集成硬件加密的加密固态盘的设计与实现

Design and Implementation of Encrypted Solid State Disk Integrated with Hardware Encryption

为了使NAND Flash固态盘的数据在存取过程中被透明加解密且提高整个安全存储系统的集成度,在分析固态盘体系结构的基础上,提出了在固态盘内部集成硬件加密功能的方法,并给出了加密固态盘的设计方案;利用FPGA设计实现了嵌入到固态盘内的硬件加密模块,并结合通用的ATA Flash盘控制器和NAND Flash芯片实现了完整的加密固态盘;实验结果表明,该加密固态盘实现了全盘数据加密,而且由于加密模块全硬件实现,加解密速度快且不占用系统资源,增加加密模块后不影响固态盘的性能。

To transparently encrypt the data stored in solid state disk （SSD） and enhance the integration of the whole secure storage system, a method to integrate hardware encryption function into SSD was proposed after analyzing the architecture of SSD. The scheme of encrypted SSD was also given. Then, the hardware encryption module （HEM） to be embedded into the SSD was designed and implemented based on FPGA. Finally, the encrypted SSD was implemented with the HEM, common ATA flash disk controller and NAND flash chips. The testing and experimantal results show that the encrypted SSD can encrypt all the data stored in it and the integration of the encryption function doesn＇t lead to decrease of performance due to hardware implementation, high speed and no use of system resources of HEM.