Communication system for special equipment in intense radiation environment

Abstract

The invention discloses a communication system for special equipment in an intense radiation environment, and relates to the technical field of communication systems, and the system can carry out reliable communication in the intense radiation environment. The communication data is transmitted by adopting the encrypted ciphertext, so that the security of the communication data can be ensured; when a part of bytes of transmission data are lost or a part of bytes are increased, the correct start of the next frame of data can be automatically searched, so that the situation that a new correct data frame cannot be analyzed once the data are lost or increased is avoided; encryption operation and verification operation are sunk to an FPGA device, so that consumption of CPU operation resources by communication processing tasks can be reduced; an independent adaptation layer is defined, so that bottom layer processing of the FPGA device is independent of data formats and interfaces of an application layer, and the design flexibility is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of communication systems, and in particular to a communication system for special equipment in a strong radiation environment. Background Art

[0002] Communication systems and interfaces are channels and hubs for data exchange between computer systems, industrial equipment, instruments and other electronic equipment. They are used to coordinate communication between different devices to ensure correct and reliable data transmission. Special equipment is usually composed of a variety of control devices and instruments. Different control devices and instruments realize specific processing functions. Control instructions, data and other information are exchanged between devices through communication interfaces. Stable communication between special equipment is the cornerstone for stable and reliable operation of equipment systems. If the communication between special equipment fails, it will cause the equipment to fail at the least, unable to realize the expected functions in the system, and causing the entire system to stop working; it will cause the system to lose control and cause serious disasters.

[0003] In the prior art, the commonly used communication methods in special equipment include Modbus protocol, PROFIBUS protocol, CAN protocol, Ethernet / IP protocol and other communication methods.

[0004] Modbus protocol is a commonly used industrial communication protocol, supporting multiple transmission modes such as RS232, RS485, Ethernet, etc. It uses the master-slave mode for communication, that is, one host mounts multiple slaves for communication. Modbus protocol is also a common communication method for special equipment and other third-party equipment. PROFIBUS protocol is a fieldbus protocol, which was developed by Siemens of Germany. It is commonly used in the field of industrial control and also in the field of nuclear power equipment. It has the characteristics of flexibility, openness, real-time security, and the PROFIBUS protocol is often used for communication in the key control systems of special equipment. The CAN communication protocol was proposed by Bosch of Germany. It is a serial bus protocol used for real-time communication. It uses a bus architecture for communication and is mainly used in the automotive, industrial, aerospace, medical and nuclear power fields. The CAN communication protocol has the characteristics of multi-master control, conflict detection, and error detection, and is widely used in special equipment. Ethernet / IP protocol is a widely used LAN communication protocol. It specifies the physical layer connection characteristics and the content of the media access control protocol. It has the characteristics of high speed, standardization and scalability. It supports multiple interface types such as SC fiber optic interface, RJ-45 interface, FDDI interface, BNC interface, etc. In the networking control of special equipment, Ethernet / IP protocol is often used as the communication protocol.

[0005] In existing designs, the design of communication systems and communication protocols for special equipment working in strong radiation environments mainly adopts the communication protocols and communication interfaces used in the industrial, automotive, and consumer electronics fields, and directly applies them to special equipment working in strong radiation environments; in order to solve the reliability problem, redundant design is mainly used to improve the reliability of data transmission. The existing design has the following disadvantages:

[0006] (1) Communication cables are used for data transmission during the communication process, and the communication anti-interference ability is weak;

[0007] (2) Communication data is not encrypted, which poses data security issues;

[0008] (3) Using redundant methods to achieve reliable communication results in a waste of hardware resources and communication bandwidth;

[0009] (4) Directly using industrial, automotive, and wireless communication protocols without optimizing the communication structure increases the resource consumption of the processor for communication task processing. When the processor handles high-priority burst tasks, there is a problem of poor communication real-time performance. Summary of the invention

[0010] In view of the above problems, the present invention provides a communication system for special equipment in a strong radiation environment for overcoming the above problems or at least partially solving the above problems.

[0011] The present invention provides the following scheme:

[0012] A communication system for special equipment in a strong radiation environment, comprising:

[0013] The application layer implemented on the processor side and the adaptation layer, encrypted data link layer, and physical layer implemented on the FPGA device side;

[0014] The application layer is connected to the adaptation layer using a target communication interface, and the application layer includes a status register and a sideband control channel set according to the target interface; the application layer is used to process the transmitted data during the transmission process, and the application layer is used to process the received data during the reception process;

[0015] The adaptation layer includes a device for implementing interface adaptation between the FPGA device and the processor; so that the transmission data sent by the application layer is converted into a transmission byte stream during the transmission process and then sent to the encrypted data link layer, and the received target reception byte stream is uploaded to the processor during the reception process;

[0016] The encrypted data link layer is used to implement data encryption and decryption calculation, frame check field calculation and frame synchronization functions, so as to generate a target transmission byte stream after performing encryption calculation, frame check field calculation and frame synchronization processing on the transmission byte stream in the transmission process, and perform frame synchronization analysis, frame check calculation and decryption calculation on the received target transmission byte stream in the receiving process to generate the target reception byte stream;

[0017] The physical layer is used to convert the byte stream data output by the encrypted data link layer into bit stream data for transmission on the physical channel.

[0018] Preferably: the target communication interface includes any one of a PCIe interface and an AXI4 interface.

[0019] Preferably: during the sending process, the adaptation layer converts the sending data sent by the application layer into a byte stream output with a target number of bytes as the packet length; when the length of the data message sent by the application layer at one time is not an integer multiple of the target number of bytes, the adaptation layer fills the data length to an integer multiple of the target number of bytes, and sends the filled data to the encrypted data link layer; during the receiving process, the adaptation layer uploads the received target receiving byte stream to the processor.

[0020] Preferably: the adaptation layer includes an interface conversion processing module, and the interface conversion processing module includes a communication interface module, an interrupt control module, an adaptation layer control engine, a status and control register group, and a byte stream processing module;

[0021] The interface conversion processing module is used to realize data reception and transmission of the target communication interface;

[0022] The interrupt control module is used to generate an interrupt signal and output it to the processor;

[0023] The adaptation layer control engine is used to implement the logic control of the module;

[0024] The state and control register group is used to store the configuration information, control information and state information required by the module during operation issued by the processor;

[0025] The byte stream processing module is used to convert the transmission data into byte stream data according to the target number of bytes per packet during the sending process and output it to the encrypted data link layer, and to convert the byte stream data input by the encrypted data link layer into a frame format specified by the communication interface module during the data receiving process.

[0026] Preferably: the encrypted data link layer includes a data cache module, an encryption and decryption operation module, a frame check calculation module and a frame synchronization module;

[0027] During the sending process, the data cache module is used to cache the sending byte stream, and during the receiving process, the data cache module is used to cache the data after the frame check calculation;

[0028] During the sending process, the encryption and decryption operation module is used to encrypt the sending byte stream to generate the sending ciphertext data, and during the receiving process, the encryption and decryption operation module is used to decrypt the data after the frame check calculation to obtain the target receiving byte stream;

[0029] During the sending process, the frame check calculation module is used to perform check calculation on the sent ciphertext data and add the calculation result to the end of the sent ciphertext data field; during the receiving process, the frame check calculation module is used to perform frame check calculation on the frame data output by the frame synchronization module;

[0030] The frame synchronization module is used to implement data frame synchronization at the byte stream level.

[0031] Preferably: the encryption and decryption operation module includes an SM4 encryption and decryption operation module.

[0032] Preferably, the frame check calculation module includes any one of a CRC8 algorithm, a CRC16 algorithm, and a CRC32 algorithm.

[0033] Preferably: the processing mechanism of the frame synchronization module includes adding a 6-byte 0x5A synchronization header to the original data frame header, inserting a byte of 0x00 after sending 5 consecutive 0x5A, and repeating this cycle until the data frame is completely sent.

[0034] Preferably: the physical layer adopts 8B / 10B encoding mode for data transmission, and the transmission medium adopts optical fiber medium.

[0035] Preferably: the physical layer adopts receiving processing logic and sending processing logic to realize data caching and data receiving and sending control when sending and receiving data at the physical layer; adopts channel control logic to realize conversion between byte data and bit stream data and 8B / 10B encoding process control; adopts high-speed serial transceiver to realize high-speed serial sending and receiving of bit stream; adopts SFP+ optical module to realize conversion between optical signal and electrical signal.

[0036] According to the specific embodiments provided by the present invention, the present invention discloses the following technical effects:

[0037] A communication system for special equipment in a strong radiation environment provided by an embodiment of the present application can perform reliable communication in a strong radiation environment; communication data is transmitted using encrypted ciphertext to ensure the security of the communication data; when some bytes are lost or some bytes are added to the transmitted data, the correct start of the next frame of data can be automatically searched, avoiding the inability to parse new correct data frames once data is lost or added; encryption operations and verification operations are sunk to FPGA devices to reduce the consumption of CPU computing resources by communication processing tasks; an independent adaptation layer is defined to make the underlying processing of the FPGA device independent of the application layer data format and interface, thereby improving the flexibility of the design.

[0038] Of course, any product implementing the present invention does not necessarily need to achieve all of the advantages described above at the same time. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention, and for ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0040] Figure 1 This is a structural diagram of the data transmission and reception layer of a communication system for special equipment in a strong radiation environment provided by an embodiment of the present invention;

[0041] Figure 2 is a structural diagram of an interface conversion processing module provided by an embodiment of the present invention;

[0042] Figure 3 is a frame structure output by a frame check calculation module provided in an embodiment of the present invention;

[0043] Figure 4 is a frame structure output by a frame synchronization module provided in an embodiment of the present invention;

[0044] Figure 5 It is a block diagram of a physical layer transmission structure provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0045] The technical scheme in the embodiment of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiment of the present invention. Obviously, the described embodiment is only a part of the embodiment of the present invention, not all of the embodiments. Based on the embodiment of the present invention, all other embodiments obtained by ordinary technicians in this field belong to the scope of protection of the present invention.

[0046] See also Figure 1, is a communication system for special equipment in a strong radiation environment provided by an embodiment of the present invention, such as Figure 1 As shown, the system may include:

[0047] The application layer implemented on the processor side and the adaptation layer, encrypted data link layer, and physical layer implemented on the FPGA device side;

[0048] The application layer is connected to the adaptation layer using a target communication interface, and the application layer includes a status register and a sideband control channel set according to the target interface; during the sending process, the application layer is used to process the sending data, and during the receiving process, the application layer is used to process the receiving data; further, the target communication interface includes any one of a PCIe interface and an AXI4 interface. The specific interface for interaction between the FPGA device and the upstream processor is not restricted, and supports bus interfaces such as AXI4-Lite and PCIe. Internal conversion logic can be used in the middle to implement interface conversion, converting the data sent by the processor into a byte stream output, thereby improving the compatibility of the communication interface with the processor interface.

[0049] The adaptation layer includes a method for implementing interface adaptation between the FPGA device and the processor; so that during the sending process, the sending data sent by the application layer is converted into a sending byte stream and then sent to the encrypted data link layer, and during the receiving process, the received target receiving byte stream is uploaded to the processor; further, during the sending process, the adaptation layer converts the sending data sent by the application layer into a byte stream output with a packet length of a target number (for example, the target number can be 16) bytes, and when the length of the data message sent by the application layer at one time is not an integer multiple of the target number of bytes, the adaptation layer fills the data length with an integer multiple of the target number of bytes, and sends the filled data to the encrypted data link layer; during the receiving process, the adaptation layer uploads the received target receiving byte stream to the processor.

[0050] The adaptation layer includes an interface conversion processing module, which includes a communication interface module, an interrupt control module, an adaptation layer control engine, a status and control register group, and a byte stream processing module;

[0051] The interface conversion processing module is used to realize data reception and transmission of the target communication interface;

[0052] The interrupt control module is used to generate an interrupt signal and output it to the processor;

[0053] The adaptation layer control engine is used to implement the logic control of the module;

[0054] The state and control register group is used to store the configuration information, control information and state information required by the module during operation issued by the processor;

[0055] During the sending process, the byte stream processing module converts the sending data into byte stream data in packets according to the target number of bytes and outputs it to the encrypted data link layer; during the data receiving process, the byte stream data input by the encrypted data link layer is converted into a frame format specified by the communication interface module.

[0056] The encrypted data link layer is used to implement data encryption and decryption calculation, frame check field calculation and frame synchronization functions, so as to generate a target transmission byte stream after performing encryption calculation, frame check field calculation and frame synchronization processing on the transmission byte stream in the transmission process, and perform frame synchronization analysis, frame check calculation and decryption calculation on the received target transmission byte stream in the receiving process to generate the target reception byte stream;

[0057] Furthermore, the encrypted data link layer includes a data cache module, an encryption and decryption operation module, a frame check calculation module and a frame synchronization module;

[0058] During the sending process, the data cache module is used to cache the sending byte stream, and during the receiving process, the data cache module is used to cache the data after the frame check calculation;

[0059] During the sending process, the encryption and decryption operation module is used to encrypt the sending byte stream to generate the sending ciphertext data, and during the receiving process, the encryption and decryption operation module is used to decrypt the data after the frame check calculation to obtain the target receiving byte stream;

[0060] During the sending process, the frame check calculation module is used to perform check calculation on the sent ciphertext data and add the calculation result to the end of the sent ciphertext data field; during the receiving process, the frame check calculation module is used to perform frame check calculation on the frame data output by the frame synchronization module;

[0061] The frame synchronization module is used to implement data frame synchronization at the byte stream level.

[0062] The encryption and decryption operation module includes an SM4 encryption and decryption operation module. The frame check calculation module includes any one of a CRC8 algorithm, a CRC16 algorithm, and a CRC32 algorithm.

[0063] The processing mechanism of the frame synchronization module includes adding a 6-byte 0x5A synchronization header to the original data frame header, inserting a byte of 0x00 after sending 5 consecutive 0x5A, and repeating this cycle until the data frame is completely sent.

[0064] The physical layer is used to convert the byte stream data output by the encrypted data link layer into bit stream data for transmission on the physical channel. Furthermore, the physical layer adopts 8B / 10B encoding mode for data transmission, and the transmission medium adopts optical fiber medium.

[0065] The physical layer adopts receiving processing logic and sending processing logic to realize data caching and data receiving and sending control when sending and receiving data at the physical layer; adopts channel control logic to realize the conversion between byte data and bit stream data and 8B / 10B encoding process control; adopts high-speed serial transceiver to realize high-speed serial sending and receiving of bit stream; adopts SFP+ optical module to realize the conversion between optical signal and electrical signal.

[0066] The communication system for special equipment in a strong radiation environment provided in the embodiment of the present application adopts a "CPU+FPGA" processing architecture as an implementation carrier of the communication system, which is used to solve the needs of special equipment point-to-point communication model in a strong radiation environment for communication real-time, reliability, and data security. The idea of ​​layered design of the communication system is adopted, and the system consists of four parts: application layer: used to generate application data and process received application data; adaptation layer: communication mode matching design between FPGA device and upstream processor, converting data into byte stream output; encrypted data link layer: data processing mechanism design inside FPGA device, encrypting, checking, and frame synchronization processing of data; FPGA device external data interaction mechanism and physical communication medium and protocol design.

[0067] The communication system for special equipment in a strong radiation environment provided by the embodiment of the present application provides corresponding status registers (interrupts, check errors, etc.) and sideband control channels in the FPGA to enhance the reliability and configurability of interaction with the processor. The SM4 encryption algorithm is used to encrypt the data stream sent by the FPGA, and the data stream is encrypted in groups of target numbers to achieve data encryption communication; in order to enhance reliability, the FPGA adds a check field after each frame of encrypted data, provides a variety of check methods, and the check method software is configurable, supports CRC8, CRC16, CRC32 and other check methods, so that the processor does not need a check field when defining the application layer protocol, reducing the load on the processor. At the same time, a byte stream synchronization method is also provided to synchronize the byte stream of the encrypted output ciphertext data stream, so that the receiving side can accurately identify each frame of ciphertext data. The physical layer transmission medium uses an optical fiber interface for transmission to enhance anti-interference capabilities.

[0068] Taking 16 bytes as an example of a packet length, the communication system for special equipment in a strong radiation environment provided by the present application is introduced in detail below.

[0069] The structure of the reliable and encrypted communication system provided by the embodiment of the present application is as follows: Figure 1As shown, the idea of ​​layered design is adopted to divide it into application layer, adaptation layer, encrypted data link layer and physical layer, a total of four layers, each layer completes a specified function, the application layer is implemented by processors such as CPU, the adaptation layer, encrypted data link layer, and physical layer are implemented by FPGA. The system is described in detail below.

[0070] 1. Application layer.

[0071] The application layer is used to generate user data to be sent or process received user data. The processing of data in this layer is completed by processors such as CPU. In this method, there is no limitation on the specific format of application layer data. The application layer protocol can be defined by the specific designer and designed flexibly according to specific needs. The data in the application layer can have a check field or not. According to the actual needs, the check field has been added to the data in the encrypted data link layer to ensure reliable data transmission.

[0072] The data transmission method between the application layer and the adaptation layer is not limited in this method. According to the hardware design of the actual application, the PCIe interface, AXI4 interface, etc. can be used. Based on the specific transmission method, the corresponding registers and sideband control signals are designed in the adaptation layer to ensure correct and reliable data interaction.

[0073] 2. Adaptation layer.

[0074] The adaptation layer is used to solve the interface adaptation between the FPGA and the application layer processor, and solve the interface adaptation problem according to the specific hardware design (PCIe, AXI4 interface). For the sending process, the data sent by the application layer is converted into a byte stream output with a packet length of 16 bytes. When the length of the data message sent by the application layer at one time is not an integer multiple of 16 bytes, the adaptation layer will fill the data length to an integer multiple of 16 bytes and send the filled data to the encrypted data link layer; for the receiving process, the received byte stream is uploaded to the application layer processor according to the specific communication interface. The structure of the adaptation layer interface conversion processing module is as follows: Figure 2 As shown, the functions of each sub-module are described as follows.

[0075] (1) Communication interface module: used to realize data reception and transmission of communication interfaces such as PCIe and AXI4;

[0076] (2) Interrupt control module: used to generate interrupt signals and output them to the processor to enhance the real-time performance of the communication process;

[0077] (3) Adaptation layer control engine: used for the logic control of the entire module and coordinates the work between various modules;

[0078] (4) Status and control register group: used to store configuration information, control information and various status information of the module during operation sent by the application layer processor;

[0079] (5) Byte stream processing module: converts the application layer data received by the communication interface into byte stream data in packets of 16 bytes and outputs it to the encrypted data link layer.

[0080] 3. Encrypted data link layer.

[0081] The encrypted data link layer is used to implement data encryption, check field calculation, and frame synchronization functions. The encrypted data link layer is divided into two processing directions: data sending and receiving. In the process of data sending, the byte stream data sent by the adaptation layer is first cached through the data cache module, and then the data is read out in groups of 16 bytes and sent to the encryption and decryption operation module (SM4 encryption operation module) for encryption operation; the "SM4 encryption operation module" starts encryption operation every time it receives a group of data to be encrypted. After the operation is completed, the group of ciphertext data is output to the frame check calculation module for check field calculation. The calculation of the check field uses the corresponding CRC8, CRC16 or CRC32 for check calculation according to the configuration of the processor, and the calculated result is added after the data field. The data frame structure output by the frame check calculation module is shown in Figure 3. The data receiving process is opposite to the sending process, so it will not be repeated here.

[0082] The frame synchronization module is used to implement data frame synchronization at the byte stream level. During the byte stream transmission process, if there is no frame synchronization mechanism, when byte data is misaligned or missed during transmission, the data will continue to be erroneous, and it will be impossible to determine which frame of data is correct for the subsequent data received. The frame synchronization processing mechanism is: add a 6-byte "0x5A" synchronization header to the original data frame header, followed by the data part. When the data part is sent, the processing rule is: when 5 consecutive "0x5A" are sent, insert a byte of 0x00 after it, and repeat this cycle until the data frame is sent. The frame structure output by the frame synchronization module is as follows: Figure 4 shown.

[0083] Ideally, when CRC8 is used for verification calculation, if five consecutive "0x5A" do not appear in the transmitted data, the length of the data part of the frame output by the frame synchronization module is 17 bytes; when CRC32 is used for verification calculation, in the worst case, when five consecutive "0x5A" appear four times in the transmitted data, the length of the data part of the frame output by the frame synchronization module is 23 bytes, because the last transmission of five consecutive "0x5A" is completed, the entire frame is also ended, and there is no need to add 0x00.

[0084] 4. Physical layer.

[0085] The physical layer is used to convert the byte stream data output by the encrypted data link layer into bit stream data for transmission on the physical channel. This communication method specifies the encoding method and transmission medium used by the physical layer. The physical layer uses 8B / 10B encoding for data transmission, and the transmission medium uses optical fiber medium. The use of multi-mode or single-mode optical fiber is determined by the hardware components.

[0086] The physical layer transmission frame is as follows Figure 5 As shown, the receiving processing logic and the sending processing logic are used for data caching and data receiving and sending control during physical layer data sending and receiving; the channel control logic realizes the conversion between byte data and bit stream data and the 8B / 10B encoding process control; the high-speed serial transceiver realizes the high-speed serial sending and receiving of the bit stream; the SFP+ optical module realizes the conversion between optical signals and electrical signals.

[0087] It can be seen that in the communication system for special equipment in a strong radiation environment provided by the embodiment of the present application, the data interaction between the FPGA and the CPU adopts the idea of ​​layered design and uses an open data stream for transmission, so that changes to the upper-layer protocol do not affect the lower-layer data processing, and has stronger compatibility.

[0088] Data encryption and verification are moved down to the FPGA to improve the stability of communication processing, reduce CPU pressure, and ensure that communication real-time performance is not affected when the CPU is processing emergency nuclear power control tasks.

[0089] By optimizing the order of encryption and verification operations and adopting the method of encryption first and verification later on the sending side, the effective encryption utilization rate of the data payload can be improved; when the verification error occurs on the receiving side, the data is directly discarded, which can reduce the invalid calculation amount of the decryption operation.

[0090] Design a byte stream synchronization mechanism to achieve automatic frame synchronization of the underlying data, so that the physical layer data transmission input and output are not affected by the FPGA intermediate processing method. Changes in the intermediate layer processing do not affect the transmission synchronization of the lower layer data.

[0091] In summary, the communication system for special equipment in a strong radiation environment provided by the present application can perform reliable communication in a strong radiation environment; the communication data is transmitted using encrypted ciphertext to ensure the security of the communication data; when the transmitted data loses some bytes or adds some bytes, the correct start of the next frame of data can be automatically searched, avoiding the inability to parse new correct data frames once data is lost or added; the encryption and verification operations are sunk to the FPGA device, which can reduce the consumption of CPU computing resources by communication processing tasks; an independent adaptation layer is defined to make the underlying processing of the FPGA device independent of the application layer data format and interface, thereby improving the flexibility of the design.

[0092] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0093] It can be known from the description of the above implementation methods that those skilled in the art can clearly understand that the present application can be implemented by means of software plus a necessary general hardware platform. Based on such an understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product can be stored in a storage medium such as ROM / RAM, a magnetic disk, an optical disk, etc., and includes several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in the various embodiments of the present application or certain parts of the embodiments.

[0094] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can refer to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system or system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can refer to the partial description of the method embodiment. The system and system embodiments described above are merely schematic, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without creative work.

[0095] The above description is only a preferred embodiment of the present invention and is not intended to limit the protection scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention are included in the protection scope of the present invention.

Claims

1. A communication system for special equipment in a strong radiation environment, characterized in that: It includes the application layer implemented on the processor side and the adaptation layer, encryption data link layer, and physical layer implemented on the FPGA device side; The application layer is connected to the adaptation layer using a target communication interface, and the application layer includes a status register and a sideband control channel set according to the target interface; the application layer is used to process the transmitted data during the transmission process, and the application layer is used to process the received data during the reception process; The adaptation layer includes a layer for implementing interface adaptation between the FPGA device and the processor; so that in the sending process, the sending data sent by the application layer is converted into a sending byte stream and then sent to the encrypted data link layer, and in the receiving process, the received target receiving byte stream is uploaded to the processor; The encrypted data link layer is used to implement data encryption and decryption calculation, frame check field calculation and frame synchronization functions, so as to generate a target transmission byte stream after performing encryption calculation, frame check field calculation and frame synchronization processing on the transmission byte stream in the transmission process, and perform frame synchronization analysis, frame check calculation and decryption calculation on the received target transmission byte stream in the receiving process to generate the target reception byte stream; The physical layer is used to convert the byte stream data output by the encrypted data link layer into bit stream data for transmission on the physical channel.

2. The communication system for special equipment in a strong radiation environment according to claim 1, characterized in that: The target communication interface includes any one of a PCIe interface and an AXI4 interface.

3. The communication system for special equipment in a strong radiation environment according to claim 1, characterized in that: During the sending process, the adaptation layer converts the sending data sent by the application layer into a byte stream output with a target number of bytes as the packet length. When the length of the data message sent by the application layer at one time is not an integer multiple of the target number of bytes, the adaptation layer fills the data length to an integer multiple of the target number of bytes and sends the filled data to the encrypted data link layer; during the receiving process, the adaptation layer uploads the received target receiving byte stream to the processor.

4. The communication system for special equipment in a strong radiation environment according to claim 3, characterized in that: The adaptation layer includes an interface conversion processing module, which includes a communication interface module, an interrupt control module, an adaptation layer control engine, a status and control register group, and a byte stream processing module; The interface conversion processing module is used to realize data reception and transmission of the target communication interface; The interrupt control module is used to generate an interrupt signal and output it to the processor; The adaptation layer control engine is used to implement the logic control of the module; The state and control register group is used to store the configuration information, control information and state information required by the module during operation issued by the processor; The byte stream processing module is used to convert the transmission data into byte stream data according to the target number of bytes per packet during the sending process and output it to the encrypted data link layer, and to convert the byte stream data input by the encrypted data link layer into a frame format specified by the communication interface module during the data receiving process.

5. The communication system for special equipment in a strong radiation environment according to claim 1, characterized in that: The encrypted data link layer includes a data cache module, an encryption and decryption operation module, a frame check calculation module and a frame synchronization module; During the sending process, the data cache module is used to cache the sending byte stream, and during the receiving process, the data cache module is used to cache the data after the frame check calculation; During the sending process, the encryption and decryption operation module is used to encrypt the sending byte stream to generate the sending ciphertext data, and during the receiving process, the encryption and decryption operation module is used to decrypt the data after the frame check calculation to obtain the target receiving byte stream; During the sending process, the frame check calculation module is used to perform check calculation on the sent ciphertext data and add the calculation result after the sent ciphertext data field; During the receiving process, the frame check calculation module is used to perform frame check calculation on the frame data output by the frame synchronization module; The frame synchronization module is used to implement data frame synchronization at the byte stream level.

6. The communication system for special equipment in a strong radiation environment according to claim 5, characterized in that: The encryption and decryption operation module includes an SM4 encryption and decryption operation module.

7. The communication system for special equipment in a strong radiation environment according to claim 5, characterized in that: The frame check calculation module includes any one of a CRC8 algorithm, a CRC16 algorithm, and a CRC32 algorithm.

8. The communication system for special equipment in a strong radiation environment according to claim 5, characterized in that: The processing mechanism of the frame synchronization module includes adding a 6-byte 0x5A synchronization header to the original data frame header, inserting a byte of 0x00 after sending 5 consecutive 0x5A, and repeating this cycle until the data frame is completely sent.

9. The communication system for special equipment in a strong radiation environment according to claim 1, characterized in that: The physical layer adopts 8B / 10B encoding mode for data transmission, and the transmission medium adopts optical fiber medium.

10. The communication system for special equipment in a strong radiation environment according to claim 9, characterized in that: The physical layer adopts receiving processing logic and sending processing logic to realize data caching and data receiving and sending control when sending and receiving data at the physical layer; adopts channel control logic to realize the conversion between byte data and bit stream data and 8B / 10B encoding process control; adopts high-speed serial transceiver to realize high-speed serial sending and receiving of bit stream; adopts SFP+ optical module to realize the conversion between optical signal and electrical signal.

Images