,faced with a variety of market competition and network security issues, guarantee thesafety of remote upgrade data is also an important aspect.In this paper, in view of the FPGA device upgrade maintenance problems, wedesign a security mechanism for FPGA remote upgrade system. The mechanism adoptsthe data encryption and signature authentication techniques to ensure that theconfiguration file transmission confidentiality, integrity and non repudiation. Adoptingthe digital encryption technology to encrypt the session key. Using the network transfertechnology to sent the configuration file which is encrypted and signed on a remoteserver to local target system. Using the decryption authentication technology to get theconfiguration file and write it to the non-volatile memory. Thus to realize the remotesystem upgrade. The mechanism is based on algorithm SM2, SM3and SM4which ispublished by the Office of Security Commercial Code Administration (OSCCA) toimplement data encryption and authentication on the client and server side. Themechanism uses the Winsock API to achieve the network transmission of configurationfile. The paper based on the Virtex-II Pro development platform realizes FPGA updateconfiguration and thus verified the mechanism.Finally, this paper analyzes the security of system. The analysis results show that,the mechanism designed in this paper has a higher security, and has a certain theoreticalsignificance to the development of remote upgrade technology on FPGA system.