Supercharge Your Innovation With Domain-Expert AI Agents!

SDN switch flow table encrypting method based on FPGA

An encryption method and switch technology, applied in data exchange network, computer security device, internal/peripheral computer component protection, etc., can solve the problem that the memory is easy to be read and modified, and achieve the effect of reducing processing time and increasing security

Active Publication Date: 2016-11-16
GUILIN UNIV OF ELECTRONIC TECH
View PDF4 Cites 4 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] The technical problem to be solved by the present invention is that the memory in the existing SDN switch is easy to be read and modified, and an FPGA-based SDN switch flow table encryption method is provided

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • SDN switch flow table encrypting method based on FPGA
  • SDN switch flow table encrypting method based on FPGA

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0020] The following takes NetMagic as an example to further describe the present invention in detail. It should be noted that the parameters in the embodiments do not affect the generality of the present invention.

[0021] An FPGA-based SDN switch flow table encryption method, such as figure 1 As shown, the specific steps include the following:

[0022] Step S1, the host computer downloads the specified flow table to the internal FPGA through the nmac protocol.

[0023] Step S2, the FPGA obtains the IP address by extracting the flow table, and then encrypts the received flow table through the AES encryption algorithm. The specific encryption process is as follows: figure 2 As shown, the IP address is mapped into a 26-bit DDR2 write address through the Hash operation, and the corresponding flow table ciphertext is written into the address.

[0024] Step S3, the FPGA collects data in the rx_tx_1000 module from the data stream sent by the client, and extracts features from t...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a SDN switch flow table encrypting method based on FPGA. The method comprises the following steps: encrypting flow table data sent by an upper controller through the FPGA and then using an IP address extracted from unencrypted data as a write address to write in a memory; acquiring data transmitted at a physical port, reading the corresponding address from the memory according to the acquired IP address which is used as a read address, and decrypting the read data. Through the adoption of the parallel high-speed of the FPGA, the storage security of the flow table is increased under the condition of guaranteeing the high-speed forwarding of the data. Compared with the searching mode in assembly line, the searching mode of mapping the memory address through the IP address reduces the data processing time.

Description

technical field [0001] The invention belongs to the technical field of network data processing, and in particular relates to an FPGA-based SDN switch flow table encryption method. Background technique [0002] With the rapid development of the Internet, the Internet of Things and other fields, big data has gradually become the focus of people's attention. Massive data processing makes it put forward higher requirements for the network, and the traditional network is difficult to meet its demand for resources. [0003] SDN (Software Defined Networking) separates forwarding and control, allowing flexible control on the one hand and fast forwarding on the other. We can send the flow table to the SDN switch through the controller and store it in a specific memory, but this memory is not secure, and anyone can read and modify the content of the memory flow table, and it is easy to be implanted with a virus. Steal all kinds of information, even malicious attacks. Contents of th...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L12/721H04L12/741G06F21/78G06F21/62H04L45/74
CPCH04L45/38H04L45/745G06F21/6209G06F21/78
Inventor 王勇卓越何倩陶晓玲强保华
Owner GUILIN UNIV OF ELECTRONIC TECH
Features
  • R&D
  • Intellectual Property
  • Life Sciences
  • Materials
  • Tech Scout
Why Patsnap Eureka
  • Unparalleled Data Quality
  • Higher Quality Content
  • 60% Fewer Hallucinations
Social media
Patsnap Eureka Blog
Learn More