论文标题
基于区块链的审计师在可重构平台中的秘密密钥生命周期
The Blockchain Based Auditor on Secret key Life Cycle in Reconfigurable Platform
论文作者
论文摘要
网络攻击的复杂性,高计算系统中的脆弱性以及对密码学的依赖性增加以保护我们的数字数据,这对于确保秘密密钥安全而变得更加重要。关于秘密钥匙的主要问题很少,例如不正确使用钥匙,不适当的钥匙存储,不充分保护钥匙,不安全的钥匙移动,缺乏审计记录,内部人员威胁和钥匙的不毁灭会危险地危害整个安全系统。在本文中,我们提出并实施了一个孤立的秘密钥匙内存,可以使用区块链(BC)技术在密钥上记录密钥的生命周期。我们还实施了一个特殊的自定义总线互连,该互连从处理元素(PE)接收自定义加密指令。在执行加密指令期间,该体系结构确保秘密密钥将永远不会出现在处理器区域,并且在由基于拟议的硬件的BC控制的适当身份验证过程后,将秘密密钥转移到各种加密核心。据我们所知,这是第一部使用基于区块链的解决方案来解决硬件平台中秘密密钥生命周期问题的工作。我们用于实施拟议想法的资源使用情况和定时复杂性的额外成本非常名义。我们使用了Xilinx Vivado EDA工具和Artix 7 FPGA板。
The growing sophistication of cyber attacks, vulnerabilities in high computing systems and increasing dependency on cryptography to protect our digital data make it more important to keep secret keys safe and secure. Few major issues on secret keys like incorrect use of keys, inappropriate storage of keys, inadequate protection of keys, insecure movement of keys, lack of audit logging, insider threats and non-destruction of keys can compromise the whole security system dangerously. In this article, we have proposed and implemented an isolated secret key memory which can log life cycle of secret keys cryptographically using blockchain (BC) technology. We have also implemented a special custom bus interconnect which receives custom crypto instruction from Processing Element (PE). During the execution of crypto instructions, the architecture assures that secret key will never come in the processor area and the movement of secret keys to various crypto core is recorded cryptographically after the proper authentication process controlled by proposed hardware based BC. To the best of our knowledge, this is the first work which uses blockchain based solution to address the issues of the life cycle of the secret keys in hardware platform. The additional cost of resource usage and timing complexity we spent to implement the proposed idea is very nominal. We have used Xilinx Vivado EDA tool and Artix 7 FPGA board.