[1]黄兴利 蔡国强 于红毅.Linux2.4内核下IPSec加密卡的实现研究[J].计算机技术与发展,2011,(07):161-164.
　HUANG Xing-li,CAI Guo-qiang,YU Hong-yi.Research and Implementation of IPSec Encryption Card on Linux 2.4 Kernel[J].,2011,(07):161-164.
点击复制

Linux2.4内核下IPSec加密卡的实现研究()
分享到：

《计算机技术与发展》[ISSN:1006-6977/CN:61-1281/TN]

卷:
期数:
2011年07期
页码:
161-164
栏目:
安全与防范
出版日期:
1900-01-01

文章信息/Info

Title:
Research and Implementation of IPSec Encryption Card on Linux 2.4 Kernel
文章编号:
1673-629X（2011）07-0161-04
作者:
黄兴利1 蔡国强2 于红毅2
[1]温州大学商学院[2]西北工业大学网络环境下复杂系统控制实验室
Author(s):
HUANG Xing-li; CAI Guo-qiang; YU Hong-yi
[1]Business College,Wenzhou University[2]Network-based Complex System Control Lab,Northwestern Polytechnical University
关键词:
Linux; 网络协议安全; 加密卡; 驱动设计; 接口函数
Keywords:
Linux;  IPSec;  encryption card;  driver design;  interface function
分类号:
TP393.08
文献标志码:
A
摘要:
在综合考虑安全性、处理速度及开发周期的基础上,针对Linux2.4内核提出了将IPSec协议分解为由主处理器实现的计算复杂型操作和由硬件加密卡实现的计算密集型操作的方案。主处理器进行协议解析、数据包的封装等操作,专用加密卡实现加解密、认证等高强度计算,并给出了相关的接口函数方便用户进行二次开发。专门设计了Linux操作系统下加密卡的驱动,实现了高速稳定的DMA数据传输。实验结果表明该方案具有高安全性、高速及良好的可扩展性等优点,具有良好的应用前景
Abstract:
After taking safety,processing speed and development circle into consideration,a new project based on Linux2.4 kernel dividing IPSec protocol into complex computational operation and CPU-bound operation is given in the paper.Operations about protocol analysis as well as data packaging are fulfilled by main processor,while operations about encryption,decryption and authentication are implemented by special hardware encryption card,and moreover,related interface functions are shown clearly which is helpful for re-development.Special driver system is designed under Linux operation system,and high speed as well as stable DMA data transfer is implemented.It is illuminated from the experiment results that this project has good merits such as high security,high speed and perfect expandability with a promising application prospect

相似文献/References:

[1]杨明明 王铮.Netfilter性能动态改善方法的研究与实现[J].计算机技术与发展,2010,(04):163.
　YANG Ming.ming,WANG Zheng.Study and Implementation of Algorithm to Dynamic Improvement of Performance of Netfilter[J].,2010,(07):163.
[2]石晶翔 陈蜀宇 黄晗辉.基于Linux系统调用的内核级Rootkit技术研究[J].计算机技术与发展,2010,(04):175.
　SHI Jing-xiang,CHEN Shu-yu,HUANG Han-hui.Research on Kernel Level Rootkit Technology Based on Linux System Call[J].,2010,(07):175.
[3]于明 盛俊 刘建设.基于IntelPXA270的系统引导程序移植与实现[J].计算机技术与发展,2010,(06):32.
　YU Ming,SHENG Jun,LIU Jian-she.Transplant and Realization of Bootloader Object Based on PXA270 Embedded Systems[J].,2010,(07):32.
[4]乔进 邹涛.基于IntelPXA27X的音频驱动开发和实现[J].计算机技术与发展,2009,(07):210.
　QIAO Jin,ZOU Tao.Development and Implementation of Audio＇s Driver on Intel PXA27X Processor[J].,2009,(07):210.
[5]景玉冰 孙伟.基于嵌入式的教学监测系统的设计[J].计算机技术与发展,2009,(07):245.
　JING Yu-bing,SUN Wei.Design of Teaching Monitoring System Based on Embedded System[J].,2009,(07):245.
[6]唐六华 王瑛.嵌入式Linux下USB主机设备驱动开发[J].计算机技术与发展,2009,(09):181.
　TANG Liu-hua,WANG Ying.Investigation of USB Host Device Driver in Embedded Linux[J].,2009,(07):181.
[7]潘志华 张涛.Linux预取算法分析与研究[J].计算机技术与发展,2009,(12):93.
　PAN Zhi-hua,ZHANG Tao.Research and Analysis on Algorithm of Prefetching in Linux[J].,2009,(07):93.
[8]满梦华 原亮 丁国良 巨政权.手持式终端设备中电源监测技术研究与实现[J].计算机技术与发展,2009,(01):237.
　MAN Meng-hua,YUAN Liang,DING Guo-liang,et al.Study and Implementation of Power- Monitoring Technology for Hand- Hold Terminal[J].,2009,(07):237.
[9]阮赐兴 赵彦敏.Linux下MPC8272的USB主控制器驱动设计与实现[J].计算机技术与发展,2009,(02):12.
　RUAN Ci-xing,ZHAO Yan-min.Design and Realization of USB Host Controller Driver for MPC8272 in Linux[J].,2009,(07):12.
[10]华明 徐造林.基于触摸屏驱动的Linux内核输入子系统研究[J].计算机技术与发展,2009,(03):5.
　HUA Ming,XU Zao-lin.Linux Kernel Input Sub-System Research Based on Touch Screen Driver[J].,2009,(07):5.

备注/Memo

备注/Memo:
温州市科技计划项目（G20090113）黄兴利（1981-），男，硕士研究生，讲师，研究方向为计算机网络、数据库
更新日期/Last Update: 1900-01-01