An FPGA-based heterogeneous video admission analysis system and method

Abstract

The invention relates to an FPGA-based heterogeneous video admission analysis system and method. The problems of unreasonable design and the like in the prior art are solved. The analysis system comprises network admission control equipment and a network admission server, The network admission server comprises an admission control mainboard. The admission control mainboard comprises a PCB (PrintedCircuit Board), a plurality of FPGA (Field Programmable Gate Array) processors, an ARM (Advanced RISC Machine) processor and an SFP + 10-gigabit optical interface, an SOC (System On Chip) processor is arranged on the PCB, and a Consol interface, a USB (Universal Serial Bus) interface, an ETH (Ethernet) gigabit interface and an LAN (Local Area Network) gigabit interface are respectively arranged on the PCB. Advantages are as follows: by adopting a task decomposition method and decomposing the complex tasks of collecting, analyzing and executing of a network access data package, the advantage of parallel processing of the FPGA processor, low cost and high performance management of the ARM system, a plurality of CPUs and Ethernet switches included by the SOC processes are fully developed, and the system has the advantages of specific functions, high cost performance, data security assurance of a special circuit and the like, so that the defects of the existing network admission equipmentare optimized and solved.

Description

technical field [0001] The invention belongs to the technical field of network equipment, and in particular relates to an FPGA-based heterogeneous video access analysis system and method. Background technique [0002] In recent years, the issue of cybersecurity has moved from behind the scenes to the front. A large number of network attacks against network users such as governments, enterprises, and universities have broken out around the world. A typical example is the network paralysis of half of the United States on October 21, 2016. It was later found out that the cause of the large-scale network paralysis was that the DNS server of the US network service provider Dean Company was attacked by DDoS (Distributed Denial of Service) Serve). This kind of attack mainly uses reasonable service requests to occupy as many service resources as possible, so that users cannot get service responses. The devices involved in this DDoS attack include a large number of Internet monito...

AI Technical Summary

Problems solved by technology

[0004] Currently commonly used network access control devices are mainly based on X86 architecture servers, which use network cards to collect network packets of network access devices, and perform network access authentication control through technologies such as DHCP, ARP, MVG, IEEE802.1X access control and authentication protocols. The schematic diagram of the admission process is as follows: figure 1 As shown, the following shortcomings will be exposed in the application. 1. There are security risks in access control: protocols such as IEEE802.1X used in commonly used network access control are a kind of access based on Client / Server (C / S) Control and Authentication Protocol

When the user passes the authentication, the switch port is opened. This mechanism has security risks. It only performs identity verification when establishing a connection. Once the requesting device passes the authentication and the switch port is open, the requesting device and the switch Further communications will not be verified

Illegal users may take advantage of this vulnerability to conduct illegal operations, such as privately connecting switches, wireless routers, wireless bridges, etc. through opened ports for illegal intrusion

2. Low efficiency of protocol analysis: At present, many large-scale video networks have been connected to the Internet, the network scale is huge, and the number of equipment such as network cameras is huge

Mainly due to the high CPU resource consumption of the TCP / IP protocol stack, the processing speed and efficiency of the server will be greatly reduced

If the C / S structure is adopted, all connected network devices are required to install client software, which is cumbersome and inefficient when accessing batch devices. Some terminals may also have problems such as version compatibility and inability to install client software. Can't connect to the network

3. Lack of support for GB / T28181 and GB35114: The concept of network access is an emerging technology initiated by Cisco and subsequently independently developed by Huawei, UnitedSoft, Beixinyuan and other manufacturers based on this concept

At present, the network equipment access system mainly supports the access control of the existing generalized network and intranet, and does not have a dedicated video network, which supports GB / T28181 and the upcoming GB35114 protocol access equipment

4. Product cost does not dominate: In order to improve data processing efficiency and reserve design and deployment margins for current network access equipment, the common method is to improve system hardware performance and select high-performance processors with several or even tens of cores. Servers, as well as memory and network equipment with larger capacity and faster speed, but the price is that the equipment cost will increase exponentially

5. Poor product performance adaptability: The data processing efficiency of commonly used network access devices mainly depends on the server CPU and memory. If you choose a device with a large performance margin, it will not only cost high but also cause a waste of equipment resources. On the contrary, choose a device with a small performance margin , with the increase of network equipment, the performance of the admission equipment may not meet the requirements

For example, in the private video network, a lot of devices are added every year. In addition, if there are regional power outages, network disconnections, batch access, etc., it is easy to cause failures such as devices being unable to connect to the network for a long time, exposing the performance of network access devices. Poor adaptability

Images