FPGA-based wireless communication data security transmission system and method

Abstract

The application relates to a wireless communication data security transmission system and method based on FPGA, which comprises a DVI decoding module, a data decryption module, an integrity checking module and a data encryption module; the DVI decoding module is used for receiving encrypted data and performing decoding operation to obtain decoded data; the data decryption module is used for performing decryption operation on the decoded data to obtain real data; the integrity checking module is used for checking the real data; and the data encryption module is used for performing encryption processing on to-be-sent data to obtain encrypted data; the application effectively protects the confidentiality, integrity and availability of data, and improves the reliability and stability of the system.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of wireless communication and data security, and particularly relates to a wireless communication data security transmission system and method based on FPGA. BACKGROUND

[0002] In current wireless communication, data security is a continuous concern. Traditional data transmission methods may be vulnerable to eavesdropping, tampering and denial of service, etc. Existing technologies include various encryption algorithms, digital signatures and virtual private networks, etc. for ensuring secure data transmission. However, these methods may have the problem of low efficiency or not suitable for specific application scenarios. SUMMARY

[0003] In order to solve the above problems, the purpose of the present application is to provide a wireless communication data security transmission system and method based on FPGA, which effectively protects the confidentiality, integrity and availability of data, and at the same time improves the reliability and stability of the system.

[0004] To achieve the above purpose, the present application adopts the following technical solutions:

[0005] A wireless communication data security transmission system based on FPGA, comprising a DVI decoding module, a data decryption module, an integrity verification module and a data encryption module.

[0006] The DVI decoding module is used for receiving encrypted data and performing decoding operation to obtain decoded data.

[0007] The data decryption module is used for decrypting the decoded data to obtain real data.

[0008] The integrity verification module is used for verifying the real data.

[0009] The data encryption module is used for encrypting the to-be-sent data to obtain encrypted data.

[0010] Further, the system further comprises a static memory, a memory controller and a data transmission module, the static memory is used for storing encrypted data, the data transmission module is used for sending the encrypted data, and the memory controller is used for controlling the internal memory of the system.

[0011] Further, the data encryption module is further used for generating a pair of public and private keys using RSA algorithm, the private key is d, the public key is e and n, wherein e and n are public, and d is secret; generating a random symmetric key K using AES algorithm, which is a session key; encrypting K using the public key (e, n) to obtain ciphertext C1=K emodnWherein mod represents the modulo operation; the plaintext message M is encrypted using the session key K to obtain the ciphertext C2=AES(K,M), and the ciphertexts C1 and C2 are sent through the data transmission module.

[0012] Further, the data decryption module is further used for decrypting C1 using the private key d to obtain the session key K; and decrypting C2 using the obtained session key K to obtain the plaintext message M=AES(K,C2).

[0013] Further, the integrity verification module is further used for performing CRC calculation on the original data to obtain a check value of the data before encrypting the data; and sending the check value to the receiver together with the encrypted data; the receiver also performs check calculation on the received data using CRC to generate a new check value; and the receiver compares the generated check value with the received check value, if the two check values are the same, the data integrity verification is passed, otherwise, there is data tampering or damage.

[0014] Further, the system is connected with the receiver and the sender respectively, and when the system communicates with the receiver and the sender, the public key infrastructure technology is used for identity authentication, specifically:

[0015] The communication parties respectively generate their own key pairs, including public keys and private keys, the private keys are secret, and the public keys are public:

[0016] The communication parties apply for digital certificates to a trusted certificate authority CA, the certificates contain public keys and related identity information, and the CA issues the certificates after verifying the identity of the applicants;

[0017] The sender uses its own private key to generate a digital signature for the data;

[0018] The receiver uses the public key of the sender to verify the digital signature of the received data;

[0019] The sender uses the public key of the receiver to encrypt the data, so that only the receiver can decrypt it;

[0020] The receiver uses its own private key to decrypt the encrypted data.

[0021] A method for a wireless communication data security transmission system based on FPGA, comprising the following steps:

[0022] The encrypted data is received by the DVI decoding module and is subjected to decoding operation to obtain decoded data;

[0023] The decoded data is subjected to decryption operation by the data decryption module to obtain real data;

[0024] The real data is subjected to verification by the integrity verification module.

[0025] The data encryption module is used for encrypting the data to be sent, and encrypted data is obtained.

[0026] The data transmission module is used for sending the encrypted data.

[0027] A computer storage medium stores a plurality of instructions, which are suitable for being loaded and executed by a processor to perform the method steps.

[0028] The present application has the following advantages:

[0029] The present application encrypts data based on a multi-layer encryption method, and protects the confidentiality, integrity and availability of data through effective integrity verification, thereby improving the reliability and stability of the system and significantly improving the security and reliability of various network applications. BRIEF DESCRIPTION OF DRAWINGS

[0030] Figure 1 The figure is a schematic diagram of the system architecture of the present application.

[0031] Figure 2 The figure is a schematic diagram of multi-layer encryption in an embodiment of the present application.

[0032] Figure 3 The figure is a CRC integrity check in an embodiment of the present application. DETAILED DESCRIPTION

[0033] The present application will be further described in detail below in combination with the drawings and specific embodiments:

[0034] Reference Figure 1 In the embodiment, a wireless communication data security transmission system based on FPGA is provided, which comprises a DVI decoding module, a data decryption module, an integrity verification module, a memory controller, a static memory, a data encryption module and a data transmission module.

[0035] When receiving encrypted data, the DVI decoding module receives the encrypted data and performs decoding operation, then performs decryption operation through the data decryption module to obtain real data; the integrity verification module verifies the real data, and stores the data passing the verification in the static memory.

[0036] When sending encrypted data, the data to be sent stored in the static memory is encrypted through the data encryption module, and then is sent through the data transmission module.

[0037] Reference Figure 2 In the embodiment, the data is encrypted in the data encryption module, specifically:

[0038] (1) using RSA algorithm to generate a pair of public and private keys, the private key is d, the public key is e and n, wherein e and n are public, and d is secret;

[0039] (2) using AES algorithm to generate a random symmetric key, which is the session key K;

[0040] (3) using the public key (e, n) to encrypt K to get ciphertext C1 = K emodn , wherein mod represents the modulo operation;

[0041] (4) finally, using the session key K to encrypt the plaintext message M to get ciphertext C2 = AES (K, M), and sending the ciphertext C1 and C2 through the data transmission module.

[0042] In the data decryption module, the decryption operation is specifically:

[0043] (1) using the private key d to decrypt C1 to get the session key K;

[0044] (2) using the obtained session key K to decrypt C2 to get the plaintext message M = AES (K, C2). Figure 3 In this embodiment, in the integrity verification module, the integrity verification is specifically:

[0045] (1) before encrypting the data, first calculate the CRC of the original data to get the check value of the data;

[0046] (2) send the check value together with the encrypted data to the receiver;

[0047] (3) the receiver also uses CRC to calculate the check value of the received data to generate a new check value;

[0048] (4) the receiver compares the generated check value with the received check value, if they are the same, the data integrity verification is passed, otherwise there is data tampering or damage.

[0049] In this embodiment, the system is connected with the receiving end and the sending end respectively, when the system communicates with the receiving end and the sending end, the public key infrastructure (PKI) technology is used for identity authentication when data is sent and received, specifically:

[0050] Both parties of the communication generate their own key pairs, including public keys and private keys, the private keys are secret, and the public keys are public:

[0051] Both parties of the communication apply for digital certificates to the trusted certificate authority CA, the certificate contains the public key and related identity information, and the CA issues the certificate after verifying the identity of the applicant;

[0052] The sender uses his own private key to digitally sign the data to generate;

[0053] The receiver uses the sender's public key to digitally sign the received data to verify;

[0054] The sender uses the receiver's public key to encrypt the data, ensuring that only the receiver can decrypt it;

[0055] The receiver uses his own private key to decrypt the encrypted data.

[0056] Preferably, in this embodiment, the system also has a flow control, congestion control mechanism, etc., to improve the stability and reliability of the system.

[0057] In this embodiment, a method for a wireless communication data security transmission system based on FPGA is provided, comprising the following steps:

[0058] The encrypted data is received by the DVI decoding module and decoded to obtain decoded data;

[0059] The decoded data is decrypted by the data decryption module to obtain real data;

[0060] The real data is checked by the integrity check module;

[0061] The data encryption module is used to encrypt the data to be sent to obtain encrypted data;

[0062] The encrypted data is sent by the data transmission module.

[0063] Those skilled in the art will understand that the embodiments of the present application can be provided as a method, system, or computer program product. Therefore, the present application can take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present application can take the form of a computer program product implemented on one or more computer usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) containing computer usable program code.

[0064] The present application is described with reference to flowcharts and / or block diagrams according to the method, device (system), and computer program product of the embodiments of the present application. It should be understood that each flow and / or block in the flowchart and / or block diagram, and the combination of the flows and / or blocks in the flowchart and / or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device produce a means for implementing the functions described in the flowchart and / or block diagram.Figure 1 apparatuses that implement the functions specified in the flowchart Figure 1 block or blocks.

[0065] These computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture including instructions which implement the flowchart Figure 1 apparatuses that implement the functions specified in the flowchart Figure 1 block or blocks.

[0066] These computer program instructions can also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions that are executed on the computer or other programmable apparatus provide steps for implementing the flowchart Figure 1 apparatuses that implement the functions specified in the flowchart Figure 1 block or blocks.

[0067] The above descriptions are only preferred embodiments of the present application, and are not intended to limit the present application to other forms. Any person skilled in the art can make modifications or improvements on the basis of the above disclosed technical content without departing from the scope of the present application. Any simple modification, equivalent change and improvement made on the basis of the technical essence of the present application without departing from the technical solution of the present application shall fall within the scope of protection of the present application.

Claims

1. An FPGA-based wireless communication data security transmission system, characterized in that, The DVI decoding module is used for receiving encrypted data and performing decoding operation to obtain decoded data. The data decryption module is used for performing decryption operation on the decoded data to obtain real data. The integrity verification module is used for verifying the real data. The data encryption module is used for performing encryption processing on to-be-sent data to obtain encrypted data. The system further comprises a static memory, a memory controller and a data transmission module. The plaintext message M is encrypted using the session key K to obtain the ciphertext C2 = AES(K, M), and the ciphertexts C1 and C2 are sent through the data transmission module. The data encryption module is further configured to generate a pair of public and private keys using an RSA algorithm, the private key being d and the public key being e and n, wherein e and n are public and d is secret; generate a random symmetric key using an AES algorithm, the symmetric key being a session key K; encrypt K using the public key (e, n) to obtain ciphertext wherein mod denotes a modulo operation. The integrity verification module is further used for performing CRC calculation on the original data to obtain a verification value of the data before the encrypted data, and sending the verification value to the receiver together with the encrypted data. The data decryption module is further configured to decrypt C1 using the private key d to obtain a session key K = AES(d,C1) ; and decrypt C2 using the obtained session key K to obtain the plaintext message M = AES(K,C2).

2. The FPGA-based wireless communication data security transmission system according to claim 1, wherein, The receiver performs verification calculation on the received data using CRC to generate a new verification value. The receiver compares the generated verification value with the received verification value, and if the two are the same, the data integrity verification is passed, otherwise, there is data tampering or damage.

3. The FPGA-based wireless communication data security transmission system according to claim 1, wherein, The system is connected with the receiver and the sender, and when the system communicates with the receiver and the sender, the public key infrastructure technology is used for identity authentication, specifically as follows: The communication parties generate their own key pairs including public keys and private keys, and the private keys are secret and the public keys are public. The communication parties apply for digital certificates to a trusted certificate authority CA, the certificates contain public keys and related identity information, and the CA issues the certificates after verifying the identity of the applicants. The sender uses its own private key to perform digital signature generation on data. The receiver uses the public key of the sender to perform digital signature verification on the received data. The sender uses the public key of the receiver to encrypt the data to ensure that only the receiver can decrypt. The receiver uses its own private key to decrypt the encrypted data.

4. A method for wireless communication data security transmission system based on the FPGA of any one of claims 1-3, characterized in that, The steps include the following: The DVI decoding module receives encrypted data and performs decoding operation to obtain decoded data. The data decryption module performs decryption operation on the decoded data to obtain real data. The integrity verification module verifies the real data. The data encryption module is used for performing encryption processing on to-be-sent data to obtain encrypted data. The data transmission module sends the encrypted data.

5. A computer storage medium, characterized in that The computer storage medium stores a plurality of instructions, and the instructions are adapted to be loaded and executed by the processor to perform the method of claim 4.

Images