基于FPGA的网络物理隔离器的设计与实现
摘要
目前,市场上流行的网络物理隔离器件硬件系统,往往基于工控机或者多片嵌入式芯片构成,实现复杂、成本较高。本文首次提出了基于大规模逻辑门阵列FPGA(Field Programmable Gate Array)的网络物理隔离器设计与实现方法,详细论述了整个系统平台的设计和实现过程。
首先,在深入研究片上可编程系统SOPC(System on a Programmable Chip)可编程系统技术及NiosⅡ软核处理器基础上,提出了基于Avalon总线及NiosⅡ软核处理器系统的硬件和软件开发流程,认真分析了网络物理隔离器的功能需求,确定了总体设计方案和组成模块、系统的运作流程。
其次,根据μC/OS-Ⅱ实时操作系统和LWIP网络协议栈的系统特点及结构,完成了针对NiosⅡ软核处理器的移植,对要点做了说明。
最后,在硬件和软件系统的设计开发两方面,实现了完整的网络物理隔离器系统。
Nowdays,most network physical separators are made up of industrial computer or multi-chips system,which costs very high and has complicated implementation.Aimming at these problems,this paper introduces the design and implement of network physical separator based on FPGA,and gives a detail description and implement of this system.Firstly,this paper studys the SOPC (System on a Programmable Chip)technology and NiosⅡprocessor,then introduces the developing workflow of the system' hardware and software building on NiosⅡand Avalon bus.After this,the paper analyzes the detail functional requirement deeply,and gives a general design,then divide this system into several modules;secondly,this paper introducesμC/OS-Ⅱreal-time operation and LWIP Network protocol stack and the transplant of these system to NiosⅡprocessor,concludes the outline of transplant;finally,from hardware and software two sides we implement a network physical separator.
首先,在深入研究片上可编程系统SOPC(System on a Programmable Chip)可编程系统技术及NiosⅡ软核处理器基础上,提出了基于Avalon总线及NiosⅡ软核处理器系统的硬件和软件开发流程,认真分析了网络物理隔离器的功能需求,确定了总体设计方案和组成模块、系统的运作流程。
其次,根据μC/OS-Ⅱ实时操作系统和LWIP网络协议栈的系统特点及结构,完成了针对NiosⅡ软核处理器的移植,对要点做了说明。
最后,在硬件和软件系统的设计开发两方面,实现了完整的网络物理隔离器系统。
Nowdays,most network physical separators are made up of industrial computer or multi-chips system,which costs very high and has complicated implementation.Aimming at these problems,this paper introduces the design and implement of network physical separator based on FPGA,and gives a detail description and implement of this system.Firstly,this paper studys the SOPC (System on a Programmable Chip)technology and NiosⅡprocessor,then introduces the developing workflow of the system' hardware and software building on NiosⅡand Avalon bus.After this,the paper analyzes the detail functional requirement deeply,and gives a general design,then divide this system into several modules;secondly,this paper introducesμC/OS-Ⅱreal-time operation and LWIP Network protocol stack and the transplant of these system to NiosⅡprocessor,concludes the outline of transplant;finally,from hardware and software two sides we implement a network physical separator.
引文
[1]何鹏举,王万诚等.网络隔离器的设计与实现[J],控制工程,2002.
[2]孙民爱,王婷,朱景军.DCS和FCS及其在火电厂中的应用[J],江西电力职业技术学院学报,2006-03.
[3]胡林峰,须文波.基于ARM的网络隔离器的设计[J],微计算机信息,2006.
[4]谢希仁.计算机网络(第4版)[M],电子工业出版社,2003-06:102-150.
[5]徐光辉等.基于FPGA的嵌入式开发与应用[M],电子工业出版社,2006-09:70-75.
[6]李洪伟,袁斯华.基于OuartusⅡ的FPGA/CPLD设计[M],电子工业出版社,2006-04:37-49.
[7]赵俊超.集成电路设计VHDL教程[M],电子工业出版社,2002:173-179.
[8]黄智伟等.FPGA系统设计与实践[M],电子工业出版社,2005-01:200-207.
[9]Michael D.Ciletti著,张雅绮,李铿等译.Verilog HDL高级数字综合[M],电子工业出版社,2005-01:455-460.
[10]吴继华,王诚编著.Altera FPGA/CPLD设计[M],人民邮电出版社,2005-07:151-160
[11]华亮,杨世锡.基于μC/OS-Ⅱ的嵌入式系统应用平台的构建[J],计算机工程,2004-08
[12]李正军.基于Nios软核CPU的μC/OS-Ⅱ和LwlP移植[J],遥测遥控,2006-03
[13]高枫,王玉松.基于Nios 1I自定制Avalon设备的设计与实现[J],中国测试技术,2007-07
[14]徐伟.基于SOPC技术的嵌入式网络研究及应用[J],系统平台与网络通信,2006-05
[15]杨清宇,施仁.基于因特网的工业控制网络体系结构研究[J],信息与控制,2000-10
[16]佘威.安全隔离系统中的隔离方案与实现[J],清华大学学位论文,2004-06:1-5
[17]李正茂.网络隔离理论与关键技术研究[J],同济大学学位论文,2006-03:18-19
[18]W.Richard Stevens.TCP/IP Illustracted Volume 1:The Protocols,Addison Wesley/Pearson,2000-4:33-80.
[19]Louis Baker.VHDL Programming with Advanced Topics,New York,1993.
[20]J.Armstrong Pretince Hall.Chip Level Modelling in VHDL,1988.
[21]Kinser,J.M.(Dept.of Phys,Alabama A&M Univ.,Normal,AL,USA),Object isolation using a pulse-coupled neural network,The International Society for Optical Engineering,v 2824,1996,70-76.
[22]Chen Youping(Sch.of Mech.Scl.&Eng.Huazhong Univ,of Sci& Technol.,China);Yin Yong;Li Fangmin;Zhou Zude Source,Design and realization of security physical isolation system,Journal of Southeast University(English Edition),v 21,n 1,March 2005,P 11-15
[23]Ahn,K.G.(Dept.of Mech.Eng.,UniV.of Sci.&Technol.of China,Pohan,China);Pahk,H.J.:Jung,M.Y.:Cho,D.W.A hybrid-type active vibration isolation system using neural networks,Journal of Sound and Vibration,v 192,n 4,16 May 1996,p 793-805
[24]Gao Xin-hua(Guangdong Provincial Electr.Power Test&Res.inst.,Guangzhou,China);Wang Wen;Ma Xiao Source,Security isolating device for power real-time network,Power System Technology,v 27,n 9,Sept.2003,P 69-72
[25]hou,Liang(School of Electrical Engineering,Wuhan University):Liu,Kai-Pei;Li.Jun-E.A comprehensive project to construct secure computer network for power system,Power System Technology,V28,n23,Dec 5,2004,P 71-75
[26]Oksavik,k(Appl.Phys.Lab.,Johns Hopkins Univ.,Laurel,MD,USA);Ruohoniemi,J.M;Greenwald,R.A.;Baker,J.B.H.;Moen,J.;Carlson,H.C.;Yeoman,T.K.;Lester,M.,Observation of isolated polar cap patches by the European Incohellent Scatter(EISCAT)Svalbard and Super Dual Auroral Radar Network(SuperDARN)Finland radars,Journal of Geophysical Research-Part A-Space PhysicS,V 111,n 45,1 May 2006,P 9 pp.
[27]Whelan,s.(Department of Engineering,University of Cambridge);Kelly,M.J,Vertical implant isotation in Gaps,Semiconductor Science and Technology,V 20,n 10,Oct 1,2005,P 1039-1043
[28]Liang Yun-hua(Sch.of Electr.Eng.,Wuhan Univ.,China);Tan Shun-tao;Zhang Ying;Xiong Xiao-guo;Liu Zheng-yi;Guo Zi-gang,Application of security techniques to electric energy metering and billing system in regional power network,Power System Technology,V 28,n 20,0ct.2004,P 72-5
[29]李辉.基于内存交换的网闸系统的研究与实现,江南大学学位论文,2005-1
[30]庞占洲,曹文亮,林永君.电厂监控信息系统的网络安全问题,电力安全技术,2006-01
[2]孙民爱,王婷,朱景军.DCS和FCS及其在火电厂中的应用[J],江西电力职业技术学院学报,2006-03.
[3]胡林峰,须文波.基于ARM的网络隔离器的设计[J],微计算机信息,2006.
[4]谢希仁.计算机网络(第4版)[M],电子工业出版社,2003-06:102-150.
[5]徐光辉等.基于FPGA的嵌入式开发与应用[M],电子工业出版社,2006-09:70-75.
[6]李洪伟,袁斯华.基于OuartusⅡ的FPGA/CPLD设计[M],电子工业出版社,2006-04:37-49.
[7]赵俊超.集成电路设计VHDL教程[M],电子工业出版社,2002:173-179.
[8]黄智伟等.FPGA系统设计与实践[M],电子工业出版社,2005-01:200-207.
[9]Michael D.Ciletti著,张雅绮,李铿等译.Verilog HDL高级数字综合[M],电子工业出版社,2005-01:455-460.
[10]吴继华,王诚编著.Altera FPGA/CPLD设计[M],人民邮电出版社,2005-07:151-160
[11]华亮,杨世锡.基于μC/OS-Ⅱ的嵌入式系统应用平台的构建[J],计算机工程,2004-08
[12]李正军.基于Nios软核CPU的μC/OS-Ⅱ和LwlP移植[J],遥测遥控,2006-03
[13]高枫,王玉松.基于Nios 1I自定制Avalon设备的设计与实现[J],中国测试技术,2007-07
[14]徐伟.基于SOPC技术的嵌入式网络研究及应用[J],系统平台与网络通信,2006-05
[15]杨清宇,施仁.基于因特网的工业控制网络体系结构研究[J],信息与控制,2000-10
[16]佘威.安全隔离系统中的隔离方案与实现[J],清华大学学位论文,2004-06:1-5
[17]李正茂.网络隔离理论与关键技术研究[J],同济大学学位论文,2006-03:18-19
[18]W.Richard Stevens.TCP/IP Illustracted Volume 1:The Protocols,Addison Wesley/Pearson,2000-4:33-80.
[19]Louis Baker.VHDL Programming with Advanced Topics,New York,1993.
[20]J.Armstrong Pretince Hall.Chip Level Modelling in VHDL,1988.
[21]Kinser,J.M.(Dept.of Phys,Alabama A&M Univ.,Normal,AL,USA),Object isolation using a pulse-coupled neural network,The International Society for Optical Engineering,v 2824,1996,70-76.
[22]Chen Youping(Sch.of Mech.Scl.&Eng.Huazhong Univ,of Sci& Technol.,China);Yin Yong;Li Fangmin;Zhou Zude Source,Design and realization of security physical isolation system,Journal of Southeast University(English Edition),v 21,n 1,March 2005,P 11-15
[23]Ahn,K.G.(Dept.of Mech.Eng.,UniV.of Sci.&Technol.of China,Pohan,China);Pahk,H.J.:Jung,M.Y.:Cho,D.W.A hybrid-type active vibration isolation system using neural networks,Journal of Sound and Vibration,v 192,n 4,16 May 1996,p 793-805
[24]Gao Xin-hua(Guangdong Provincial Electr.Power Test&Res.inst.,Guangzhou,China);Wang Wen;Ma Xiao Source,Security isolating device for power real-time network,Power System Technology,v 27,n 9,Sept.2003,P 69-72
[25]hou,Liang(School of Electrical Engineering,Wuhan University):Liu,Kai-Pei;Li.Jun-E.A comprehensive project to construct secure computer network for power system,Power System Technology,V28,n23,Dec 5,2004,P 71-75
[26]Oksavik,k(Appl.Phys.Lab.,Johns Hopkins Univ.,Laurel,MD,USA);Ruohoniemi,J.M;Greenwald,R.A.;Baker,J.B.H.;Moen,J.;Carlson,H.C.;Yeoman,T.K.;Lester,M.,Observation of isolated polar cap patches by the European Incohellent Scatter(EISCAT)Svalbard and Super Dual Auroral Radar Network(SuperDARN)Finland radars,Journal of Geophysical Research-Part A-Space PhysicS,V 111,n 45,1 May 2006,P 9 pp.
[27]Whelan,s.(Department of Engineering,University of Cambridge);Kelly,M.J,Vertical implant isotation in Gaps,Semiconductor Science and Technology,V 20,n 10,Oct 1,2005,P 1039-1043
[28]Liang Yun-hua(Sch.of Electr.Eng.,Wuhan Univ.,China);Tan Shun-tao;Zhang Ying;Xiong Xiao-guo;Liu Zheng-yi;Guo Zi-gang,Application of security techniques to electric energy metering and billing system in regional power network,Power System Technology,V 28,n 20,0ct.2004,P 72-5
[29]李辉.基于内存交换的网闸系统的研究与实现,江南大学学位论文,2005-1
[30]庞占洲,曹文亮,林永君.电厂监控信息系统的网络安全问题,电力安全技术,2006-01
© 2004-2018 中国地质图书馆版权所有 京ICP备05064691号 京公网安备11010802017129号 地址：北京市海淀区学院路29号 邮编：100083 电话：办公室：(+86 10)66554848；文献借阅、咨询服务、科技查新：66554700 |