基于选择空间的AES密钥扩展算法

传统AES密钥扩展算法在已知某轮子密钥的情况下容易遭受攻击,为了避免这种情况的发生,通过采用单向性思路,使用轮密钥常驻内存的工作方式以提高数据吞吐率,并提出基于选择空间的AES密钥扩展算法,对原有算法的加密强度进行了改善。通过FPGA仿真实现,实验结果表明,该方法既能保证密钥扩展算法的安全性,亦能充分结合FPGA设计高效并行的特点,提高其运行效率。     

雷达系统超精简流式AES加密器设计和优化

为了满足雷达系统对信息加密传输的要求,对高级加密标准（AES）的计数模式（CTR）重新设计,将其改进成流加密的工作模式。通过进行结构折叠和算法重用,有效地减小了资源占用,提高了吞吐率。在Spartan3型号的FPGA上,仅占用728个slice就可以实现276.53Mbps的吞吐率。本设计实现了节省硬件资源的纯逻辑模式和速度较高的分布式内存模式,并且完成实时密钥调度和流水线设计,获得了高可靠性、高吞吐率和高安全性。通过对实际雷达数据的加密实验,验证了该设计的有效性,显示了流加密模式的AES在雷达系统加密传输中的强大潜力。     

基于FPGA的AES密码协处理器的设计和实现

文章基于FPGA设计了一种能完成AES算法加密的密码协处理器，设计中利用VirtexⅡ系列FPGA的结构特点，对AES算法的实现做了优化。实验证明，这种实现方式用较少的电路资源达到了较高的数据吞吐率。该密码协处理器还提供了和ARM处理器的接口逻辑，实现了用于加／解密和数据输入输出的协处理器指令．作为ARM微处理器指令集的扩展，大大提高了嵌入式系统处理数据加／解的效率，实现数据的安全传输。     

智能电网中基于层次密钥的细粒度访问机制的研究

为了保证通信的安全,加密是基本的也是重要的解决办法,其中密钥的管理是关键问题。目前已有的方案大多采用公钥加密来实现通信过程的安全,开销花费较大。本文提出基于层次密钥管理的对称加密方案保证数据的完整可用性,防止数据被篡改。并给出了性能分析,方案可以实现基本的安全传输并能够降低开销,节约成本。     

保护用户隐私的数据加密与安全存储方案

文中提出了一套保护用户隐私的数据加密与安全存储方案,选择了适合的加密算法和密钥管理方案。通过对比分析不同加密算法的安全性和效率,最终选择了AES 256,RSA等加密算法,并设计了三级密钥管理方案,实现了对密钥的安全存储和分发。在数据存储方面,以eMMC存储器为存储介质,实现了基于角色和权限的访问控制机制,确保用户只能访问其被授权的数据。     

超混沌视频加密系统的FPGA设计与实现

随着多媒体技术的不断发展,视频信息安全愈发受到人们的关注。为解决视频信息的安全问题,提出了一种基于现场可编程门阵列(FPGA)技术的超混沌视频加密方法。在加密过程中,一方面FPGA控制数字摄像头实现实时彩色视频信息的采集;另一方面,在计算机密钥指令下,利用FPGA使超混沌系统产生有效的伪随机序列,实现对所采集视频信息的数据和地址的双重超混沌加密。给出了具体的超混沌视频加密算法和设计流程以及FPGA实现结果。安全性分析表明,明密文主观视觉对比显著不同,密钥空间大,视频图像统计特性的相关性弱,说明基于FPGA的超混沌视频加密系统加密效果良好可靠。     

一种高性能RLWE加密处理器的设计与实现

RLWE加密方案是后量子时代格密码系统中最有潜力的候选方案之一。针对RLWE加密处理器存在的高延迟、低吞吐率的问题,文中提出了一种高性能RLWE加密处理器硬件架构。该结构采用了两个NTT模块和4个蝶形模块的并行结构。在预计算和后计算过程中,利用4个蝶形模块中的乘法器进行并行计算。在加密过程中,NTT运算与密文计算并行处理。在NTT以及INTT运算的处理过程中,将数据的读写过程及计算过程进行乒乓操作,从而隐藏数据的读写周期,降低RLWE加密处理器的延迟,提高了RLWE加密处理器的吞吐率。设计资源复用的硬件架构,在加密、解密过程复用蝶形模块中的乘法器和加法器,INTT复用NTT的电路结构,从而降低加密处理器硬件资源消耗。在Spartan-6 FPGA开发平台上实现了参数为n=256,q=65 537的加密处理器。实验结果表明,文中提出的加密时间仅为12.18μs,吞吐率为21.01 Mbit·s^-1,解密时间仅为8.65μs,吞吐率为29.60 Mbit·s^-1。与其他加密处理器的对比实验表明,文中所提出的加密处理器的延迟和吞吐率均得到了改善。     

VoIP系统中加密算法的应用研究

针对目前语音信息加密不足的现状,在VoIP终端设备中设计并实现了基于FPGA的AES算法的加解密模块。首先介绍了具有加解密能力的VoIP系统的总体实现结构;其次重点介绍了加密算法各个子模块的实现方法,并通过硬件描述语言在FPGA芯片内部加以实现;最后,通过编写Testbench文件对PCI的部分功能和加解密进行了仿真测试。仿真结果表明,该系统成功实现了数据传输接口和语音的快速加解密功能,为数据的快速安全实时传输提供了可靠保证。加解密算法的实现占用的FPGA资源少,速度快,吞吐率高,性能稳定。     

一种PKI客户端密码加速器的实现方案

安全性、易用性与加解密的效率是建构PKI客户端系统的重要内容。这些问题与密钥的管理、加密的硬件实现有关。文章就客户端密钥的管理方法与加密的专用硬件模块实现进行了探讨,并给出了一种具体的基于USB接口的客户端密码加速器的实现方案。     

WSNs中基于FPGA的AES-ECC新型加密系统

针对无线传感器网络的特点,提出一种适于FPGA实现的改进的AES-ECC混合加密系统。本方案采用AES模块对数据进行加密,用SHA-1加密算法处理数据得到数据摘要,用ECC加密算法实现对摘要的签名和对AES私钥的加密。各个算法模块采用并行执行的处理方式以提高运算效率。方案优化了AES加密模块的设计,在占用相对较少逻辑资源的同时提高了系统吞吐率,通过优化ECC乘法单元的设计,提高了数字签名生成和认证的速度,完全满足了无线传感器网络对于稳定性、功耗以及处理速度的要求,给数据传输的安全性提供了高强度的保障。     

Time Synchronization Error and Calibration in Integrated GPS/INS Systems

The necessity for the precise time synchronization of measurement data from multiple sensors is widely recognized in the field of global positioning system/inertial navigation system (GPS/INS) integration. Having precise time synchronization is critical for achieving high data fusion performance. The limitations and advantages of various time synchronization scenarios and existing solutions are investigated in this paper. A criterion for evaluating synchronization accuracy requirements is derived on the basis of a comparison of the Kalman filter innovation series and the platform dynamics. An innovative time synchronization solution using a counter and two latching registers is proposed. The proposed solution has been implemented with off‐the‐shelf components and tested. The resolution and accuracy analysis shows that the proposed solution can achieve a time synchronization accuracy of 0.1 ms if INS can provide a hard‐wired timing signal. A synchronization accuracy of 2 ms was achieved when the test system was used to synchronize a low‐grade micro‐electromechanical inertial measurement unit (IMU), which has only an RS‐232 data output interface.     

ADS-B Data Authentication Based on ECC and X.509 Certificate

An automatic dependent surveillancebroadcast(ADS-B) system has serious security problems,and the data can be spoofed during broadcasting precise position information of aircraft.A solution of the ADS-B system data authentication based on the elliptic curve cipher(ECC) and X.509 certificate is proposed.It can avoid the key distribution problem by using the symmetric key algorithm and prevent the ADS-B data from being spoofed thoroughly.Experimental test results show that the solution is valid and appropriate in ADS-B universal access transceiver(UAT) mode.     

Implementation of multiple secure virtual private networks over passive optical networks using electronic CDMA

An optical layer solution for implementing multiple secure virtual private networks (VPNs) over a passive optical network (PON) using electronic code-division multiple access is proposed. The multiple virtual private networking capability is experimentally demonstrated with 40-Mb/s data multiplexed with a 640-Mb/s electronic code that is unique to each of the VPNs in the PON, and the transmission of the electronically coded data is carried out using Fabry-Pe/spl acute/rot laser diodes. Experimental results show that this technique can potentially support high data rate traffic while imposing minimal penalty resulting from optical beat interference.     

Matrix encoding for data hiding using multilayer video coding and transcoding solutions

This paper proposes a multitier data hiding solution in MPEG video using matrix encoding. In the first tier of the proposed solution, raw video is encoded into two layers using multilayer Signal to Noise Ratio (SNR) encoding. During the multilayer encoding process, the quantization scales and coding parameters are stored. In the second tier, message bits are embedded in the stored quantization scales using matrix encoding. In the third and last tier, the raw video is encoded again into two layers using the modulated quantization scales and coding parameters of the first encoder. The proposed multitier solution is extended by replacing the multilayer encoder with a multilayer transcoder to accommodate situations in which the video exists in pre-coded format only. By the use of multilayer encoder or transcoding, we show that the message payload can be doubled without adversely affecting the coding quality or bitrate of the host video. We also show that message embedding using matrix encoding can be extended to modulate motion vectors. The paper also proposes two solutions for motion vector modulation based on the availability of the raw video. In comparison to existing work, the proposed solutions have higher message payloads, lower degradation in video quality and result in reduced excessive bitrate.     

Multiple Virtual Private Networks Over Passive Optical Networks Using RF Subcarrier Multiplexing and Fabry–PÉrot Laser Diodes

An optical layer solution for implementing multiple virtual private networking capabilities over a passive optical network using subcarrier multiplexed (SCM) transmission is proposed and experimentally demonstrated with 60-Mb/s data multiplexed with two radio-frequency subcarriers. The transmission of the SCM data is carried out using Fabry–PÉrot laser diodes. Experimental results and theoretical analysis show that our technique can potentially support high data rate traffic from a large number of simultaneous virtual private networks with minimal penalty resulting from optical beat interference.     

Cloud Based Software Computing as a Service in Hybrid Evolution Algorithm with Feedback Assistance

This paper develops cloud based software computing as a service (SCaaS) in the hybrid evolution algorithm with feedback assistance to solve the data optimal NP-complete problems such as travel salesman problems and job shop scheduling problems. Suitable steps, methods, or procedures of the genetic algorithm can be adopted from various evolution procedures or methods of the genetic algorithms based on the fitness evaluation results and survival ratio of different crossover methods in the current generation. The proposed system can dynamically emphasize the corresponding methods or procedures for the better performance in optimal solution searching. In addition, according to the proposed XML format, system users can upload only the coding of chromosomes without implementing the genetic algorithm program. Furthermore, by using the feedback assistance, the convergence time of the optimal solution can be enhanced.     

一种大型阵列天线散射特性快速计算方法

:针对大型阵列天线的散射特征,提出了一种基于区域分解方法计算大型相控阵天线散射特性的快速计算方法,将相控阵天线的散射计算问题分解为求解反射板和辐射天线阵列两个子区域的问题,使以前不能在PC机上计算大型阵列天线的散射问题得以解决,并且计算速度快。该方法已经在工程中得到应用,通过与实测数据进行对比,计算精度可以达到±1 dB 以内。该方法在保证计算精度的同时可以大大降低计算复杂度,极大地提高了计算效率,为大型相控阵天线RCS预估提供了一种高效、可靠的解决方法。     

Optimizing the performance of a surface mount placement machine

Process planning is an important and integral part of effectively operating a printed circuit board (PCB) assembly system. A PCB assembly system generally consists of different types of placement machines, testing equipment, and material handling equipment. This research develops a new solution approach to determine the component placement sequence and feeder arrangement for a turret style surface mount-placement machine often used in PCB assembly systems. This solution approach can be integrated into a process planning system to reduce assembly time and improve productivity. The algorithm consists of a construction procedure that uses a set of rules to generate an initial component placement sequence and feeder arrangement along with an improvement procedure to improve the initial solution. An industrial case study conducted at Ericsson, Inc., using a Fuji CP4-3 machine and actual PCB data, is presented to demonstrate the performance of the proposed solution approach. The solutions obtained using the proposed solution approach are compared to those obtained using state of the art PCB assembly process optimization software. For all PCBs in the case study, the proposed solution approach yielded lower placement times than the commercial software, thus generating additional valuable production capacity. This research is applicable for both researchers and practitioners in printed circuit board assembly systems     

斜坡电流测试应用与比较方法研究

讨论了斜坡电流测试的相关参数如电流斜坡速率、步长及电流倍增速率对测试结果击穿电荷具有的严重影响。指出斜坡电流测试中各个参数的设定、影响及其相关性,使斜坡电流测试的结果具有可比较性。同时,讨论了由于斜坡电流测试本身的特性,击穿电荷具有非连续性,针对击穿电荷的非连续性,提供了一种统计上的数据处理方法,并且根据工程上不同的定性比较结果提供了不同的统计比较方法,可以对非连续的斜坡电流测试结果进行定量的统计比较。在产品验证或生产线出现异常时,能够进行统计上的比较,给出定量的结果。据此能对生产线的稳定性或异常事件对产品的影响给出明确的结论,为受影响的产品的处置提供定量的数据支持。这是首次对斜坡电流测试数据的统计定量分析。     

Wireless-SpaceWire bridge for intrasatellite transmissions

The scope of this paper is to present the proof-of-concept and functional verification of a Wireless-SpaceWire bridge (High-Throughput Wireless-SpaceWire Bridge for Intra-Satellite Transmissions [HiSAT] bridge) designed to replace the wired SpaceWire (SpW) connections for intraspacecraft communications. To provide proper data handling and conversion, the proposed solution implements two main components: (1) the SpW Converter, which provides the SpW interface, and (2) the Wireless Converter, which provides the multiantenna radio frequency (RF) front-end. High-end research infrastructure is used in the solution implementation. STAR-Dundee SpW products emulate real spacecraft instrumentation and implement the SpW links and interfaces. Xilinx FPGA ZCU102 boards are used for the implementation of the hardware/software communication stack of the SpW Converter. A comprehensive National Instruments USRP Software Defined Radio platform is used to implement the Wireless Converter. End-to-end laboratory tests are run to evaluate the performance of the proposed solution in terms of average end-to-end delay, average data rate, and packet success rate and to assess the technology readiness. The results demonstrate that the HiSAT bridge is TRL4 and that the technological approach (i.e., using FPGAs and OFDM transmissions) can successfully replace an on-board intraspacecraft SpW link.