Bus line fire wall of embedded system

Abstract

The present invention is an embedded system bus firewall, the firewall is a bus IP core realized by FPGA logic integration technology connected in series between the embedded processor interface bus and its peripheral interface, and implements real-time monitoring of key port instructions of the embedded system, The forward rule mapping method is used to identify normal port commands and intercept abnormal port commands; the bus IP core is divided into three layers of organizational structure: it is composed of a bus adapter interface, a bus firewall in the fire protection layer and a standard bus interface; the bus firewall The function is realized by the special function module in the bus firewall embedded in the IP core fire protection layer, the special function module includes: working mode selection module, direct mode module, filtering mode module, rule learning module, bus monitoring module, signal A buffer module, a state encoding module, a detection state machine module, and signals related to bus information inside the bus firewall are connected to each other.

Description

(1) Technical field: [0001] The invention relates to a bus firewall for an embedded system, which relates to a bus firewall for monitoring digital information transmission of an embedded computer system, in particular to a system for monitoring information transmission on an interface bus of an embedded computer system to realize security protection of the embedded system A bus firewall belongs to the technical field of computers. (two) background technology: [0002] With the development of network technology and wireless communication technology, embedded system applications continue to expand its breadth and depth, ranging from satellite remote control orbit change to the realization of digital home networks. Embedded systems have shown their vitality in participating in wireless communication and network transformation. At the same time, security problems of embedded systems have surfaced, and these problems may often lead to major economic losses or personal injuries, s...

AI Technical Summary

Problems solved by technology

Once the embedded system communicates with the outside world through wireless communication or access to the network, this closed and introverted security mechanism is difficult to deal with the threat of malicious intrusion

Due to the limited storage capacity, the embedded system can only limitedly use the technical achievements such as intrusion detection and fire prevention filtering obtained in the field of general-purpose computers. The embedded system security system established by the protection of the outer layer protocol is easy to be broken, the detection is incomplete, and the storage space of the system is occupied. , slow response time, etc.

Images