Security chip for protecting network security system and network security system using same

Abstract

A security chip for protecting a network security system comprises a data security part for providing a secure encryption and decryption algorithm and an interaction protocol, wherein the data security part mainly comprises an encryption and decryption algorithm control engine, an authorization counter, a true random number generator, a unique serial number and a secure EEPROM; and a network security part composed of a network white list filtering module and a network data processing module. The encryption and decryption algorithm control engine comprises private key security storage for supporting private key ECDH operation and ECDSA signature authentication. The mainstream national password and commercial password encryption and decryption algorithms perform high-speed encryption and reduction on the data stream so as to adapt to the security requirements of different scenes. The chip safety management supplies power, manages the read-write ROM on the chip, allows special equipment to write, and allows remote erasure but does not allow reading. The invention also provides a network security system using the security chip. The sensitive data communication security can be protectedfrom the hardware level, and the efficiency can be greatly improved while the system security is improved.

Description

technical field [0001] The invention belongs to the technical field of network security, and relates to the realization of hardware architecture of a network security chip and the realization in a network system, in particular to a security chip used for network security system protection and a network security system using the chip. Background technique [0002] The development of network information technology is gestating a new industrial and technological revolution, but it also brings huge security risks. Hackers have also frequently intruded on smart cars and smart home devices. The Mirai botnet and its variants have controlled tens of millions of smart cameras and smart routers around the world. Network security has become a key issue of national concern. [0003] At present, physical isolation of internal and external networks is the most commonly used network security defense mode. But this mode cannot be protected according to the security level. Since mobile of...

AI Technical Summary

Problems solved by technology

These remote devices are usually not maintained by dedicated personnel, so the system often cannot or cannot be updated in time, and is vulnerable to attacks from unknown vulnerabilities, or information leakage due to phishing attacks

Therefore, it is difficult to ensure system security only through software design, and it is also impossible to effectively control losses in the event of a security incident.

Images