CN100481760C - Check value operation system and operation method of network packet - Google Patents

Abstract

The invention relates to a check value operation system of network packets, which uses a check value operation module composed of hardware devices to perform check value operation on transmission network packets or reception network packets in a computer system, and the computer system independently performs check value operation by the check value operation module; when the network packet is transmitted, the check value operation module also operates the transmission network packet according to a specific calculation rule so as to generate a first check value corresponding to the transmission network packet; and when the network packet is received, the check value operation module also operates the received network packet according to the specific calculation rule to generate a second check value corresponding to the received network packet, and compares the first check value with the second check value to generate a comparison result for processing the received network packet. The invention can reduce the workload of the central processing unit, relatively accelerate the network packet processing speed, increase the network flow in unit time and further achieve the purpose of improving the network transmission quality.

Description

A network packet check value calculation system and its calculation method

technical field

The invention relates to a checksum calculation system, in particular to a hardware device to calculate a network packet checksum (Checksum) calculation system and a calculation method thereof.

Background technique

With the advent of the Internet era, users can obtain the required information through the network. In order to confirm whether the data is damaged or lost during the network transmission, factors that change the content of the original data occur, the Checksum mechanism It is a commonly used verification method for network packet data transmission at present.

In order to ensure the integrity of the network packet data during transmission, it is necessary to calculate the check value of the corresponding network packet data before transmission, and fill in a specific position in the network packet to transmit the network packet, and the receiving end receives the network packet After packaging, first obtain the check value in the network packet, and perform the same operation on the network packet data again to obtain its corresponding check value, and then compare whether the two check values are the same to determine whether the network packet data is Complete, and the above process is only the basic principle of using the check value to verify the network packet data. In many existing network communication protocols (TCP/IP), the number of comparisons of the check value may need more than several times. For example, the TCP layer needs Once calculated, the IP layer also needs to be calculated again, etc., and these calculations and comparisons are performed by the central processing unit in the computer system to perform related calculations and comparisons, so a large amount of central processing unit resources are consumed. The processor is the core module in the computer system, if it occupies too many system resources, the efficiency of the computer system will be reduced.

Therefore, how to provide a network packet check value calculation system to speed up the network packet processing speed and relatively reduce the burden on the central processing unit has become one of the problems to be solved by researchers.

Contents of the invention

The technical problem to be solved by the present invention is to provide a network packet check value calculation system and its calculation method, through which the check value calculation module performs check value calculations on network packets, and compares whether the check value changes during transmission , and the central processing unit only needs to decide whether to continue to perform subsequent processing on the received network packet according to the calculation and comparison results, which greatly reduces the burden on the central processing unit, thereby achieving the purpose of accelerating the processing speed of the network packet.

In order to achieve the above object, the present invention provides a check value calculation system for network packets, in which a check value calculation module composed of a hardware device is used to check a transmission network packet or a reception network packet in a computer system Value calculation, which is characterized in that the computer system independently performs the check value calculation by the check value calculation module; wherein, when the network packet is transmitted, the check value calculation module also calculates the transmitted value according to a check value calculation rule network packet to generate a first check value corresponding to the transmitted network packet; and wherein, when the network packet is received, the check value calculation module also operates the received network packet according to the check value calculation rule to generate the corresponding The second check value of the received network packet is received, and the first check value is compared with the second check value to generate a comparison result for processing the received network packet.

The above check value calculation system is characterized in that the check value calculation module also includes: a first check value calculation unit, which calculates the transmission network packet through the check value calculation rule to generate the corresponding transmission network packet The first check value of the data block; a check value adding unit, which adds the first check value to the transmission network packet; a second check value calculation unit, which calculates the received check value through the check value calculation rule Network packet, to generate the second check value corresponding to the data block of the received network packet; a check value acquisition unit, to obtain the first check value added in the received network packet; and a check value comparison A unit compares the first check value with the second check value, and generates the comparison result.

The above check value calculation system is characterized in that the check value calculation rule is the MD5 one-way disorder function algorithm.

The above check value calculation system is characterized in that the check value adding unit adds the first check value to the check value placement block of the transmission network packet.

The above check value calculation system is characterized in that the check value acquisition unit acquires the first check value from the check value placement block of the received network packet.

The above check value calculation system is characterized in that the check value calculation module is composed of a special application integrated circuit single chip.

The above-mentioned verification value calculation system is characterized in that the verification value calculation module is composed of a field-type programmable grid array single chip.

The above-mentioned check value calculation system is characterized in that, when the comparison result is that the first check value and the second check value are not the same, the receiving network packet is discarded.

The present invention also provides a method for computing a check value of a network packet, which performs a check value operation on a transmitted network packet or a received network packet in a computer system, and is characterized in that it includes: setting a check value operation The module is used in the computer system to independently perform the check value calculation; when the network packet is transmitted, the check value calculation module also calculates the transmission network packet according to a check value calculation rule to generate a corresponding transmission network packet The first check value; add the first check value to the transmission network packet to transmit the transmission network packet; when the network packet is received, the check value calculation module also calculates the check value according to the check value calculation rule receiving a network packet to generate a second check value corresponding to the received network packet; and comparing the first check value with the second check value to generate a comparison result for processing the received network packet.

The above check value calculation method is characterized in that the check value calculation rule is the MD5 one-way disorder function algorithm.

The above-mentioned check value calculation method is characterized in that the check value calculation module also includes: a first check value calculation unit, which calculates the transmission network packet through the check value calculation rule to generate the corresponding transmission network packet The first check value of the data block; a check value adding unit, which adds the first check value to the transmission network packet; a second check value calculation unit, which calculates the received check value through the check value calculation rule Network packet, to generate the second check value corresponding to the data block of the received network packet; a check value acquisition unit, to obtain the first check value added in the received network packet; and a check value comparison A unit compares the first check value with the second check value, and generates the comparison result.

The above check value calculation method is characterized in that the check value adding unit adds the first check value to the check value placement block of the transmission network packet.

The above-mentioned check value calculation method is characterized in that the check value acquisition unit acquires the first check value from the check value placement block of the receiving network packet.

The above-mentioned checking value computing method is characterized in that the checking value computing module is composed of a special application integrated circuit single chip.

The above-mentioned verification value calculation method is characterized in that the verification value calculation module is composed of a field-type programmable grid array single chip.

The feature of the above check value calculation method is that if the comparison result is that the first check value is different from the second check value, then the receiving network packet is discarded.

Effect of the present invention, through the verification value operation system and operation method thereof of the network packet, utilize the verification value operation module to calculate and generate the verification value of the corresponding network packet, and perform the verification value comparison program on the received network packet , and the central processing unit only needs to process the received network packets according to the calculation and comparison results, so as to accelerate the processing speed of the network packets. In addition, through the check value calculation module, the check value calculation and comparison are independently performed on the transmitted packet or the received packet, so as to provide the judgment basis for the central processor to determine the network packet processing, thereby reducing the workload of the central processor and relatively speeding up the network packet processing. Speed increases the network traffic per unit time and further achieves the purpose of improving the quality of network transmission.

The present invention will be described in detail below in conjunction with the accompanying drawings and specific embodiments, but not as a limitation of the present invention.

Description of drawings

Fig. 1 is the system block diagram of the check value calculation module proposed by the present invention;

FIG. 2A is a schematic block diagram of a system for packet transmission proposed by the present invention;

FIG. 2B is a schematic block diagram of a system for receiving packets according to the present invention;

FIG. 3A is a flow chart of the check value calculation steps of the packet transmission proposed by the present invention; and

FIG. 3B is a flow chart of the calculation steps of the verification value for packet reception proposed by the present invention.

Among them, the picture mark:

10-check value operation module, 11-check value acquisition unit

12-the first check value operation unit, 13-the second check value operation unit

14- check value additional unit, 15- check value comparison unit

20-network packet, 20a- check value placement block

40-CPU module

Step 100—calculate the data block of the network packet to generate a first check value

Step 101 - Determine the check value and place the block according to the transmission format of the network protocol

Step 102 - appending the first check value to the check value placement block of the network packet

Step 103—transmit the network packet with the first check value attached

Step 200 - take out the first check value in the check value placement block

Step 201 - calculate the data block of the network packet to generate a second check value

Step 202 - compare whether the first check value is the same as the second check value

Step 203 - carry out subsequent processing on the received network packet

Step 204 - Discard received network packets

Detailed ways

Please refer to Fig. 1, it is a system block diagram of a checksum (Checksum) calculation module of the present invention, including: a checksum acquisition unit 11, a first checksum calculation unit 12, a second checksum calculation unit 13, A check value adding unit 14 and a check value comparing unit 15 .

The check value calculation module 10 is composed of a hardware device, and independently performs calculations on the network packets to be transmitted or received according to the check value calculation rules to generate the first check value or the second check value, and the check value calculation The rules can be established and operated by the MD5 one-way random function algorithm to generate a group of 32-bit numbers (for example, d1363f529163ccc7ca540c2f895dcc90), wherein the check value calculation module 10 can be an application-specific integrated circuit (Application-Specific Integrated Circuit, ASIC ) single chip or Field-Programmable Gate Array (FPGA) single chip.

The check value obtaining unit 11 is configured to obtain the first check value attached to the check value placement block in the network packet.

The first verification value calculation unit 12 is connected with the verification value acquisition unit 11, and calculates the data block size of a network packet (for example, a packet to be transmitted) without a verification value by a verification value calculation rule to generate the first verification value. check value.

The second verification value operation unit 13 is connected with the verification value acquisition unit 11, and calculates the data block size of the network packet (for example, received packet) without a verification value by a verification value calculation rule to generate the second verification value. check value.

The check value adding unit 14 is connected with the first check value operation unit 12 and the second check value operation unit 13 respectively, and is used to add the first check value to the check value placement block in the network packet, or transmit The second check value is sent to the check value comparison unit 15 for the check value comparison operation.

Check value comparison unit 15 compares whether the first check value is the same as the second check value, so as to provide the CPU module 40 (referring to FIG. or traffic level distinction, etc.), if the verification value comparison results are the same, it means that the data in the receiving network packet is correct, and subsequent processing will be performed on it; if the verification value comparison results are not the same, it means that the receiving network If the data in the packet is incorrect, the received network packet is discarded.

Next, please refer to FIG. 2A, which is a schematic block diagram of the packet transmission system of the present invention. First, the network packet 20 to be transmitted contains a data block and a check value placement block, and the network packet 20 is sent to the check value. The check value calculation is performed in the calculation module 10, and then, the first check value calculation unit 12 calculates the data block size of the network packet 20 according to the check value calculation rule, and generates the first check value 20a, and then passes the check value The appending unit 14 appends the first check value 20a to the check value placement block in the network packet 20 to continue the network packet transmission procedure, and the check value calculation rule can be established and operated through the MD5 one-way hash function algorithm , to produce a set of 32-bit numbers (for example, d1363f529163ccc7ca540c2f895dcc90).

In addition, please refer to FIG. 2B, which is a schematic block diagram of the packet receiving system of the present invention. First, the received network packet 20 includes a data block and a check value placement block 20a, and the network packet 20 is sent to the check value Carry out the verification value calculation in the operation module 10, then, take out the first verification value in the network packet 20 through the verification value acquisition unit 11 to the verification value placement block 20a, and the second verification value operation unit 13 according to The check value calculation rule calculates the data block size of the network packet 20, and generates a second check value (not shown in the figure), and then sends the second check value to the check value comparison unit through the check value adding unit 14 15, to perform check value comparison operations.

The central processing unit module 40 is connected with the check value calculation module 10, is the core module in the computer system, is responsible for the signal processing operation of each module, and according to the comparison result of the check value comparison unit 15, decides to discard or continue to process the network packet 20, wherein if the first check value calculation unit 12 or the second check value calculation unit 13 of the check value calculation module 10 breaks down, the central processing unit module 40 can still pass the check value acquisition unit 11 or check value The additional unit 14 continues to perform check value calculation work.

Please refer to FIG. 3A, which is a flow chart of the check value calculation steps of the packet transmission of the present invention. At first, the check value calculation module 10 is set in the computer system to independently perform the check value calculation. At the network packet transmission end:

Step 100, the first check value operation unit 12 calculates the data block of the network packet according to the check value calculation rule to generate the first check value of the corresponding network packet; Step 101, according to the network protocol (TCP/IP) transmission format, Determine the check value placement block in the network packet; step 102, next, add the first check value to the check value placement block by the check value adding unit 14; step 103, transmit the first check value added network packet.

Then, please refer to FIG. 3B, which is a flow chart of the check value calculation steps received by the packet of the present invention. At first, the check value calculation module 10 is set in the computer system to independently perform the check value calculation. At the network packet receiving end :

Step 200, the verification value acquisition unit 11 obtains the first verification value in the verification value placement block 20a; Step 201, the second verification value calculation unit 13 calculates the data block of the network packet according to the verification value calculation rule, To generate the second check value; step 202, whether the check value comparison module 30 compares the first check value with the second check value is the same; step 203, when the comparison result is the same, then notify the central processing unit module 40 to continue processing the network packet , and continue the verification value calculation operation; step 204, if the comparison result is not the same, then notify the central processing unit 40 to discard the network packet.

Through the check value calculation system and calculation method of the network packet, the check value calculation module independently performs check value calculation and comparison on the transmitted packet or the received packet, so as to provide the judgment basis for the central processing unit to determine the network packet processing, Thereby reducing the workload of the central processing unit, relatively speeding up the processing speed of network packets, increasing the network traffic per unit time, and further achieving the purpose of improving the quality of network transmission.

Certainly, the present invention also can have other multiple embodiments, without departing from the spirit and essence of the present invention, those skilled in the art can make various corresponding changes and deformations according to the present invention, but these corresponding changes All changes and modifications should belong to the protection scope of the claims of the present invention.

Claims (14)

1. A check value calculation system for a network packet, which is installed in a computer system with a check value calculation module composed of a hardware device to perform a check value calculation on a transmission network packet or a reception network packet, characterized in that , the check value calculation module is independent of the central processor in the computer system to perform the check value calculation, and the central processor is connected to the check value calculation module; Wherein, when the network packet is transmitted, the check value calculation module also calculates the transmitted network packet according to a check value calculation rule to generate a first check value corresponding to the data block of the transmitted network packet; and Wherein, when the network packet is received, the verification value operation module also operates the received network packet according to the verification value calculation rule to generate a second verification value corresponding to the data block of the received network packet, and compares the first one and the second check value, so as to generate a comparison result for the central processing unit to process the received network packet; The verification value calculation module also includes: A first check value calculation unit, which operates the transmission network packet through the check value calculation rule to generate the first check value; A check value adding unit, which adds the first check value to the transmission network packet; A second check value calculation unit, which operates the received network packet through the check value calculation rule to generate the second check value; A check value acquisition unit, which acquires the first check value attached to the received network packet; and A verification value comparison unit compares the first verification value with the second verification value and generates the comparison result. 2. The check value calculation system according to claim 1, characterized in that the check value calculation rule is MD5 one-way hash function algorithm. 3. The check value calculation system according to claim 2, wherein the check value adding unit adds the first check value to the check value placement block of the transmission network packet. 4. The check value calculation system according to claim 2, wherein the check value acquisition unit acquires the first check value from the check value placement block of the received network packet. 5. The check value calculation system according to claim 1, wherein the check value calculation module is an ASIC single chip. 6. The check value calculation system according to claim 1, wherein the check value calculation module is a field-type programmable gate row single chip. 7. The check value calculation system according to claim 1, wherein when the comparison result is that the first check value is different from the second check value, the receiving network packet is discarded. 8. A method for calculating a check value of a network packet, performing a check value calculation on a transmitting network packet or a receiving network packet in a computer system, characterized in that it includes: setting a check value calculation module in the computer system to perform the check value calculation independently of the central processing unit; When the network packet is transmitted, the first check value operation unit of the check value calculation module operates the transmitted network packet according to a check value calculation rule to generate a first check value corresponding to the transmitted network packet; The check value adding unit of the check value operation module adds the first check value to the transmission network packet to transmit the transmission network packet; When the network packet is received, the second check value computing unit of the check value calculation module operates the received network packet according to the check value calculation rule to generate a second check value corresponding to the received network packet; and The check value acquisition unit of the check value calculation module acquires the first check value added in the received network packet; The check value comparison unit of the check value calculation module compares the first check value with the second check value to generate a comparison result for the central processing unit to process the receiving network packet. 9. The check value calculation method according to claim 8, characterized in that the check value calculation rule is the MD5 one-way hash function algorithm. 10. The check value calculation method according to claim 9, wherein the check value adding unit adds the first check value to the check value placement block of the transmission network packet. 11. The check value calculation method according to claim 9, wherein the check value acquisition unit acquires the first check value from the check value placement block of the received network packet. 12. The check value calculation method according to claim 9, wherein the check value calculation module is an ASIC single chip. 13. The check value calculation method according to claim 9, wherein the check value calculation module is a field-type programmable gate row single chip. 14. The check value calculation method according to claim 9, wherein when the comparison result is that the first check value is different from the second check value, the receiving network packet is discarded.

Images