Communication system for special equipment in strong radiation environment

Abstract

The application discloses a communication system for special equipment in a strong radiation environment, and relates to the technical field of communication systems. The system can perform reliable communication in a strong radiation environment. Communication data is transmitted in encrypted ciphertext, which can guarantee the security of the communication data. When some bytes of the transmitted data are lost or increased, the system can automatically search for the correct start of the next frame of data, thereby avoiding the situation that the loss or increase of data leads to the inability to parse a new correct frame of data. The encryption operation and the check operation are sunk to an FPGA device, which can reduce the consumption of CPU operation resources by the communication processing task. An independent adaptation layer is defined, which makes the bottom layer processing of the FPGA device and the application layer data format and interface independent of each other, thereby improving the flexibility of the design.

Description

Technical Field

[0001] This invention relates to the field of communication system technology, and in particular to a communication system for special equipment in strong radiation environments. Background Technology

[0002] Communication systems and interfaces serve as channels and hubs for data exchange between electronic devices such as computer systems, industrial equipment, and instruments. They coordinate communication between different devices to ensure accurate and reliable data transmission. Specialized equipment typically consists of various control devices and instruments, each performing specific processing functions. These devices exchange control commands, data, and other information through communication interfaces. Stable communication between specialized equipment is the cornerstone of the stable and reliable operation of the equipment system. If communication between specialized equipment fails, it can lead to equipment malfunction, preventing the system from fulfilling its intended functions and causing the entire system to stop working. In severe cases, it can result in system loss of control and serious disasters.

[0003] In the existing technology, the commonly used communication methods in special equipment include Modbus protocol, PROFIBUS protocol, CAN protocol, Ethernet / IP protocol and other communication methods.

[0004] Modbus is a commonly used industrial communication protocol that supports multiple transmission methods such as RS232, RS485, and Ethernet. It uses a master-slave mode for communication, where one master device connects to multiple slave devices. Modbus is also a common communication method for communication between special equipment and other third-party devices. PROFIBUS is a fieldbus protocol developed under the leadership of Siemens AG of Germany. It is commonly used in industrial control and nuclear power equipment. It features flexibility, openness, real-time operation, and security, and is frequently used for communication in critical control systems of special equipment. CAN communication protocol, proposed by Bosch AG of Germany, is a serial bus protocol for real-time communication. It uses a bus architecture and is mainly used in the automotive, industrial, aerospace, medical, and nuclear power fields. CAN communication protocol features multi-master control, collision detection, and error detection, and is widely used in special equipment. Ethernet / IP is a widely used local area network (LAN) communication protocol. It specifies the physical layer connection characteristics and media access control protocol, and features high speed, standardization, and scalability. It supports various interface types such as SC fiber optic interface, RJ-45 interface, FDDI interface, and BNC interface. In special equipment networking control, Ethernet / IP is commonly used as the communication protocol.

[0005] In existing designs, the communication systems and protocols of special equipment operating in high-radiation environments primarily adopt those used in the industrial, automotive, and consumer electronics sectors, directly applying them to this equipment. To address reliability issues, redundant design is mainly employed to improve data transmission reliability. However, existing designs have the following drawbacks:

[0006] (1) Data transmission is carried out using communication cables during the communication process, resulting in weak anti-interference capability;

[0007] (2) The communication data was not encrypted, which poses a data security problem;

[0008] (3) Using redundancy to achieve reliable communication results in a waste of hardware resources and communication bandwidth;

[0009] (4) Directly using industrial, automotive and wireless communication protocols without optimizing the communication structure increases the resource consumption of the processor for communication tasks. When the processor processes high-priority burst tasks, there is a problem of poor real-time communication. Summary of the Invention

[0010] In view of the above problems, the present invention provides a communication system for special equipment in a strong radiation environment to overcome or at least partially solve the above problems.

[0011] This invention provides the following solution:

[0012] A communication system for special equipment in high-radiation environments includes:

[0013] The application layer is implemented on the processor side, and the adaptation layer, encrypted data link layer, and physical layer are implemented on the FPGA device side.

[0014] The application layer and the adaptation layer are connected via a target communication interface. The application layer includes a status register and a sideband control channel set according to the target interface. During transmission, the application layer is used to process transmitted data, and during reception, the application layer is used to process received data.

[0015] The adaptation layer includes an interface adaptation mechanism between the FPGA device and the processor; so that during the transmission process, the data sent by the application layer is converted into a transmission byte stream and sent to the encrypted data link layer, and during the reception process, the received target byte stream is uploaded to the processor.

[0016] The encrypted data link layer is used to implement data encryption and decryption calculations, frame check field calculations, and frame synchronization functions, so that after performing encryption calculations, frame check field calculations, and frame synchronization processing on the transmitted byte stream during the sending process, a target transmitted byte stream is generated, and during the receiving process, frame synchronization parsing, frame check calculations, and decryption calculations are performed on the received target transmitted byte stream to generate the target received byte stream.

[0017] The physical layer is used to convert the byte stream data output by the encrypted data link layer into bit stream data for transmission over the physical channel.

[0018] Preferably, the target communication interface includes either a PCIe interface or an AXI4 interface.

[0019] Preferably: during the transmission process, the adaptation layer converts the transmission data sent by the application layer into a byte stream with a packet length of the target number of bytes. When the length of a data packet sent by the application layer at one time is not an integer multiple of the target number of bytes, the adaptation layer padded the data length to an integer multiple of the target number of bytes and sent the padded data to the encrypted data link layer; during the reception process, the adaptation layer uploads the received target received byte stream to the processor.

[0020] Preferably, the adaptation layer includes an interface conversion processing module, which includes a communication interface module, an interrupt control module, an adaptation layer control engine, a status and control register group, and a byte stream processing module.

[0021] The interface conversion processing module is used to realize the data reception and transmission of the target communication interface;

[0022] The interrupt control module is used to generate an interrupt signal and output it to the processor;

[0023] The adaptation layer control engine is used to implement the logic control of the module;

[0024] The status and control register group is used to store the configuration information, control information and status information required during the operation of the module issued by the processor.

[0025] The byte stream processing module is used to convert the transmitted data into byte stream data packets according to the target number of bytes during the transmission process and output them to the encrypted data link layer, and to convert the byte stream data input by the encrypted data link layer into the frame format specified by the communication interface module during the data reception process.

[0026] Preferably, the encrypted data link layer includes a data caching module, an encryption / decryption operation module, a frame verification calculation module, and a frame synchronization module;

[0027] During the sending process, the data caching module is used to cache the sent byte stream; during the receiving process, the data caching module is used to cache the data after frame verification calculation.

[0028] During transmission, the encryption / decryption module is used to encrypt the transmitted byte stream to generate transmitted ciphertext data; during reception, the encryption / decryption module is used to decrypt the data after frame verification calculation to obtain the target received byte stream.

[0029] During transmission, the frame verification calculation module is used to perform verification calculation on the transmitted ciphertext data and add the calculation result to the transmitted ciphertext data field; during reception, the frame verification calculation module is used to perform frame verification calculation on the frame data output by the frame synchronization module.

[0030] The frame synchronization module is used to implement data frame synchronization at the byte stream level.

[0031] Preferably, the encryption / decryption module includes an SM4 encryption / decryption module.

[0032] Preferably, the frame check calculation module includes any one of the CRC8 algorithm, CRC16 algorithm, and CRC32 algorithm.

[0033] Preferably, the processing mechanism of the frame synchronization module includes adding a 6-byte 0x5A synchronization header to the original data frame header, and inserting a byte of 0x00 after sending 5 consecutive 0x5A, and so on, until the data frame is sent.

[0034] Preferably, the physical layer uses 8B / 10B encoding for data transmission, and the transmission medium is optical fiber.

[0035] Preferably, the physical layer employs receiving processing logic and transmitting processing logic to implement data buffering and data transmission and reception control during data transmission and reception; channel control logic is used to implement the conversion between byte data and bit stream data and the 8B / 10B encoding process control; a high-speed serial transceiver is used to implement high-speed serial transmission and reception of bit streams; and an SFP+ optical module is used to implement the conversion between optical signals and electrical signals.

[0036] According to specific embodiments provided by the present invention, the present invention discloses the following technical effects:

[0037] This application provides a communication system for special equipment in strong radiation environments, enabling reliable communication. Communication data is transmitted using encrypted ciphertext, ensuring data security. When some bytes are lost or added during transmission, the system automatically searches for the correct start of the next frame, preventing the inability to parse new, correct data frames due to data loss or addition. Deploying encryption and verification operations to the FPGA device reduces the CPU resource consumption of communication processing tasks. Defining an independent adaptation layer ensures that the underlying processing of the FPGA device is independent of the application layer's data format and interface, improving design flexibility.

[0038] Of course, any product implementing this invention does not necessarily need to achieve all of the advantages described above at the same time. Attached Figure Description

[0039] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the embodiments will be briefly described below. Obviously, the drawings described below are merely some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without any creative effort.

[0040] Figure 1 This is a structural diagram of the data transmission and reception hierarchy of a communication system for special equipment in a strong radiation environment, provided by an embodiment of the present invention.

[0041] Figure 2 This is a structural diagram of the interface conversion processing module provided in an embodiment of the present invention;

[0042] Figure 3 This is the frame structure output by the frame verification calculation module provided in this embodiment of the invention;

[0043] Figure 4 This is the frame structure output by the frame synchronization module provided in this embodiment of the invention;

[0044] Figure 5 This is a block diagram of the physical layer transmission structure provided in an embodiment of the present invention. Detailed Implementation

[0045] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present invention, and not all of them. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention are within the scope of protection of the present invention.

[0046] See Figure 1This invention provides a communication system for special equipment in a high-radiation environment, such as... Figure 1 As shown, the system may include:

[0047] The application layer is implemented on the processor side, and the adaptation layer, encrypted data link layer, and physical layer are implemented on the FPGA device side.

[0048] The application layer and the adaptation layer are connected via a target communication interface. The application layer includes a status register and a sideband control channel configured according to the target interface. During transmission, the application layer processes the transmitted data; during reception, the application layer processes the received data. Furthermore, the target communication interface includes either a PCIe interface or an AXI4 interface. The specific interface for interaction between the FPGA device and the upstream processor is unrestricted, supporting bus interfaces such as AXI4-Lite and PCIe. Internal conversion logic can be used to implement interface conversion, converting data sent by the processor into a byte stream output, thus improving the compatibility of the communication interface with the processor interface.

[0049] The adaptation layer includes interface adaptation for implementing the FPGA device and the processor; so that during the transmission process, the data sent by the application layer is converted into a transmission byte stream and sent to the encrypted data link layer, and during the reception process, the received target receive byte stream is uploaded to the processor; furthermore, during the transmission process, the adaptation layer converts the data sent by the application layer into a byte stream with a packet length of a target number (e.g., the target number can be 16) bytes. When the length of a data packet sent by the application layer at one time is not an integer multiple of the target number of bytes, the adaptation layer padded the data length to an integer multiple of the target number of bytes and sent the padded data to the encrypted data link layer; during the reception process, the adaptation layer uploads the received target receive byte stream to the processor.

[0050] The adaptation layer includes an interface conversion processing module, which includes a communication interface module, an interrupt control module, an adaptation layer control engine, a status and control register group, and a byte stream processing module.

[0051] The interface conversion processing module is used to realize the data reception and transmission of the target communication interface;

[0052] The interrupt control module is used to generate an interrupt signal and output it to the processor;

[0053] The adaptation layer control engine is used to implement the logic control of the module;

[0054] The status and control register group is used to store the configuration information, control information and status information required during the operation of the module issued by the processor.

[0055] During the sending process, the byte stream processing module converts the data to be sent into byte stream data packets according to the target number of bytes and outputs them to the encrypted data link layer; during the data receiving process, it converts the byte stream data input to the encrypted data link layer into the frame format specified by the communication interface module.

[0056] The encrypted data link layer is used to implement data encryption and decryption calculations, frame check field calculations, and frame synchronization functions, so that after performing encryption calculations, frame check field calculations, and frame synchronization processing on the transmitted byte stream during the sending process, a target transmitted byte stream is generated, and during the receiving process, frame synchronization parsing, frame check calculations, and decryption calculations are performed on the received target transmitted byte stream to generate the target received byte stream.

[0057] Furthermore, the encrypted data link layer includes a data caching module, an encryption / decryption operation module, a frame verification calculation module, and a frame synchronization module;

[0058] During the sending process, the data caching module is used to cache the sent byte stream; during the receiving process, the data caching module is used to cache the data after frame verification calculation.

[0059] During transmission, the encryption / decryption module is used to encrypt the transmitted byte stream to generate transmitted ciphertext data; during reception, the encryption / decryption module is used to decrypt the data after frame verification calculation to obtain the target received byte stream.

[0060] During transmission, the frame verification calculation module is used to perform verification calculation on the transmitted ciphertext data and add the calculation result to the transmitted ciphertext data field; during reception, the frame verification calculation module is used to perform frame verification calculation on the frame data output by the frame synchronization module.

[0061] The frame synchronization module is used to implement data frame synchronization at the byte stream level.

[0062] The encryption / decryption module includes an SM4 encryption / decryption module. The frame verification calculation module includes any one of the CRC8, CRC16, and CRC32 algorithms.

[0063] The processing mechanism of the frame synchronization module includes adding a 6-byte 0x5A synchronization header to the original data frame header. When five consecutive 0x5A bytes are sent, a byte of 0x00 is inserted afterward. This process is repeated until the data frame is completely sent.

[0064] The physical layer is used to convert the byte stream data output by the encrypted data link layer into bit stream data for transmission over the physical channel. Furthermore, the physical layer employs 8B / 10B encoding for data transmission, and uses optical fiber as the transmission medium.

[0065] The physical layer employs receive processing logic and transmit processing logic to implement data buffering and data transmission and reception control during data transmission and reception; it employs channel control logic to implement the conversion between byte data and bit stream data and the 8B / 10B encoding process control; it employs a high-speed serial transceiver to implement high-speed serial transmission and reception of bit streams; and it employs an SFP+ optical module to implement the conversion between optical signals and electrical signals.

[0066] The communication system for special equipment in strong radiation environments provided in this application embodiment adopts a "CPU+FPGA" processing architecture as the implementation carrier of the communication system. It is used to solve the requirements of real-time communication, reliability, and data security in the point-to-point communication model of special equipment under strong radiation environments. The system adopts the idea of ​​layered design of the communication system and consists of four parts: Application layer: used to generate application data and process received application data; Adaptation layer: the communication mode matching design between FPGA devices and upstream processors, converting data into byte stream output; Encrypted data link layer: the internal data processing mechanism design of FPGA devices, which performs data encryption, verification, and frame synchronization processing; and the external data interaction mechanism and physical communication medium and protocol design of FPGA devices.

[0067] The communication system for special equipment in strong radiation environments provided in this application embodiment provides corresponding status registers (interrupts, error checks, etc.) and sideband control channels in the FPGA to enhance the reliability and configurability of interaction with the processor. The SM4 encryption algorithm is used to encrypt the data stream sent from the FPGA, encrypting the data stream in groups of the target quantity to achieve encrypted data communication. To enhance reliability, the FPGA adds a check field to each encrypted data frame, providing multiple check methods that are software-configurable, supporting CRC8, CRC16, CRC32, etc., eliminating the need for a check field when defining the application layer protocol, thus reducing the processor's load. A byte stream synchronization method is also provided to synchronize the encrypted output ciphertext data stream byte by byte, enabling the receiving side to accurately identify each frame of ciphertext data. The physical layer transmission medium uses an optical fiber interface for transmission, enhancing anti-interference capabilities.

[0068] The following section provides a detailed description of the communication system for special equipment in strong radiation environments provided in this application, using a packet length of 16 bytes as an example.

[0069] The structure of the reliable and encrypted communication system provided in this application embodiment is as follows: Figure 1As shown, the system adopts a layered design approach, dividing it into four layers: application layer, adaptation layer, encrypted data link layer, and physical layer. Each layer performs a specific function. The application layer is implemented by a processor such as a CPU, while the adaptation layer, encrypted data link layer, and physical layer are implemented by an FPGA. The system will be described in detail below.

[0070] 1. Application layer.

[0071] The application layer is used to generate user data to be sent or process received user data. Data processing at this layer is performed by processors such as the CPU. This method does not impose any restrictions on the specific format of the application layer data; its application layer protocol can be defined by the designer and flexibly designed according to specific needs. Data in the application layer may or may not have a verification field, depending on actual requirements. Verification fields have already been added to the data at the encrypted data link layer to ensure reliable data transmission.

[0072] The data transmission method between the application layer and the adaptation layer is not limited in this method. Depending on the actual hardware design of the application, PCIe interface, AXI4 interface, etc. can be used. Based on the specific transmission method, corresponding registers and sideband control signals are designed in the adaptation layer to ensure correct and reliable data interaction.

[0073] 2. Adaptation layer.

[0074] The adaptation layer resolves interface compatibility issues between the FPGA and the application layer processor, addressing these issues based on the specific hardware design (PCIe, AXI4 interface). During transmission, data from the application layer is converted into a byte stream with 16-byte packets. If the length of a data packet sent by the application layer is not a multiple of 16 bytes, the adaptation layer padded the data to a multiple of 16 bytes and then sent the padded data to the encrypted data link layer. During reception, the received byte stream is transmitted to the application layer processor according to the specific communication interface. The structure of the adaptation layer interface conversion processing module is as follows: Figure 2 As shown, the functional descriptions of each submodule are as follows.

[0075] (1) Communication interface module: used to implement data reception and transmission of communication interfaces such as PCIe and AXI4;

[0076] (2) Interrupt control module: used to generate interrupt signals and output them to the processor to enhance the real-time performance of the communication process;

[0077] (3) Adaptor layer control engine: used for the logic control of the entire module and to coordinate the work between various modules;

[0078] (4) Status and Control Register Group: Used to store configuration information, control information and various status information during the operation of this module issued by the application layer processor;

[0079] (5) Byte stream processing module: Converts the application layer data received by the communication interface into byte stream data in 16-byte packets and outputs it to the encrypted data link layer.

[0080] 3. Encrypted data link layer.

[0081] The encrypted data link layer is used to implement data encryption, checksum calculation, and frame synchronization. The encrypted data link layer has two processing directions: data transmission and reception. During data transmission, the byte stream data sent by the adaptation layer is first buffered by the data buffer module. Then, the data is read out in 16-byte groups and sent to the encryption / decryption module (SM4 encryption module) for encryption. The SM4 encryption module performs encryption upon receiving each group of data to be encrypted. After completion, it outputs the encrypted data to the frame checksum calculation module for checksum calculation. The checksum calculation uses CRC8, CRC16, or CRC32 depending on the processor configuration, and the result is appended to the data field. The data frame structure output by the frame checksum calculation module is shown in Figure 3. The data reception process is the reverse of the transmission process and will not be described further here.

[0082] The frame synchronization module is used to implement data frame synchronization at the byte stream level. Without a frame synchronization mechanism, during byte stream transmission, if byte data misalignment or omissions occur, data errors will continue, making it impossible to determine which subsequent received data frame is correct. The frame synchronization mechanism is as follows: a 6-byte "0x5A" synchronization header is added to the original data frame header, followed by the data portion. When sending the data portion, the processing rule is: after sending five consecutive "0x5A" bytes, a byte of 0x00 is inserted, and this cycle continues until the data frame is completely transmitted. The frame structure output by the frame synchronization module is as follows: Figure 4 As shown.

[0083] Ideally, when using CRC8 for checksum calculation, if there is no occurrence of five consecutive "0x5A" in the transmitted data, the data portion of the frame output by the frame synchronization module will be 17 bytes long. When using CRC32 for checksum calculation, in the worst case, if there are four occurrences of five consecutive "0x5A" in the transmitted data, the data portion of the frame output by the frame synchronization module will be 23 bytes long, because the last five consecutive "0x5A" transmission is complete, the entire frame ends, and there is no need to add 0x00.

[0084] 4. Physical layer.

[0085] The physical layer is used to convert the byte stream data output from the encrypted data link layer into bit stream data for transmission over the physical channel. This communication method specifies the encoding method and transmission medium used by the physical layer. The physical layer uses 8B / 10B encoding for data transmission, and the transmission medium is optical fiber; whether multimode or single-mode optical fiber is used is determined by the hardware components.

[0086] Physical layer transport framework such as Figure 5 As shown, the receiving and transmitting processing logics are used for data buffering and data transmission and reception control during physical layer data transmission and reception; the channel control logic implements the conversion between byte data and bit stream data and the 8B / 10B encoding process control; the high-speed serial transceiver implements high-speed serial transmission and reception of bit streams; and the SFP+ optical module implements the conversion between optical signals and electrical signals.

[0087] As can be seen, the communication system for special equipment in strong radiation environments provided in this application adopts a layered design for data interaction between the FPGA and the CPU, and uses an open data stream for transmission, so that changes to the upper-layer protocol do not affect the lower-layer data processing, thus having stronger compatibility.

[0088] By offloading data encryption and verification to the FPGA, the stability of communication processing is improved, the CPU load is reduced, and the real-time performance of communication is not affected when the CPU is handling emergency nuclear power control tasks.

[0089] Optimizing the order of encryption and verification operations, and adopting a method of encryption followed by verification on the sending side, can improve the effective encryption utilization of the data payload; for the receiving side, if the verification fails, the data is directly discarded, which can reduce the amount of invalid computation in the decryption operation.

[0090] The design of the byte stream synchronization mechanism enables automatic frame synchronization of the underlying data, ensuring that the physical layer data transmission input and output are unaffected by the FPGA intermediate processing method, and that changes in the intermediate layer processing do not affect the transmission synchronization of the lower layer data.

[0091] In summary, the communication system for special equipment in strong radiation environments provided in this application can reliably communicate in such environments. The use of encrypted ciphertext for data transmission ensures data security. When some bytes are lost or added during transmission, the system can automatically find the correct start of the next data frame, preventing the inability to parse new, correct data frames due to data loss or addition. Deploying encryption and verification operations to the FPGA device reduces the CPU resource consumption of communication processing tasks. Defining an independent adaptation layer ensures that the underlying processing of the FPGA device is independent of the application layer's data format and interface, improving design flexibility.

[0092] It should be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0093] As can be seen from the above description of the embodiments, those skilled in the art can clearly understand that this application can be implemented by means of software plus necessary general-purpose hardware platforms. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in various embodiments or some parts of the embodiments of this application.

[0094] The various embodiments in this specification are described in a progressive manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on describing the differences from other embodiments. In particular, for system or system embodiments, since they are basically similar to method embodiments, the description is relatively simple, and relevant parts can be referred to the descriptions in the method embodiments. The systems and system embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without creative effort.

[0095] The above description is merely a preferred embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention are included within the scope of protection of the present invention.

Claims

1. A communication system for special equipment in a high-radiation environment, characterized in that, This includes the application layer implemented on the processor side, as well as the adaptation layer, encrypted data link layer, and physical layer implemented on the FPGA device side. The application layer and the adaptation layer are connected via a target communication interface. The application layer includes a status register and a sideband control channel set according to the target communication interface. During transmission, the application layer is used to process transmitted data, and during reception, the application layer is used to process received data. The adaptation layer includes interfaces for implementing compatibility between the FPGA device and the processor. So that during the sending process, the data sent by the application layer is converted into a byte stream and sent to the encrypted data link layer, and during the receiving process, the received target byte stream is uploaded to the processor; The encrypted data link layer is used to implement data encryption and decryption calculations, frame check field calculations, and frame synchronization functions, so that after performing encryption calculations, frame check field calculations, and frame synchronization processing on the transmitted byte stream during the sending process, a target transmitted byte stream is generated, and during the receiving process, frame synchronization parsing, frame check calculations, and decryption calculations are performed on the received target transmitted byte stream to generate the target received byte stream. The physical layer is used to convert the byte stream data output by the encrypted data link layer into bit stream data for transmission over the physical channel.

2. The communication system for special equipment in a strong radiation environment according to claim 1, characterized in that, The target communication interface includes either a PCIe interface or an AXI4 interface.

3. The communication system for special equipment in a strong radiation environment according to claim 1, characterized in that, During transmission, the adaptation layer converts the data sent by the application layer into a byte stream with a packet length of the target number of bytes. When the length of a data packet sent by the application layer at one time is not an integer multiple of the target number of bytes, the adaptation layer padded the data length to an integer multiple of the target number of bytes and sent the padded data to the encrypted data link layer. During reception, the adaptation layer uploads the received target received byte stream to the processor.

4. The communication system for special equipment in a strong radiation environment according to claim 3, characterized in that, The adaptation layer includes an interface conversion processing module, which includes a communication interface module, an interrupt control module, an adaptation layer control engine, a status and control register group, and a byte stream processing module. The interface conversion processing module is used to realize the data reception and transmission of the target communication interface; The interrupt control module is used to generate an interrupt signal and output it to the processor; The adaptation layer control engine is used to implement the logic control of the module; The status and control register group is used to store the configuration information, control information and status information required during the operation of the module issued by the processor. The byte stream processing module is used to convert the transmitted data into byte stream data packets according to the target number of bytes during the transmission process and output them to the encrypted data link layer, and to convert the byte stream data input by the encrypted data link layer into the frame format specified by the communication interface module during the data reception process.

5. The communication system for special equipment in a strong radiation environment according to claim 1, characterized in that, The encrypted data link layer includes a data caching module, an encryption / decryption operation module, a frame verification calculation module, and a frame synchronization module; During the sending process, the data caching module is used to cache the sent byte stream; during the receiving process, the data caching module is used to cache the data after frame verification calculation. During transmission, the encryption / decryption module is used to encrypt the transmitted byte stream to generate transmitted ciphertext data; during reception, the encryption / decryption module is used to decrypt the data after frame verification calculation to obtain the target received byte stream. During transmission, the frame verification calculation module is used to perform verification calculations on the transmitted ciphertext data and add the calculation results to the transmitted ciphertext data field. During the receiving process, the frame verification calculation module is used to perform frame verification calculation on the frame data output by the frame synchronization module; The frame synchronization module is used to implement data frame synchronization at the byte stream level.

6. The communication system for special equipment in a strong radiation environment according to claim 5, characterized in that, The encryption / decryption module includes an SM4 encryption / decryption module.

7. The communication system for special equipment in a strong radiation environment according to claim 5, characterized in that, The frame check calculation module includes any one of the CRC8 algorithm, CRC16 algorithm, and CRC32 algorithm.

8. The communication system for special equipment in a strong radiation environment according to claim 5, characterized in that, The processing mechanism of the frame synchronization module includes adding a 6-byte 0x5A synchronization header to the original data frame header. When five consecutive 0x5A bytes are sent, a byte of 0x00 is inserted afterward. This process is repeated until the data frame is completely sent.

9. The communication system for special equipment in a strong radiation environment according to claim 1, characterized in that, The physical layer uses 8B / 10B encoding for data transmission, and the transmission medium is optical fiber.

10. The communication system for special equipment in a strong radiation environment according to claim 9, characterized in that, The physical layer employs receive processing logic and transmit processing logic to implement data buffering and data transmission and reception control during data transmission and reception; it employs channel control logic to implement the conversion between byte data and bit stream data and the 8B / 10B encoding process control; it employs a high-speed serial transceiver to implement high-speed serial transmission and reception of bit streams; and it employs an SFP+ optical module to implement the conversion between optical signals and electrical signals.

Images