Design And Implememtation Of New Platform For Encryption And Decryption Of Telemetry And Telecontrol Data

Telemetry and telecontrol system is an indispensable part of aerospace industry. The contents of telemetry data determine the importance of ensuring it safe and reliable. So encryption and decryption equipment for telemetry data is essential. China's encryption and decryption technology for aerospace telemetry data makes unceasing progress in recent years,and many types of encryption and decryption equipment has been put into use. However, with the improvement of requirement for processing speed and safety performance, the existing encryption and decryption equipment cannot meet new designed requirement. In such background, this paper designs novel type of the encryption and decryption platform for telemetry data, and proposes a new architecture based on VxWorks real-time operating system and IPSec application protocol platform. IPSec protocols are achieved in embedded multicast environment by using generic routing encapsulation, making new generation of encryption and decryption platform provide all-round security guarantees of encryption, authentication,anti-reply and so on for high-speed measurement and control data. The performance is far better than the existing encryption and decryption equipment. Moreover, this paper also achieves the hardware system for encryption and decryption platform, and introduces PCI-Express bus standard into data transmission between chips, making platform real-time process the high-speed measurement and control data.First, this paper describes the whole design plan of hardware system of encryption and decryption platform for new generation measure and control data, and selects hardware architecture of PowerPC and FPGA for platform. Parts for main chips are selected based on performance requirement and parameter indexes. PCIe bus is introduced into hardware system.This paper also designs and achieves a number of main modules in hardware system of platform, draws the corresponding circuit schematic and achieves testing and debugging for platform hardware system.Next, this paper creatively provides a new designed architecture by using IPSec network security protocols. It provides measurement and control data with all-round security guarantees of encryption, authentication, and anti-replay attack and so on in IPSec data bag form. This greatly improves the security of processed data by platform. IPSec protocols under the multicast transmission are achieved creatively in embedded systems by using generic routing encapsulation, which greatly expands the application scope of IPSec protocols, and provides a new idea for the secure transmission of multicast.Then, it introduces the whole designed architecture of encryption and decryption platform, selects VxWorks embedded real-time system for platform, and completes kernel configuration and BSP rewritten of operating system of platform. The application software of the whole platform is scheduled into six modules. The specific function and implementation process for each module is designed and part of main modules is written with embedded C language. In order to test the encryption and decryption platform easily, testing software on the host computer is writing with VC++ language.Finally, in order to meet the application of IPSec protocols in encryption and decryption platform, the most suitable encryption algorithm AES and authentication algorithm SHA-1 with platform are selected and theoretical studies and safety analysis. They are also implemented on FPGA.