Research And Implementation Of IBC Key Generation System Based On FPGA

With the rapid development of information technology,information security has attracted extensive attention.By encrypting the file and data when storage and transmission using the cryptographic techniques,we can effectively prevent of information leakage while the file or data has been leaked,so as to ensure the security of information.Based on the in-depth research of the identity-based cryptography(IBC)and in view of the process of releasing public key and private key distribution in the IBC system,a research and development of an IBC key generation system based on FPGA had come out in this thesis.As a new type of public key encryption system,IBC use the user's identity(such as id card number,telephone number and email address,etc.)and a set of parameters in public as a public key to encrypt data.Because that the user's identity has direct contact with the user,so the private key need not to be bound by a digital certificate,so as to avoid IBC from the short comings of management certificate of a large number of users in the traditional public key cryptography system.The private key which is used to decrypt data in the IBC system is produced by a trusted third party.The key generation system researched in this thesis is to generate the private key as a trusted third party.The key generation system in the IBC system occupies a very important position,it also determines the safety of the whole IBC system.The research of the IBC key generation system in this thesis can be divided into two big design and implementation modules: 1)the design and implementation of the IBC encryption card in the FPGA platform.This module is to achieve the release of public parameters and the calculation of the private key of the IBC.Researching on the elliptic curve point multiplication operation involved in the process of calculating the IBC private key,three solutions are designed based on pure software method,pure FPGA hardware method and mix of hardware and software method in this thesis,so that the best method can be chosen under the circumstances.2)the design and implementation of the key generation service program.As a bridge of the IBC encryption card to connect with the outside world,this module is designed to authenticate the real identity of a IBC key requestor,and to handle requests from the outside part,so that can effectively reduce the workload for the IBC encryption card.This module is implemented based on Java programming language,in order to has the good cross-platform compatibility.In addition,a security communication protocol based on SSL security network protocol which is used for public and private key transmission process and to ensure the confidentiality and integrity of the public parameters and private key transmission is designed and presented in this thesis.Innovation point of this thesis lies in the IBC key generation and password operations carried out within the hardware card,which can ensure the safety.Besides,the key generation service program is developed by Java language,thus ensuring the cross-platform compatibility of the IBC key generation system.In addition,the IBC encryption card support high-speed PCIE bus and Ethernet two ways to communicate with a PC,so that able to adapt to different communication environment preferably.