CN113726741B - Acceleration card data downloading method and related device - Google Patents

Abstract

This application discloses a method for downloading accelerator card data, which includes: CPLD receives encrypted information from a data sending device; decrypts the encrypted information based on a local decryption algorithm to obtain a unique identification code; determines whether the unique identification code is consistent with the accelerator card Whether the identification codes in the memory are the same; if so, establish a hardware physical connection between the accelerator card and the data sending device, so that the data sending device sends data to the accelerator card through the hardware physical connection , to improve the security of the program in the FPGA and avoid the leakage of the program in the FPGA. This application also discloses an accelerator card data downloading device, a server and a computer-readable storage medium, which have the above beneficial effects.

Description

An accelerator card data downloading method and related devices

Technical field

The present application relates to the field of computer technology, and in particular to an accelerator card data downloading method, an accelerator card data downloading device, a server and a computer-readable storage medium.

Background technique

With the continuous development of information technology, in inference accelerated computing application scenarios in data centers, a considerable number of deep learning accelerated computing units use FPGA (Field Programmable Gate Array, Field Programmable Gate Array) for hardware acceleration. Compared with GPU (graphics processing unit, graphics processor) has lower power consumption. More importantly, because FPGA is similar to the computing acceleration method of hardware, it is less likely for illegal software to illegally affect and control computing acceleration by directly tampering with the memory. the result of. FPGA is implemented through internal hardware connections and has a certain degree of inherent immunity to software modifications.

In related technologies, FPGA is at risk of being controlled by malware. For example, malware can read the FPGA program through the FPGA's JTAG (Joint Test Action Group, physical embedded loading interface) interface or selectMap interface, causing the FPGA deep learning model to be leaked. ; Or you can write a new malicious FPGA program through the above interface, causing the accelerated computing module to be maliciously hijacked and reducing the security of the program in the FPGA.

Therefore, how to improve the security of programs in FPGA and avoid leakage is a key issue for those skilled in the art.

Contents of the invention

The purpose of this application is to provide an accelerator card data download method, accelerator card data download device, server and computer-readable storage medium, so as to improve the security of the program in the FPGA and avoid the leakage of the program in the FPGA.

In order to solve the above technical problems, this application provides a method for downloading accelerator card data, including:

CPLD receives encrypted information from the data sending device;

Decrypt the encrypted information based on a local decryption algorithm to obtain a unique identification code;

Determine whether the unique identification code is the same as the identification code in the memory of the accelerator card;

If so, a hardware physical connection is established between the accelerator card and the data sending device, so that the data sending device sends data to the accelerator card through the hardware physical connection.

Optional, also includes:

When the data transmission ends, the hardware physical connection is cut off.

Optionally, decrypt the encrypted information based on a local decryption algorithm to obtain a unique identification code, including:

The encrypted ID information and encrypted version number information in the encrypted information are decrypted based on the local decryption algorithm to obtain the unique identification code.

Optionally, determining whether the unique identification code is the same as the identification code in the memory of the accelerator card includes:

The CPLD reads the identification code from the memory of the accelerator card;

Determine whether the unique identification code is the same as the identification code.

Optionally, the accelerator card is an accelerator device connected to the data sending device through a CPLD.

Optional, also includes:

The identification code is written into the memory of the accelerator card through the JTAG interface.

Optionally, establishing a hardware physical connection between the accelerator card and the data sending device includes:

The CPLD sets the state of the selectmap interface to an open state; wherein the selectmap interface is provided between the accelerator card and the data sending device.

This application also provides an accelerator card data download device, including:

An encrypted information sending module, used to receive encrypted information from the data sending device;

The encrypted information decryption module is used to decrypt the encrypted information based on a local decryption algorithm to obtain a unique identification code;

An identification code judgment module, used to judge whether the unique identification code is the same as the identification code in the memory of the accelerator card;

A data transmission module, configured to establish a hardware physical connection between the accelerator card and the data sending device when the unique identification code is the same as the identification code, so that the data sending device is physically connected through the hardware Send data to the accelerator card.

This application also provides a server, including:

Memory, used to store computer programs;

A processor, configured to implement the above steps of the accelerator card data downloading method when executing the computer program.

The present application also provides a computer-readable storage medium. A computer program is stored on the computer-readable storage medium. When the computer program is executed by a processor, the above steps of the accelerator card data downloading method are implemented.

An accelerator card data downloading method provided by this application includes: CPLD receives encrypted information from a data sending device; decrypts the encrypted information based on a local decryption algorithm to obtain a unique identification code; determines the relationship between the unique identification code and the acceleration card Whether the identification codes in the memory of the cards are the same; if so, establish a hardware physical connection between the accelerator card and the data sending device, so that the data sending device sends data to the accelerator through the hardware physical connection Card.

The received encrypted information is decrypted through CPLD to obtain a unique identification code, and then it is judged whether it is the same as the locally stored identification code. Finally, a hardware physical connection is established under the same circumstances to facilitate data transmission and avoid malicious programs from unauthorized access. It is transferred to the accelerator card through hardware physical connection, which improves the security of the data in the accelerator card and avoids data loss.

This application also provides an accelerator card data downloading device, a server and a computer-readable storage medium, which have the above beneficial effects and will not be described in detail here.

Description of the drawings

In order to explain the embodiments of the present application or the technical solutions in the prior art more clearly, the drawings needed to be used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings in the following description are only This is an embodiment of the present application. For those of ordinary skill in the art, other drawings can be obtained based on the provided drawings without exerting creative efforts.

Figure 1 is a flow chart of an accelerator card data downloading method provided by an embodiment of the present application;

Figure 2 is a schematic diagram of the hardware structure of an accelerator card data downloading method provided by an embodiment of the present application;

Figure 3 is a schematic structural diagram of a single device of an accelerator card data downloading method provided by an embodiment of the present application;

Figure 4 is a schematic structural diagram of an accelerator card data downloading device provided by an embodiment of the present application.

Detailed ways

The core of this application is to provide an accelerator card data download method, accelerator card data download device, server and computer-readable storage medium, so as to improve the security of the program in the FPGA and avoid the leakage of the program in the FPGA.

In order to make the purpose, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments These are part of the embodiments of this application, but not all of them. Based on the embodiments in this application, all other embodiments obtained by those of ordinary skill in the art without creative efforts fall within the scope of protection of this application.

In related technologies, FPGA has the risk of being controlled by malware. For example, malware can read the FPGA program through the FPGA's JTAG interface or selectMap interface, causing the leakage of the FPGA deep learning model; or it can write new malicious code through the above interface. The FPGA program causes the accelerated computing module to be maliciously hijacked, reducing the security of the program in the FPGA.

Therefore, this application provides a method for downloading accelerator card data. The received encrypted information is decrypted through CPLD to obtain a unique identification code, and then it is judged whether it is the same as the locally stored identification code. Finally, the hardware physics is established under the same situation. connection for data transmission, preventing malicious programs from being transmitted to the accelerator card through hardware physical connections without authorization, improving the security of data in the accelerator card and avoiding data loss.

The following describes an accelerator card data downloading method provided by this application through an embodiment.

Please refer to Figure 1, which is a flow chart of an accelerator card data downloading method provided by an embodiment of the present application.

In this embodiment, the method may include:

S101, CPLD receives encrypted information from the data sending device;

This step is intended for the CPLD to receive encrypted information from the data sending device. Among them, the encrypted information is the encrypted information used for security verification before the accelerator card receives the data.

In this embodiment, the encrypted information is first verified through the CPLD instead of the accelerator card itself, which decouples the verification process and improves the security of the accelerator card.

Among them, the encrypted information is the encrypted information obtained by locally encrypting the unique identification code by the data sending device. Only the encrypted information can be decrypted after it is transmitted to the CPLD, thus maintaining the purpose of the accelerator card not being connected by other devices.

The encryption algorithm may be a hybrid encryption algorithm, or any encryption algorithm provided by the existing technology may be used, which is not specifically limited here.

S102, decrypt the encrypted information based on the local decryption algorithm to obtain a unique identification code;

Based on S101, this step aims to decrypt the encrypted information based on the local decryption algorithm and obtain a unique identification code.

Among them, the local decryption algorithm is an algorithm corresponding to the encryption algorithm. The decryption algorithm is a hardware algorithm solidified locally in the CPLD and is invisible to the outside world, improving the security of the decryption process.

Further, this step may include:

The encrypted ID information and encrypted version number information in the encrypted information are decrypted based on the local decryption algorithm to obtain a unique identification code.

It can be seen that this alternative mainly explains how to decrypt. In this optional solution, the unique identification code can be obtained by decrypting the encrypted ID information and the encrypted version number information based on a decryption algorithm. It can be seen that through hybrid decryption, the security of encrypted information is improved and data is prevented from being leaked.

S103, determine whether the unique identification code is the same as the identification code in the memory of the accelerator card;

Based on S102, this step aims to determine whether the unique identification code is the same as the identification code in the memory of the accelerator card.

The identification code in the memory of the accelerator card is an identification code pre-stored in the accelerator card. The identification code is a unique identification code that can only be obtained by the administrator or user of the accelerator card.

Among them, the accelerator card is an accelerator device connected to the data sending device through a CPLD.

It can be seen that in this embodiment, the external device, such as the CPU, is connected to the accelerator card through the CPLD instead of the accelerator card being directly connected to the external device, which improves the security of the accelerator card.

Further, this step may include:

Step 1, CPLD reads the identification code from the memory of the accelerator card;

Step 2: Determine whether the unique identification code and the identification code are the same.

It can be seen that this alternative mainly explains how to make judgments. In this optional solution, the CPLD reads the identification code from the memory of the accelerator card and determines whether the unique identification code and the identification code are the same.

S104, if yes, establish a hardware physical connection between the accelerator card and the data sending device, so that the data sending device sends data to the accelerator card through the hardware physical connection.

On the basis of S103, when the unique identification code is the same as the identification code, a hardware physical connection is established between the accelerator card and the data sending device, so that the data sending device sends data to the accelerator card through the hardware physical connection.

It can be seen that when the identification codes are the same, corresponding data transmission channels can be established to achieve data transmission. And because it is a physical connection, when the CPLD is not set to the on state, data transmission cannot be performed, avoiding malicious intrusion.

Further, this step may include:

CPLD sets the status of the selectmap interface to the open state; wherein, the selectmap interface is set between the accelerator card and the data sending device.

It can be seen that this optional solution mainly explains how to establish the physical connection of the hardware. In this optional solution, CPLD sets the status of the selectmap interface to the open state; wherein, the selectmap interface is set between the accelerator card and the data sending device.

In addition, this embodiment may also include:

Write the identification code into the memory of the accelerator card through the JTAG interface.

It can be seen that in this optional solution, the identification code can also be written into the memory of the accelerator card through the JTAG interface. Among them, the JTAG interface is a physical embedded loading interface. The JTAG interface is hidden in many products and is not easy to be directly controlled. There is little risk of being hijacked, which improves security.

In addition, this embodiment may also include:

When the data transmission is completed, the hardware physical connection is cut off.

It can be seen that in this optional solution, in order to improve the security of the accelerator card, when the data transmission is completed, the hardware physical connection is cut off. Preventing the hardware physical connection from being in a constantly open state avoids the risk of data leakage and improves data security.

In summary, this embodiment uses CPLD to decrypt the received encrypted information to obtain a unique identification code, and then determines whether it is the same as the locally stored identification code. Finally, under the same circumstances, a hardware physical connection is established for data transmission. This prevents malicious programs from being transmitted to the accelerator card through hardware physical connections without authorization, improves the security of data in the accelerator card and avoids data loss.

The following uses a specific embodiment to further illustrate an accelerator card data downloading method provided by this application.

Please refer to Figure 2, which is a schematic diagram of the hardware structure of an accelerator card data downloading method provided by an embodiment of the present application.

Please refer to FIG. 3 , which is a schematic structural diagram of a single device of an accelerator card data downloading method provided by an embodiment of the present application.

In this embodiment, in order to avoid the loss of authority of the data acceleration unit caused by malicious network attacks, and at the same time reduce the risk to other acceleration units from being illegally attacked after a certain acceleration unit is cracked. In this embodiment, the unique ID information of the FPGA is used to encrypt the ID information and the version number used for the upgrade through remote upgrade, and software-isolated hardware decryption is performed on the accelerator card to control the selectmap permissions in order to protect the computing model of the FPGA. Will not be illegally tampered with or copied.

In Figure 2, the legal remote update part stores the ID information of the data center FPGA and the version information V of the current software upgrade. Through the encryption algorithm, new ID_New information and version information V_New can be generated.

In Figure 3, the encrypted information and new bit stream are sent to the CPU of the data center, and then sent to the CPLD by the data center. The decryption algorithm designed in the CPLD parses the original ID information and saves it. The ID information in the memory is compared. If the verification is correct, the control enable of the selectmap interface is turned on, which means that the FPGA interface permission is opened to the CPU. If the verification fails, the permissions will not be opened because the encryption algorithm is on the remotely updated computer and the decryption algorithm is implemented by the hardware unit of the CPLD. The whole process is invisible to the CPU and operating system of the data center. Therefore, when the data center is attacked In the event of a malicious network attack, there will be no accidents that cause the acceleration FPGA unit to be maliciously tampered with.

Further, in this embodiment, the method may include:

Step 1: Use JTAG to write the FPGA ID information into the memory on the accelerator card through CPLD;

Step 2, use JTAG to update the CPLD program and turn off the write enable of the memory to prohibit updating the FPGA ID information. This version contains the final decryption and management functions of the selectmap interface;

Step 3. When the program of the FPGA acceleration unit needs to be updated, the remote computer is connected to the CPU and operating system of the data center through the network;

Step 4. The remote computer contains the FPGA program that needs to be updated, as well as the corresponding FPGA ID information and the version information of this program. Through the encryption algorithm, the encrypted FPGA ID information and program version information are obtained, and all three files are sent. To the CPU and operating system of the data center;

Step 5: The CPU in the data center does not have a decryption algorithm and does not perform decryption. It directly sends the encrypted FPGA ID information and program version information to the CPLD on the accelerator card;

Step 6: The CPLD on the data accelerator card parses the unique ID identification code of the FPGA through the hardware decryption algorithm, and compares it with the ID value in the memory. If it is consistent, the hardware physical connection of the selectmap is opened, and the CPU of the data center obtains The right to use selectmap;

Step 7: After the data center CPU completes updating the FPGA program, the CPLD will know that the update is completed through the counter, and will automatically close the use rights of the selectmap interface.

If an illegal link attempts to directly control the selectmap interface, although the corresponding control address can be found through address addressing, due to the hardware encryption and decryption function of CPLD, the use permission of selectmap cannot be obtained, and illegal copying and tampering cannot be carried out. .

It can be seen that this embodiment uses CPLD to decrypt the received encrypted information to obtain a unique identification code, and then determines whether it is the same as the locally stored identification code, and finally establishes a hardware physical connection under the same situation to facilitate data transmission and avoid Malicious programs are transmitted to the accelerator card through hardware physical connections without authorization, which improves the security of data in the accelerator card and avoids data loss.

The following is an introduction to the accelerator card data downloading device provided by the embodiment of the present application. The accelerator card data downloading device described below and the accelerator card data downloading method described above may be mutually referenced.

Please refer to FIG. 4 , which is a schematic structural diagram of an accelerator card data downloading device provided by an embodiment of the present application.

In this embodiment, the device may include:

The encrypted information sending module 100 is used to receive encrypted information from the data sending device;

The encrypted information decryption module 200 is used to decrypt the encrypted information based on a local decryption algorithm to obtain a unique identification code;

The identification code judgment module 300 is used to judge whether the unique identification code is the same as the identification code in the memory of the FPGA;

The data transmission module 400 is used to establish a hardware physical connection between the FPGA and the data sending device when the unique identification code is the same as the identification code, so that the data sending device sends the FPGA program to the FPGA through the hardware physical connection.

An embodiment of the present application also provides a server, including:

Memory, used to store computer programs;

A processor, configured to implement the steps of the accelerator card data downloading method described in the above embodiments when executing the computer program.

Embodiments of the present application also provide a computer-readable storage medium. A computer program is stored on the computer-readable storage medium. When the computer program is executed by a processor, the accelerator card data downloading method as described in the above embodiments is implemented. step.

Each embodiment in the specification is described in a progressive manner. Each embodiment focuses on its differences from other embodiments. The same and similar parts between the various embodiments can be referred to each other. As for the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple. For relevant details, please refer to the description in the method section.

Those skilled in the art may further realize that the units and algorithm steps of each example described in connection with the embodiments disclosed herein can be implemented by electronic hardware, computer software, or a combination of both. In order to clearly illustrate the possible functions of hardware and software, Interchangeability, in the above description, the composition and steps of each example have been generally described according to functions. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Skilled artisans may implement the described functionality using different methods for each specific application, but such implementations should not be considered beyond the scope of this application.

The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein may be implemented directly in hardware, in software modules executed by a processor, or in a combination of both. Software modules may be located in random access memory (RAM), memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disks, removable disks, CD-ROMs, or anywhere in the field of technology. any other known form of storage media.

The above describes in detail an accelerator card data downloading method, accelerator card data downloading device, server and computer-readable storage medium provided by this application. This article uses specific examples to illustrate the principles and implementation methods of this application. The description of the above embodiments is only used to help understand the method and its core idea of this application. It should be noted that for those of ordinary skill in the art, several improvements and modifications can be made to the present application without departing from the principles of the present application, and these improvements and modifications also fall within the protection scope of the claims of the present application.

Claims (8)

1. A method for downloading accelerator card data, which is characterized by including: The CPLD receives encrypted information from the data sending device; the encrypted information is information encrypted using a hybrid encryption algorithm; Decrypt the encrypted information based on a local decryption algorithm to obtain a unique identification code; the local decryption algorithm is an algorithm corresponding to the encryption algorithm, and the decryption algorithm is a hardware algorithm solidified locally in the CPLD; Determine whether the unique identification code is the same as the identification code in the memory of the accelerator card; If so, establish a hardware physical connection between the accelerator card and the data sending device, so that the data sending device sends data to the accelerator card through the hardware physical connection; Wherein, establishing a hardware physical connection between the accelerator card and the data sending device includes: the CPLD sets the state of the selectmap interface to an open state; the selectmap interface is set between the accelerator card and the data sending device. between; If the unique identification code is different from the identification code in the memory of the accelerator card, the use permission of the selectmap interface will not be granted; Wherein, decrypting the encrypted information based on the local decryption algorithm to obtain the unique identification code includes: decrypting the encrypted ID information and encrypted version number information in the encrypted information based on the local decryption algorithm to obtain the unique identification code; Among them, the method includes: Step 1, use JTAG to write the FPGA ID information into the memory on the accelerator card through CPLD; Step 2, use JTAG to update the CPLD program and turn off the write enable of the memory to prohibit updating the FPGA ID information. This version contains The decryption and management functions of the final selectmap interface; Step 3, when the program of the FPGA acceleration unit needs to be updated, the remote computer is connected to the CPU and operating system of the data center through the network; Step 4, the remote computer contains the FPGA program that needs to be updated , as well as the corresponding FPGA ID information and the version information of this program. Through the encryption algorithm, the encrypted FPGA ID information and program version information are obtained, and all three files are sent to the CPU and operating system of the data center; Step 5, The CPU in the data center does not have a decryption algorithm and does not decrypt. It directly sends the encrypted FPGA ID information and program version information to the CPLD on the accelerator card; Step 6. The CPLD on the data accelerator card uses the hardware decryption algorithm to parse out the unique FPGA The ID identification code is compared with the ID value in the memory. If it is consistent, the hardware physical connection of the selectmap is opened, and the data center CPU obtains the right to use the selectmap; Step 7, after the data center CPU updates the FPGA program, CPLD will know that the update is completed through the counter, and will automatically close the use rights of the selectmap interface. 2. The accelerator card data downloading method according to claim 1, further comprising: When the data transmission ends, the hardware physical connection is cut off. 3. The accelerator card data downloading method according to claim 1, characterized in that determining whether the unique identification code is the same as the identification code in the memory of the accelerator card includes: The CPLD reads the identification code from the memory of the accelerator card; Determine whether the unique identification code is the same as the identification code. 4. The accelerator card data downloading method according to claim 1, characterized in that the accelerator card is an accelerator device connected to the data sending device through a CPLD. 5. The accelerator card data downloading method according to claim 1, further comprising: The identification code is written into the memory of the accelerator card through the JTAG interface. 6. An accelerator card data downloading device, characterized in that it includes: The encrypted information sending module is used to receive encrypted information from the data sending device; the encrypted information is information encrypted using a hybrid encryption algorithm; The encrypted information decryption module is used to decrypt the encrypted information based on a local decryption algorithm to obtain a unique identification code; the local decryption algorithm is an algorithm corresponding to the encryption algorithm, and the decryption algorithm is a hardware algorithm solidified locally in the CPLD; An identification code judgment module, used to judge whether the unique identification code is the same as the identification code in the memory of the accelerator card; A data transmission module, configured to establish a hardware physical connection between the accelerator card and the data sending device when the unique identification code is the same as the identification code, so that the data sending device is physically connected through the hardware Send data to the accelerator card; wherein establishing a hardware physical connection between the accelerator card and the data sending device includes: the CPLD sets the state of the selectmap interface to an open state; the selectmap interface is set on the Between the accelerator card and the data sending device; If the unique identification code is different from the identification code in the memory of the accelerator card, the use permission of the selectmap interface will not be granted; Among them, the encrypted information is decrypted based on a local decryption algorithm to obtain a unique identification code, including: Decrypt the encrypted ID information and encrypted version number information in the encrypted information based on the local decryption algorithm to obtain the unique identification code; Among them, the device is specifically used for: step 1, using JTAG, to write the ID information of the FPGA into the memory on the accelerator card through CPLD; step 2, using JTAG, updating the CPLD program, turning off the write enable of the memory, so as to prohibit Update the ID information of the FPGA. This version contains the decryption and management functions of the final selectmap interface; Step 3, when the program of the FPGA acceleration unit needs to be updated, the remote computer is connected to the CPU and operating system of the data center through the network; Step 4, The remote computer stores the FPGA program that needs to be updated, as well as the corresponding FPGA ID information and the version information of this program. Through the encryption algorithm, the encrypted FPGA ID information and program version information are obtained, and all three files are sent to the data center. CPU and operating system; Step 5, the data center CPU does not have a decryption algorithm, does not decrypt, and directly sends the encrypted FPGA ID information and program version information to the CPLD on the accelerator card; Step 6, the CPLD on the data accelerator card passes The hardware decryption algorithm parses out the unique ID identification code of the FPGA and compares it with the ID value in the memory. If it is consistent, the hardware physical connection of the selectmap is opened, and the CPU of the data center obtains the right to use the selectmap; Step 7, Data Center After the CPU completes updating the FPGA program, the CPLD will know that the update is completed through the counter, and will automatically close the use rights of the selectmap interface. 7. A server, characterized in that it includes: Memory, used to store computer programs; A processor, configured to implement the steps of the accelerator card data downloading method according to any one of claims 1 to 5 when executing the computer program. 8. A computer-readable storage medium, characterized in that a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the acceleration according to any one of claims 1 to 5 is achieved. Steps of card data download method.