系統晶片安全護衛

Abstract

隨著通訊技術的進步，生活中處處需要利用網際網路或其他通訊設備來交換資料。網路資料處理成為電腦系統所需解決的問題，這方面的問題在過去是由一般CPU來處理，而現在已發展成由專門的網路處理器(NPU)來提供高速的封包處理，以解決日亦嚴重的網路流量問題。而資訊加密的處理也跟著網路資料傳輸一樣在未來將會有越來越多的需求。因此在此篇論文中，設計出具前瞻性的安全模組晶片來加速一般CPU或網路處理器對加密資料的處理，並提出個人信賴裝置的概念。 PDA、手機等行動裝置加裝此安全模組晶片將成為可信賴之防竄改裝置，即個人信賴裝置。安全模組晶片中結合了對稱式密碼系統、非對稱式密碼系統、訊息摘要、簽章、亂數產生等演算法，能提供資料加解密以及認證、簽章等功能。更能進一步使個人信賴裝能在PKI架構下，進行認證、資料加解密及數位簽章等活動成為PKI架構下的具體裝置或載具。

Along with the evolution of the communication technology, more and more data in our daily life are transferred and exchanged on internet or other communication equipments. Therefore, dealing with data on the internet becomes the problem solved in need of the computer operation system. Problems in this aspect were handled by general CPU, but nowadays the situation has changed. NPU is developed to offer high speed packet switching in order to solve the daily increasing internet flow problem. And there are more and more requirements both on information encrypted system and data transformation on internet. In this thesis, shortening the encryption time of general CPU or internet processor by foresighted secure module chip and personal trust device are proposed. Mobile communication devices such as PDA and cellular phone will be inalterable and credible by installing the PTD (Personal Trusted Device). The secure module chip is the combination of mathematical calculations such as Symmetric Key Cryptosystem, Public Key Cryptosystem, Message Digest, signature and random number generator, and is capable to offer functions like encryption, decryption, certification and signature. Further more, the safety module chip enable the PTD to perform encryption, decryption, certification and digital signature, and become a concrete device or vehicle under PKI (Public Key Infrastructure).