Research On Remote Bitstream Secure Update Of Reconfigurable Computing Platform

With the development of high-performance computing, supercomputersshortcomings in power gradually revealed. Currently supercomputer system power5000KW more prevalent in, and the peak power consumption of the Earth Simulatorhas reached12MW [1], that is, the power consumption of the day to meet the needsof a medium-sized city, which raised the specter of high-performance computingsystem input-output ratio of questioning. In recent years, the field of high-endcomputing research focus gradually shift from high performance computing tohigh-performance computing (High Productivity Computing).Using reconfigurable computing systems, depending on the application task toreconstruct computing resources, which can effectively improve the computationalperformance. Reconfigurable computing refers to rely reconfigurable logic devices(such as FPGA, etc.) of reconfigurability of the computing tasks to be performed bythe real-time allocation of hardware resources to be re-configured to accommodatethe specific application computing platforms to achieve near High performancecomputing model hardware devices. Based on field-programmable gate array (FieldProgrammable Gate Arrays, FPGA) reconfigurable technology is one of the keytechnologies for reconfigurable computing systems.Our paper is to study the security updates in the remote bitstream reconfigurableFPGA-based computing platform (FPGA-based Reconfiguration Computing Platform,FRCP) in the background, so we first analyzed the major security problems exist inthe current FPGA and reconfigurable computing security system, followed by themain security threat theory describes the system architecture FRCP, FRCParchitecture design, and this reconfigurable computing platform faces.Then our paper reconfigurable computing platform for remote bitstream updatethe information has been tampered with, and how to prevent replay attack problem, areconfigurable computing platform remote bitstream security update program. Theprogram ends in remote updates using some encryption policy configurationbitstream encryption and calculate the MAC value, the information sent via Ethernetreconfigurable computing platform, after the control unit to verify the integrity of theencrypted bitstream and MAC values put security configurator into the final FPGApower-control unit to request access to the bitstream, thus completing the securityupdate remote bitstream. Analysis shows that the update program to ensure theintegrity and confidentiality of the bit stream, and can prevent replay attacks.Based on these studies one remote bitstream security update scheme, was foundin a cluster of FPGA configuration update, the two sides bitstream update protocol less efficient key management complexity, can not meet the growing FPGA clusterdynamic configuration updates demand, therefore, we propose a multi-protocolremote update bitstream having a forward security. The protocol uses a session keyencrypted bit stream information, and the use of dual-key access to the session keychains, clusters can improve the efficiency of the FPGA configuration updates duringrounds. Security analysis shows that the protocol can guarantee the confidentiality,integrity and forward security, and to prevent replay attacks.