CN103561041A - SSL new connection processing method and device - Google Patents

SSL new connection processing method and device Download PDF

Info

Publication number
CN103561041A
CN103561041A CN201310574743.5A CN201310574743A CN103561041A CN 103561041 A CN103561041 A CN 103561041A CN 201310574743 A CN201310574743 A CN 201310574743A CN 103561041 A CN103561041 A CN 103561041A
Authority
CN
China
Prior art keywords
high power
waiting task
ssl
newly
task
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201310574743.5A
Other languages
Chinese (zh)
Other versions
CN103561041B (en
Inventor
罗得安
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Sangfor Technologies Co Ltd
Original Assignee
Sangfor Network Technology Shenzhen Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Sangfor Network Technology Shenzhen Co Ltd filed Critical Sangfor Network Technology Shenzhen Co Ltd
Priority to CN201310574743.5A priority Critical patent/CN103561041B/en
Publication of CN103561041A publication Critical patent/CN103561041A/en
Application granted granted Critical
Publication of CN103561041B publication Critical patent/CN103561041B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Compression, Expansion, Code Conversion, And Decoders (AREA)
  • Storage Device Security (AREA)

Abstract

The invention discloses an SSL new connection processing method. The method comprises the steps of initially carrying out RSA calculation when a plurality of pieces of SSL new connection are established, recording high-power modulo data required by high-power modulo operation, encoding the high-power modulo data into tasks to be processed, dividing the encoded tasks to be processed into a plurality of processing batches, calling a high-power modulo operation device to process the tasks to be processed in batch, and calculating the high-power modulo data. The invention further discloses a corresponding SSL new connection processing device. The high-power modulo operation device is used for calculating the high-power modulo data, so that the operation load of a CPU is reduced, and performance of the SSL new connection is improved.

Description

The processing method of the newly-built connection of SSL and device
Technical field
The present invention relates to technical field of data processing, specially refer to processing method and the device of the newly-built connection of a kind of SSL.
Background technology
At SSL(Secure Sockets Layer, SSL) during newly-built connection, conventionally need to carry out the computing of RSA encryption and decryption, the amount of calculation of this RSA encryption and decryption computing is larger, and no matter is that software or hardware are realized, and arithmetic speed is the defect of RSA always.At present, the length of the RSA key of main flow is more and more longer, uses CPU to carry out computing and has been difficult to reach high performance requirement.Such as, the I72600 tetra-core eight thread CPU of main flow, the RSA of calculating 2048bit, its arithmetic speed approximately can reach more than 3,000 times per second, and for the RSA of 4096bit, arithmetic speed only can reach more than 500 times per second, thereby can not meet the high performance demands of the newly-built connection of SSL.
Summary of the invention
Main purpose of the present invention, for processing method and the device of the newly-built connection of a kind of SSL are provided, can effectively reduce the computational load of CPU, improves the performance of the newly-built connection of SSL.
The processing method that the invention provides the newly-built connection of a kind of SSL, comprises step:
When the newly-built connection of a plurality of SSL, tentatively carry out RSA calculating, record the required high power delivery data of high power modulo operation;
By described high power delivery data encoding, be waiting task, and the described waiting task after coding is divided into some processing batch;
Call high power modulo operation device by waiting task described in batch processed, described high power delivery data are calculated.
Preferably, described is waiting task by high power delivery data encoding, and the step that the described waiting task after coding is divided into some processing batch is specifically comprised:
Collect described high power delivery data, according to unified form, by described high power delivery data encoding, be waiting task, and store described waiting task;
According to the parameter of waiting task, according to preset scheduling strategy, described waiting task is divided into some processing batch.
Preferably, described according to the parameter of waiting task, the step that described waiting task is divided into some processing batch according to preset scheduling strategy specifically comprises:
According to the quantity of described waiting task and delay situation, the condition in batches that each is processed batch is set;
According to described condition in batches, the described waiting task of storage is carried out in batches, be divided into some processing batch.
Preferably, after the described step that records the required high power delivery data of high power modulo operation, also comprise step:
Hang up the newly-built connection of a plurality of described SSL.
Preferably, described, call high power modulo operation device by the pending described task of batch processed, after the step that described high power delivery data are calculated, also comprise:
Other data to the computing of RSA encryption and decryption are calculated.
The present invention also provides a kind of SSL processing unit of newly-built connection, comprising:
Data recordin module, for when the newly-built connection of a plurality of SSL, tentatively carries out RSA calculating, records the required high power delivery data of high power modulo operation;
Computing administration module, for being waiting task by described high power delivery data encoding, and is divided into some processing batch by the described waiting task after coding;
The first computing module, for calling high power modulo operation device by waiting task described in batch processed, calculates described high power delivery data.
Preferably, described computing administration module specifically comprises:
Task coding submodule, for collecting described high power delivery data, is waiting task according to unified form by described high power delivery data encoding, and stores described waiting task;
Task is submodule in batches, for according to the parameter of waiting task, according to preset scheduling strategy, described waiting task is divided into some processing batch.
Preferably, described task in batches submodule specifically comprise:
Condition setting unit, for according to the quantity of described waiting task and delay situation, arranges the condition in batches that each is processed batch;
Task is unit in batches, for according to described condition in batches, the described waiting task of storage being carried out in batches, is divided into some processing batch.
Preferably, the processing unit of the newly-built connection of SSL also comprises:
Hang up module, for hanging up the newly-built connection of a plurality of described SSL.
Preferably, the processing unit of the newly-built connection of SSL also comprises:
The second computing module, for calculating other data of RSA encryption and decryption computing.
The present invention, by when the newly-built connection of SSL, tentatively carries out RSA calculating, records the required high power delivery data of high power modulo operation, by high power delivery data encoding, is waiting task, and the waiting task after coding is divided into some processing batch; Call high power modulo operation device by batch processed waiting task, high power delivery data are calculated.Adopt high power modulo operation device to calculate high power delivery data, effectively reduce the computational load of CPU, thereby improved the performance of the newly-built connection of SSL.
Accompanying drawing explanation
Fig. 1 is the schematic flow sheet of processing method first embodiment of the newly-built connection of SSL of the present invention;
Fig. 2 be in the processing method of the newly-built connection of SSL of the present invention by the task after coding by the schematic flow sheet of batch classification;
Fig. 3 be in the processing method of the newly-built connection of SSL of the present invention by task by the schematic flow sheet that batch is divided into processing queue;
Fig. 4 is the schematic flow sheet of processing method second embodiment of the newly-built connection of SSL of the present invention;
Fig. 5 is the schematic flow sheet of processing method the 3rd embodiment of the newly-built connection of SSL of the present invention;
Fig. 6 is the structural representation of processing unit first embodiment of the newly-built connection of SSL of the present invention;
Fig. 7 is the structural representation of computing administration module of the processing unit of the newly-built connection of SSL of the present invention;
Fig. 8 is the task structural representation of submodule in batches of the processing unit of the newly-built connection of SSL of the present invention;
Fig. 9 is the structural representation of processing unit second embodiment of the newly-built connection of SSL of the present invention;
Figure 10 is the structural representation of processing unit the 3rd embodiment of the newly-built connection of SSL of the present invention.
The realization of the object of the invention, functional characteristics and advantage, in connection with embodiment, are described further with reference to accompanying drawing.
Embodiment
Should be appreciated that specific embodiment described herein, only in order to explain the present invention, is not intended to limit the present invention.
A kind of processing method of the newly-built connection of SSL providing is provided.Adopt high power modulo operation device to calculate the high power modulo operation in the computing of RSA encryption and decryption, and calculate other data of RSA computing by CPU or high power modulo operation device, thereby reduced the computational load of CPU.
With reference to Fig. 1, Fig. 1 is the schematic flow sheet of processing method first embodiment of the newly-built connection of SSL of the present invention.
The processing method of the newly-built connection of SSL that the present embodiment provides, comprising:
Step S10, when the newly-built connection of a plurality of SSL, tentatively carries out RSA calculating, records the required high power delivery data of high power modulo operation;
When carrying out the newly-built connection of a plurality of SSL, because operand is larger, use CPU to carry out computing and be difficult to reach high performance requirement, thereby, in the present embodiment, the high power modulo operation of the newly-built connection of a plurality of SSL is integrated into a collection of computing, after the logical process in early stage of the newly-built connection of a plurality of SSL completes, in the time of need to carrying out the computing of RSA encryption and decryption, first tentatively carry out RSA calculating, carry out following calculating: 1, according to binary value, convert data to be deciphered to large integer, this large integer is designated as to I; 2, calculate the value of I to p delivery, be designated as Ip, wherein p is first prime factor of PKI n; 3, calculate the value of I to q delivery, be designated as Iq, wherein q is second prime factor of PKI n.Large integer Ip and Iq are exactly the data that need to carry out high power modulo operation, in the process of calculating at preliminary RSA, record the newly-built required high power delivery data of high power modulo operation process that are connected to of a plurality of SSL, these high power delivery data are not calculated by CPU.
Step S20, is waiting task by high power delivery data encoding, and the waiting task after coding is divided into some processing batch;
Recorded after the required high power delivery data of all high power modulo operation processes, record after all large integer Ip and Iq, by these high power delivery data encodings, it is unified form, be about to it and be encoded to waiting task, then all waiting tasks that form after coding are divided into some processing batch, when carrying out high power modulo operation, the processing batch is in batches carried out to calculation process successively.Like this, all high power modulo operations all can be arranged in certain a collection of task.
Step S30, calls high power modulo operation device by the pending task of batch processed, and described high power delivery data are calculated.
When the pending task after coding is divided into after some processing batch, call high power modulo operation device, each is processed and batch is processed successively, recorded high power delivery data are calculated.In the present embodiment, high power modulo operation device can be graphic process unit GPU, or FPGA(Field-Programmable Gate Array, field programmable gate array), also can, for the special chip for the treatment of quantity computing in enormous quantities that can substitute GPU and FPGA of designed, designed, carry out the computing of high power delivery data.
The present embodiment, by when the newly-built connection of SSL, tentatively carries out RSA calculating, records the required high power delivery data of high power modulo operation, by high power delivery data encoding, is waiting task, and the waiting task after coding is divided into some processing batch; Call high power modulo operation device by batch processed waiting task, high power delivery data are calculated.Adopt high power modulo operation device to calculate high power delivery data, effectively reduce the computational load of CPU, thereby improved the performance of the newly-built connection of SSL.
With reference to Fig. 2, Fig. 2 be in the processing method of the newly-built connection of SSL of the present invention by the task after coding by the schematic flow sheet of batch classification.
In the above-described embodiments, step S20 specifically comprises:
Step S21, collects high power delivery data, is waiting task, and stores waiting task according to unified form by high power delivery data encoding;
Step S22, according to the parameter of waiting task, is divided into some processing batch according to preset scheduling strategy by waiting task.
After having recorded the required high power delivery data of all high power modulo operation processes, collect the high power delivery data that record, and encode according to unified form, being about to high power delivery data encoding is waiting task, and adopts queue, chained list or all waiting tasks of other data structure storage.Then, according to the parameter of waiting task, according to preset scheduling strategy, all tasks are divided into some processing batch, to call high power modulo operation device by batch high power delivery data of calculating.In the present embodiment, the parameter of waiting task, refers to the quantity of waiting task, and postpones the parameters such as threshold value; Preset scheduling strategy refers to for stored waiting task being divided into the condition in batches of some batches.
Please with reference to Fig. 3, Fig. 3 be in the processing method of the newly-built connection of SSL of the present invention by task by the schematic flow sheet that batch is divided into processing queue.
In the present embodiment, step S22 further comprises:
Step S221, according to the quantity of waiting task and delay situation, arranges the condition in batches that each is processed batch;
Step S222, carries out the waiting task of storage in batches according to condition in batches, is divided into some processing batch.
When waiting task being divided into some processing batch, first according to the quantity of waiting task and delay situation, according to the quantity of the waiting task of storage, and the delay situation of each waiting task, the condition in batches that each is processed batch is set, then, according to condition in batches, all waiting tasks are divided into the processing batch of respective numbers.
In the present embodiment, enumerate the setting of following several conditions in batches, and according to condition in batches, waiting task carried out to method in batches:
1, setting each processing batch task amount threshold is n, when the quantity of stored waiting task is more than or equal to n, these waiting tasks are divided into same processing batch, carry out high power modulo operation, and the record of the waiting task of storage is emptied, to continue to collect waiting task.
2, setting waiting task stand-by period upper limit threshold is t, when the stand-by period of the waiting task of oldest stored has surpassed t millisecond, all waiting tasks of storage are before divided into same processing batch, carry out high power modulo operation, and the record of the waiting task of storage is emptied, to continue to collect waiting task.
3, setting each waiting task amount threshold of processing batch is n, also sets and on the stand-by period, is limited to t simultaneously.When surpassing, the quantity of the waiting task of storage is more than or equal to n, or the stand-by period of the waiting task of oldest stored is while having surpassed t millisecond, all waiting tasks of storage are before divided into same processing batch, carry out high power modulo operation, and the record of the waiting task of storage is emptied, to continue to collect waiting task.
4, simultaneously with reference to quantity and the stand-by period of waiting task, set the waiting task quantity weights W n that each is processed batch, also set stand-by period weight is Wt simultaneously, sets total points threshold value S.When storage waiting task quantity * Wn+ stand-by period * Wt>S time, all waiting tasks of storage are divided into same processing batch, carry out high power modulo operation, and the record of the waiting task of storage is emptied, to continue to collect waiting task.
5, when each high power modulo operation starts, report that computing starts, when computing completes, report that computing stops.If exist at least one waiting task etc. pending in queue, now do not carrying out high power modulo operation simultaneously, at once all waiting tasks of storage are divided into same processing batch, carry out high power modulo operation, and the record of the waiting task of storage is emptied, to continue to collect waiting task.
6, record each waiting task stand-by period t1, t2 ... tn.Preset a function of many variables f (t1, t2...tn) as scheduling function, if a certain moment f (t1, t2...tn) >0, makes k=f (t1, t2...tn), the k of an oldest stored waiting task is divided into same processing batch, carry out high power modulo operation, and by the record purge of the k a having dispatched waiting task, to continue to collect waiting task.On this basis, also can consider that network is at that time handled up, the parameters such as heating situation of system power dissipation, high power modulo operation device, design more complicated scheduling function and dispatch.
After having recorded the required high power delivery data of all high power modulo operation processes, collect high power delivery data, according to unified form, by high power delivery data encoding, be waiting task; According to the quantity of waiting task and delay situation, the condition in batches that each is processed batch is set, and according to condition in batches, the waiting task of storage is carried out in batches, be divided into some processing batch, thereby improved the operational performance of high power modulo operation device, and further improved the performance of the newly-built connection of SSL.
With reference to Fig. 4, Fig. 4 is the schematic flow sheet of processing method second embodiment of the newly-built connection of SSL of the present invention.
On the basis of processing method first embodiment of the newly-built connection of the invention described above SSL, after execution step S10, the method also comprises:
Step S40, hangs up the newly-built connection of a plurality of SSL.
In the present embodiment, tentatively carrying out RSA calculating, and after having recorded the required high power delivery data of high power modulo operation, the newly-built connection of SSL is hung up, to wait for that high power modulo operation completes, after high power modulo operation completes, continue the process of the newly-built connection of SSL.
With reference to Fig. 5, Fig. 5 is the schematic flow sheet of processing method the 3rd embodiment of the newly-built connection of SSL of the present invention.
On the basis of processing method first embodiment of the newly-built connection of the invention described above SSL, after execution step S30, the method also comprises:
Step S50, calculates other data of RSA encryption and decryption computing.
After high power modulo operation completes, continue the process of the newly-built connection of SSL, other data of RSA encryption and decryption computing to be calculated, thereby completed the newly-built connection of SSL, this part is calculated and can be calculated by CPU, also can calculate by high power modulo operation device.Complete following steps: by the results conversion of high power delivery, be 1, two large integers, be designated as Rp and Rq, represent respectively the value of decrypted result mould p and mould q, wherein p and q are two prime factors of PKI n; 2, use Chinese remainder theorem, by Rp and Rq, calculate the value of final result mould n; 3, result is decoded and effect, the data stuffing mode that decoding is selected with SSL with the algorithm of effect is relevant.Like this, just realized in the newly-built connection procedure of SSL, by high power modulo operation device, completed high power modulo operation, and after high power modulo operation completes, by CPU or high power modulo operation device, completed the calculating to other data of RSA encryption and decryption computing.
The present invention also provides a kind of SSL processing unit of newly-built connection.
With reference to Fig. 6, Fig. 6 is the structural representation of processing unit first embodiment of the newly-built connection of SSL of the present invention.
The processing unit of the newly-built connection of SSL that the present embodiment provides, comprising:
Data recordin module 10, for when the newly-built connection of a plurality of SSL, tentatively carries out RSA calculating, records the required high power delivery data of high power modulo operation;
Computing administration module 20, for being waiting task by high power delivery data encoding, and is divided into some processing batch by the waiting task after coding;
The first computing module 30, for calling high power modulo operation device by batch processed waiting task, calculates high power delivery data.
When carrying out the newly-built connection of a plurality of SSL, because operand is larger, use CPU to carry out computing and be difficult to reach high performance requirement, thereby, in the present embodiment, the high power modulo operation of the newly-built connection of a plurality of SSL is integrated into a collection of computing, after the logical process in early stage of the newly-built connection of a plurality of SSL completes, in the time of need to carrying out the computing of RSA encryption and decryption, first tentatively carry out RSA calculating, carry out following calculating: 1, according to binary value, convert data to be deciphered to large integer, this large integer is designated as to I; 2, calculate the value of I to p delivery, be designated as Ip, wherein p is first prime factor of PKI n; 3, calculate the value of I to q delivery, be designated as Iq, wherein q is second prime factor of PKI n.Large integer Ip and Iq are exactly the data that need to carry out high power modulo operation, in the process of calculating at preliminary RSA, data recordin module 10 is recorded the newly-built required high power delivery data of high power modulo operation process that are connected to of a plurality of SSL, and these high power delivery data are not calculated by CPU.
Recorded after the required high power delivery data of all high power modulo operation processes, record after all large integer Ip and Iq, computing administration module 20 is unified form by these high power delivery data encodings, be about to it and be encoded to waiting task, then all waiting tasks that form after coding are divided into some processing batch, when carrying out high power modulo operation, the processing batch is in batches carried out to calculation process successively.Like this, all high power modulo operations all can be arranged in certain a collection of task.
When the pending task after coding is divided into after some processing batch, the first computing module 30 calls high power modulo operation device, and each is processed and batch is processed successively, recorded high power delivery data is calculated.In the present embodiment, high power modulo operation device can be graphic process unit GPU, or FPGA(Field-Programmable Gate Array, field programmable gate array), also can, for the special chip for the treatment of quantity computing in enormous quantities that can substitute GPU and FPGA of designed, designed, carry out the computing of high power delivery data.
The present embodiment, by when the newly-built connection of SSL, tentatively carries out RSA calculating, records the required high power delivery data of high power modulo operation, by high power delivery data encoding, is waiting task, and the waiting task after coding is divided into some processing batch; Call high power modulo operation device by batch processed waiting task, high power delivery data are calculated.Adopt high power modulo operation device to calculate high power delivery data, effectively reduce the computational load of CPU, thereby improved the performance of the newly-built connection of SSL.
With reference to Fig. 7, Fig. 7 is the structural representation of computing administration module of the processing unit of the newly-built connection of SSL of the present invention.
In upper embodiment, computing administration module 20 specifically comprises:
Task coding submodule 21, for collecting high power delivery data, is waiting task according to unified form by high power delivery data encoding, and stores waiting task;
Task is submodule 22 in batches, for according to the parameter of waiting task, according to preset scheduling strategy, waiting task is divided into some processing batch.
After having recorded the required high power delivery data of all high power modulo operation processes, task coding submodule 21 is collected the high power delivery data that record, and encode according to unified form, being about to high power delivery data encoding is waiting task, and adopts queue, chained list or all waiting tasks of other data structure storage.Then, task in batches submodule 22, according to the parameter of waiting task, according to preset scheduling strategy, is divided into some processing batch by all tasks, to call high power modulo operation device by batch high power delivery data of calculating.In the present embodiment, the parameter of waiting task, refers to the quantity of waiting task, and postpones the parameters such as threshold value; Preset scheduling strategy refers to for stored waiting task being divided into the condition in batches of some batches.
Please with reference to Fig. 8, Fig. 8 is the task structural representation of submodule in batches of the processing unit of the newly-built connection of SSL of the present invention.
In the present embodiment, task in batches submodule 22 further comprise:
Condition setting unit 221, for according to the quantity of waiting task and delay situation, arranges the condition in batches that each is processed batch;
Task is unit 222 in batches, for according to condition in batches, the waiting task of storage being carried out in batches, is divided into some processing batch.
When waiting task being divided into some processing batch, condition setting unit 221 is first according to the quantity of waiting task and delay situation, according to the quantity of the waiting task of storage, and the delay situation of each waiting task, the condition in batches that each is processed batch is set, then, task unit 222 is divided into all waiting tasks the processing batch of respective numbers according to condition in batches in batches.
In the present embodiment, enumerate the setting of following several conditions in batches, and according to condition in batches, waiting task carried out to method in batches:
1, setting each processing batch task amount threshold is n, when the quantity of stored waiting task is more than or equal to n, these waiting tasks are divided into same processing batch, carry out high power modulo operation, and the record of the waiting task of storage is emptied, to continue to collect waiting task.
2, setting waiting task stand-by period upper limit threshold is t, when the stand-by period of the waiting task of oldest stored has surpassed t millisecond, all waiting tasks of storage are before divided into same processing batch, carry out high power modulo operation, and the record of the waiting task of storage is emptied, to continue to collect waiting task.
3, setting each waiting task amount threshold of processing batch is n, also sets and on the stand-by period, is limited to t simultaneously.When surpassing, the quantity of the waiting task of storage is more than or equal to n, or the stand-by period of the waiting task of oldest stored is while having surpassed t millisecond, all waiting tasks of storage are before divided into same processing batch, carry out high power modulo operation, and the record of the waiting task of storage is emptied, to continue to collect waiting task.
4, simultaneously with reference to quantity and the stand-by period of waiting task, set the waiting task quantity weights W n that each is processed batch, also set stand-by period weight is Wt simultaneously, sets total points threshold value S.When storage waiting task quantity * Wn+ stand-by period * Wt>S time, all waiting tasks of storage are divided into same processing batch, carry out high power modulo operation, and the record of the waiting task of storage is emptied, to continue to collect waiting task.
5, when each high power modulo operation starts, report that computing starts, when computing completes, report that computing stops.If exist at least one waiting task etc. pending in queue, now do not carrying out high power modulo operation simultaneously, at once all waiting tasks of storage are divided into same processing batch, carry out high power modulo operation, and the record of the waiting task of storage is emptied, to continue to collect waiting task.
6, record each waiting task stand-by period t1, t2 ... tn.Preset a function of many variables f (t1, t2...tn) as scheduling function, if a certain moment f (t1, t2...tn) >0, makes k=f (t1, t2...tn), the k of an oldest stored waiting task is divided into same processing batch, carry out high power modulo operation, and by the record purge of the k a having dispatched waiting task, to continue to collect waiting task.On this basis, also can consider that network is at that time handled up, the parameters such as heating situation of system power dissipation, high power modulo operation device, design more complicated scheduling function and dispatch.
After having recorded the required high power delivery data of all high power modulo operation processes, collect high power delivery data, according to unified form, by high power delivery data encoding, be waiting task; According to the quantity of waiting task and delay situation, the condition in batches that each is processed batch is set, and according to condition in batches, the waiting task of storage is carried out in batches, be divided into some processing batch, thereby improved the operational performance of high power modulo operation device, and further improved the performance of the newly-built connection of SSL.
With reference to Fig. 9, Fig. 9 is the structural representation of processing unit second embodiment of the newly-built connection of SSL of the present invention.
On the basis of processing unit first embodiment of the newly-built connection of SSL of the present invention, this device also comprises:
Hang up module 40, for hanging up the newly-built connection of a plurality of SSL.
In the present embodiment, tentatively carrying out RSA calculating, and after having recorded the required high power delivery data of high power modulo operation, hanging up module 40 hangs up the newly-built connection of SSL, to wait for that high power modulo operation completes, after high power modulo operation completes, continue the process of the newly-built connection of SSL.
With reference to Figure 10, Figure 10 is the structural representation of processing unit the 3rd embodiment of the newly-built connection of SSL of the present invention.
On the basis of processing unit first embodiment of the newly-built connection of SSL of the present invention, this device also comprises:
The second computing module 50, for calculating other data of RSA encryption and decryption computing.
After high power modulo operation completes, the process that continues the newly-built connection of SSL, other data of 50 pairs of RSA encryption and decryption of the second computing module computing are calculated, thereby complete the newly-built connection of SSL, this part is calculated and can be calculated by CPU, also can calculate by high power modulo operation device.Complete following steps: by the results conversion of high power delivery, be 1, two large integers, be designated as Rp and Rq, represent respectively the value of decrypted result mould p and mould q, wherein p and q are two prime factors of PKI n; 2, use Chinese remainder theorem, by Rp and Rq, calculate the value of final result mould n; 3, result is decoded and effect, the data stuffing mode that decoding is selected with SSL with the algorithm of effect is relevant.Like this, just realized in the newly-built connection procedure of SSL, by high power modulo operation device etc., completed high power modulo operation, and after high power modulo operation completes, by CPU or high power modulo operation device, complete the calculating to other data of RSA encryption and decryption computing.
The foregoing is only the preferred embodiments of the present invention; not thereby limit the scope of the claims of the present invention; every equivalent structure or conversion of equivalent flow process that utilizes specification of the present invention and accompanying drawing content to do; or be directly or indirectly used in other relevant technical fields, be all in like manner included in scope of patent protection of the present invention.

Claims (10)

1. a processing method for the newly-built connection of SSL, is characterized in that, comprises step:
When the newly-built connection of a plurality of SSL, tentatively carry out RSA calculating, record the required high power delivery data of high power modulo operation;
By described high power delivery data encoding, be waiting task, and the described waiting task after coding is divided into some processing batch;
Call high power modulo operation device by waiting task described in batch processed, described high power delivery data are calculated.
2. the processing method of the newly-built connection of SSL according to claim 1, is characterized in that, described is waiting task by high power delivery data encoding, and the step that the described waiting task after coding is divided into some processing batch is specifically comprised:
Collect described high power delivery data, according to unified form, by described high power delivery data encoding, be waiting task, and store described waiting task;
According to the parameter of waiting task, according to preset scheduling strategy, described waiting task is divided into some processing batch.
3. the processing method of the newly-built connection of SSL according to claim 2, is characterized in that, described according to the parameter of waiting task, and the step that described waiting task is divided into some processing batch according to preset scheduling strategy specifically comprises:
According to the quantity of described waiting task and delay situation, the condition in batches that each is processed batch is set;
According to described condition in batches, the described waiting task of storage is carried out in batches, be divided into some processing batch.
4. according to the processing method of the newly-built connection of SSL described in any one in claims 1 to 3, it is characterized in that, after the described step that records the required high power delivery data of high power modulo operation, also comprise step:
Hang up the newly-built connection of a plurality of described SSL.
5. according to the processing method of the newly-built connection of SSL described in any one in claims 1 to 3, it is characterized in that, described, call high power modulo operation device by waiting task described in batch processed, after the step that described high power delivery data are calculated, also comprise:
Other data to the computing of RSA encryption and decryption are calculated.
6. a processing unit for the newly-built connection of SSL, is characterized in that, comprising:
Data recordin module, for when the newly-built connection of a plurality of SSL, tentatively carries out RSA calculating, records the required high power delivery data of high power modulo operation;
Computing administration module, for being waiting task by described high power delivery data encoding, and is divided into some processing batch by the described waiting task after coding;
The first computing module, for calling high power modulo operation device by waiting task described in batch processed, calculates described high power delivery data.
7. the processing unit of the newly-built connection of SSL according to claim 6, is characterized in that, described computing administration module specifically comprises:
Task coding submodule, for collecting described high power delivery data, is waiting task according to unified form by described high power delivery data encoding, and stores described waiting task;
Task is submodule in batches, for according to the parameter of waiting task, according to preset scheduling strategy, described waiting task is divided into some processing batch.
8. the processing unit of the newly-built connection of SSL according to claim 7, is characterized in that, described task in batches submodule specifically comprises:
Condition setting unit, for according to the quantity of described waiting task and delay situation, arranges the condition in batches that each is processed batch;
Task is unit in batches, for according to described condition in batches, the described waiting task of storage being carried out in batches, is divided into some processing batch.
9. according to the processing unit of the newly-built connection of SSL described in any one in claim 6 to 8, it is characterized in that, also comprise:
Hang up module, for hanging up the newly-built connection of a plurality of described SSL.
10. according to the processing unit of the newly-built connection of SSL described in any one in claim 6 to 8, it is characterized in that, also comprise:
The second computing module, for calculating other data of RSA encryption and decryption computing.
CN201310574743.5A 2013-11-15 2013-11-15 The treating method and apparatus of the newly-built connections of SSL Active CN103561041B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201310574743.5A CN103561041B (en) 2013-11-15 2013-11-15 The treating method and apparatus of the newly-built connections of SSL

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201310574743.5A CN103561041B (en) 2013-11-15 2013-11-15 The treating method and apparatus of the newly-built connections of SSL

Publications (2)

Publication Number Publication Date
CN103561041A true CN103561041A (en) 2014-02-05
CN103561041B CN103561041B (en) 2017-05-31

Family

ID=50015191

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201310574743.5A Active CN103561041B (en) 2013-11-15 2013-11-15 The treating method and apparatus of the newly-built connections of SSL

Country Status (1)

Country Link
CN (1) CN103561041B (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109389286A (en) * 2018-09-03 2019-02-26 阿里巴巴集团控股有限公司 A kind of business processing, scheduling, batch processes, device, equipment and medium

Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1673917A (en) * 2004-12-01 2005-09-28 上海宝信软件股份有限公司 Control method based on task queue
CN101273885A (en) * 2007-03-26 2008-10-01 深圳迈瑞生物医疗电子股份有限公司 Method and system of monitor screen remote indication
CN101599828A (en) * 2009-06-17 2009-12-09 刘霁中 A kind of encipher-decipher method of RSA efficiently and coprocessor thereof
CN102118261A (en) * 2009-12-30 2011-07-06 中兴通讯股份有限公司 Method and device for data acquisition, and network management equipment
CN102253821A (en) * 2011-04-12 2011-11-23 深圳市蓝韵实业有限公司 Data transmission processing method in ultrasonic diagnostic equipment
CN102299843A (en) * 2011-06-28 2011-12-28 北京安天电子设备有限公司 Network data processing method based on graphic processing unit (GPU) and buffer area, and system thereof
CN102637214A (en) * 2012-04-28 2012-08-15 中国工商银行股份有限公司 Method and system for synchronizing general data among database services
CN102707924A (en) * 2012-05-02 2012-10-03 广州中大微电子有限公司 RSA coprocessor for RFID (radio frequency identification device) intelligent card chip
CN102905311A (en) * 2012-09-29 2013-01-30 北京傲天动联技术有限公司 Data-message aggregating device and method
CN103107879A (en) * 2012-12-21 2013-05-15 杭州晟元芯片技术有限公司 RAS accelerator

Patent Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1673917A (en) * 2004-12-01 2005-09-28 上海宝信软件股份有限公司 Control method based on task queue
CN101273885A (en) * 2007-03-26 2008-10-01 深圳迈瑞生物医疗电子股份有限公司 Method and system of monitor screen remote indication
CN101599828A (en) * 2009-06-17 2009-12-09 刘霁中 A kind of encipher-decipher method of RSA efficiently and coprocessor thereof
CN102118261A (en) * 2009-12-30 2011-07-06 中兴通讯股份有限公司 Method and device for data acquisition, and network management equipment
CN102253821A (en) * 2011-04-12 2011-11-23 深圳市蓝韵实业有限公司 Data transmission processing method in ultrasonic diagnostic equipment
CN102299843A (en) * 2011-06-28 2011-12-28 北京安天电子设备有限公司 Network data processing method based on graphic processing unit (GPU) and buffer area, and system thereof
CN102637214A (en) * 2012-04-28 2012-08-15 中国工商银行股份有限公司 Method and system for synchronizing general data among database services
CN102707924A (en) * 2012-05-02 2012-10-03 广州中大微电子有限公司 RSA coprocessor for RFID (radio frequency identification device) intelligent card chip
CN102905311A (en) * 2012-09-29 2013-01-30 北京傲天动联技术有限公司 Data-message aggregating device and method
CN103107879A (en) * 2012-12-21 2013-05-15 杭州晟元芯片技术有限公司 RAS accelerator

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
叶剑: "基于GPU的密码算法实现技术研究", 《中国优秀硕士学位论文全文数据库 信息科技辑 》 *
秦维佳: "《大学计算机基础教程》", 31 August 2007 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109389286A (en) * 2018-09-03 2019-02-26 阿里巴巴集团控股有限公司 A kind of business processing, scheduling, batch processes, device, equipment and medium
CN109389286B (en) * 2018-09-03 2022-11-18 阿里巴巴集团控股有限公司 Business processing, scheduling and batching method, device, equipment and medium

Also Published As

Publication number Publication date
CN103561041B (en) 2017-05-31

Similar Documents

Publication Publication Date Title
CN102970244B (en) A kind of network message processing method of multi -CPU inter-core load equilibrium
CN108021487B (en) GPU (graphics processing Unit) graphic processing performance monitoring and analyzing method
CN106682004A (en) Redis Key management method and system
CN101854353A (en) Multi-chip parallel encryption method based on FPGA
CN106453832B (en) A kind of report method falling data, device and mobile terminal
CN109445955A (en) A kind of method of counting and number system
CN109343972B (en) Task processing method and terminal equipment
CN103685890A (en) Intelligent camera with dynamic reconfiguration image processing function and dynamic reconfiguration method thereof
WO2019061647A1 (en) Queue message processing method and device, terminal device and medium
US10452402B2 (en) Operation instruction response control method and terminal for human-machine interface
CN108519919A (en) A method of realizing server resource dynamic dispatching under virtual cluster environment
CN109167979B (en) Processing method and system for artificial intelligence analysis of multi-path monitoring videos
WO2012100545A1 (en) Method, system and device for service scheduling
CN103561041A (en) SSL new connection processing method and device
CN107977232A (en) A kind of data processing method, data processing circuit and the network equipment
CN112214299B (en) Multi-core processor and task scheduling method and device thereof
CN110505655A (en) Data command processing method, storage medium and bluetooth shield
CN116627615A (en) Task processing method and device, electronic equipment and storage medium
CN102651140A (en) Method and device for image rendering
CN102821423B (en) Message method of reseptance and device
EP4163795A1 (en) Techniques for core-specific metrics collection
CN102929714A (en) uC/OS-II-based hardware task manager
CN1825288A (en) Method for implementing process multi-queue dispatching of embedded SRAM operating system
CN108984121B (en) Method and device for guaranteeing request priority and computer equipment
CN116009985A (en) Interface calling method, device, computer equipment and storage medium

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant
TR01 Transfer of patent right

Effective date of registration: 20200616

Address after: Nanshan District Xueyuan Road in Shenzhen city of Guangdong province 518000 No. 1001 Nanshan Chi Park building A1 layer

Patentee after: SANGFOR TECHNOLOGIES Inc.

Address before: 518000 Nanshan Science and Technology Pioneering service center, No. 1 Qilin Road, Guangdong, Shenzhen 418, 419,

Patentee before: Shenxin network technology (Shenzhen) Co.,Ltd.

TR01 Transfer of patent right