权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

Firewall Processor based on Self-Timed Pipeline Circuit

基于自定时流水线电路的防火墙处理器

基本信息

批准号：
17500052
负责人：
IWATA Makoto
金额：
$ 2.05万
依托单位：
Kochi University of Technology
依托单位国家：
日本
项目类别：
Grant-in-Aid for Scientific Research (C)
财政年份：
2005
资助国家：
日本
起止时间：
2005 至 2006
项目状态：
已结题

项目摘要

This research project aimed at establishing a flexible embedded firewall processor realized by the self-timed pipeline circuit because the self-timed circuit provides smart advantages such as easy-to-design, low power, and parallel processing capabilities. Recently, personal firewall as well as network firewall is demanded along with widespread of personal mobile devices such as mobile phone and PDA. However, since most of personal firewall is realized by software, it will not work at all if its operating system is infected by some virus. The embedded firewall processor developed in this project is independent of the OS so that it is robust against malicious attacks.1. Basic architecture of embedded firewall processorIn order to achieve high performance, it is essential to represent pipelined parallelism inherent in various filtering algorithms in layer 3 to 7. We therefore focused on the non-strictness of the filtering process and hierarchical structure of stream data and then formulated a novel stream flow graph (SFG) which can express them explicitly. Furthermore, we proposed a novel stream-driven multiprocessor architecture based on the dynamic data-driven processing scheme in order to execute SFG descriptions directly in parallel.2. LSI design of dedicated self-timed hardware modulesWe designed a signature matching engine realizing a hybrid algorithm of both AC-Fail and AC-Opt algorithms to inspect content of higher layer packets for HTTP and SMTP. Its FPGA implementation achieved over 2.3 G b/s with only 180 MB memory requirement. Furthermore, we design a more advanced self-timed data-transfer control circuit which enable to interact between two pipelines each other. It is revealed that this circuit transfers data over 400 M packets per second under 0.18 um CMOS.

本研究项目旨在建立一种灵活的嵌入式防火墙处理器，采用自定时流水线电路实现，因为自定时电路具有设计简单、功耗低、并行处理能力强等优点。近年来，随着手机、PDA等个人移动设备的普及，对个人防火墙和网络防火墙的需求也越来越大。然而，由于大多数个人防火墙都是由软件实现的，如果其操作系统受到某种病毒的感染，它将根本无法工作。本项目开发的嵌入式防火墙处理器独立于操作系统，对恶意攻击具有较强的健壮性。嵌入式防火墙处理器的基本体系结构为了获得高性能，必须在第三层到第七层表示各种过滤算法所固有的流水线并行性。为此，我们重点研究了过滤过程的非严格性和流数据的层次结构，并在此基础上提出了一种新的流流图(SFG)来显式地表示它们。此外，为了直接并行执行SFG描述，提出了一种基于动态数据驱动处理机制的流驱动多处理器体系结构。专用自定时硬件模块的LSI设计我们设计了一个签名匹配引擎，实现了AC-FAIL和AC-OPT算法的混合算法，用于检测HTTP和SMTP高层报文的内容。它的FPGA实现达到了2.3Gb/S以上，只需要180MB的内存。此外，我们还设计了一种更先进的自定时数据传输控制电路，使两条流水线之间能够进行交互。结果表明，该电路在0.18微米的CMOS线上传输数据的速度超过400M包/秒。

项目成果

期刊论文数量（24）

专著数量（0）

科研奖励数量（0）

会议论文数量（0）

专利数量（0）

An On-Chip Macro-Simulation Mechanism of Self-Timed Pipelined Systems

自定时流水线系统片上宏观仿真机制

DOI：
发表时间：
2006
期刊：
International Conference on Next Era Information Networking NEINE' 06
影响因子：
0
作者：
T.Okamoto;T.Boku;M.Sato;O.Tatebe;Shuji SANNOMIYA
通讯作者：
Shuji SANNOMIYA

Self-Timed Stream Processor for Surrounding Computing Environment

适用于周边计算环境的自定时流处理器

DOI：
发表时间：
2007
期刊：
2007 International Conference on Parallel and Distributed Processing Techniques and Applications (to be published)
影响因子：
0
作者：
Xingwen XU;Shinji KIMURA;kazunari Horikawa;Takehiko TSUCHIYA;Makoto IWATA
通讯作者：
Makoto IWATA

Architecture of Embedded Data-Driven Personal Gateway Processor

嵌入式数据驱动个人网关处理器的架构

DOI：
发表时间：
2005
期刊：
International Conference on Next Era Information Networking NEINE' 05
影响因子：
0
作者：
Xingwen Xu;Shinji Kimura;Kazunari Horikawa;Takehiko Tsuchiya;K.Komatsu;Daichi MORIKAWA
通讯作者：
Daichi MORIKAWA

Stream-Oriented Parallel Implementation of Primitive Image Processing

原始图像处理的面向流的并行实现

DOI：
发表时间：
2006
期刊：
International Conference on Next Era Information Networking
影响因子：
0
作者：
T.Boku;M.Sato;D.Takahashi;H.Nakashima;H.Nakamura;S.Matsuoka;Y.Hotta;S.Tuneishi
通讯作者：
S.Tuneishi

Systematic Design of Basic Self-Timed Pipeline Circuit Modules

基本自定时流水线电路模块的系统设计