CN103561041B - The treating method and apparatus of the newly-built connections of SSL - Google Patents
The treating method and apparatus of the newly-built connections of SSL Download PDFInfo
- Publication number
- CN103561041B CN103561041B CN201310574743.5A CN201310574743A CN103561041B CN 103561041 B CN103561041 B CN 103561041B CN 201310574743 A CN201310574743 A CN 201310574743A CN 103561041 B CN103561041 B CN 103561041B
- Authority
- CN
- China
- Prior art keywords
- waiting task
- power
- newly
- ssl
- batch
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title description 27
- 238000003672 processing method Methods 0.000 claims abstract description 21
- 238000003860 storage Methods 0.000 claims description 24
- 239000000725 suspension Substances 0.000 claims description 4
- 230000000694 effects Effects 0.000 description 4
- 238000004364 calculation method Methods 0.000 description 3
- 230000014759 maintenance of location Effects 0.000 description 2
- 238000010926 purge Methods 0.000 description 2
- 238000006243 chemical reaction Methods 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
Landscapes
- Compression, Expansion, Code Conversion, And Decoders (AREA)
- Storage Device Security (AREA)
Abstract
The invention discloses a kind of processing method of the newly-built connections of SSL, including step：In the newly-built connections of multiple SSL, RSA calculating is tentatively carried out, the power modulus data high needed for recording power modulo operation high；It is waiting task by power modulus data encoding high, and if the waiting task after coding is divided into dry-cure batch；Call power modulo operation device high by batch processed waiting task, power modulus data high are calculated.The invention also discloses corresponding device.Power modulus data high are calculated using power modulo operation device high, effectively reduces the computational load of CPU, so as to improve the performance of the newly-built connections of SSL.
Description
Technical field
The present invention relates to technical field of data processing, the processing method and dress of a kind of newly-built connections of SSL are related specifically to
Put.
Background technology
In SSL (Secure Sockets Layer, SSL) newly-built connection, it usually needs carry out RSA and add solution
Close computing, the amount of calculation of this RSA encryption and decryption computing is larger, regardless of whether being that software or hardware realize that arithmetic speed is always
The defect of RSA.At present, the length of the RSA key of main flow is more and more long, and carrying out computing using CPU has been difficult to reach high-performance
Requirement.Such as, the thread CPU of 2,600 4 cores of I7 eight of main flow, calculates the RSA of 2048bit, and its arithmetic speed can about reach
More than 3,000 times per second, and the RSA for 4096bit, arithmetic speed is then only capable of reaching more than 500 times per second, thus can not meet SSL
The high performance demands of newly-built connection.
The content of the invention
The main object of the present invention is to provide a kind for the treatment of method and apparatus of the newly-built connections of SSL, can effectively reduce CPU
Computational load, improve the newly-built connections of SSL performance.
The present invention provides a kind of processing method of the newly-built connections of SSL, including step：
In the newly-built connections of multiple SSL, RSA calculating is tentatively carried out, the power modulus number high needed for recording power modulo operation high
According to；
It is waiting task by the power modulus data encoding high；
Quantity and delay situation according to the waiting task, set the batch conditions of each treatment batch, wherein, institute
Stating batch conditions includes：Setting waiting task quantity weight Wn, while it is Wt also to set stand-by period weight, sets total score threshold
Value S, as the waiting task quantity * Wn+ stand-by period * Wt of storage>During S, all waiting tasks for storing are divided into same
Treatment batch；
The waiting task for storing is carried out in batches according to the batch conditions, if being divided into dry-cure batch；
Power modulo operation device waiting task as described in batch processed high is called, the power modulus data high are counted
Calculate.
Preferably, it is described by power modulus data encoding high be waiting task the step of specifically include：
Collect the power modulus data high, according to unified form by the power modulus data encoding high be pending
Business, and store the waiting task.
Preferably, it is described record power modulo operation high needed for power modulus data high the step of after, also including step：
Hang up multiple newly-built connections of the SSL.
Preferably, power modulo operation device high is called by the pending task of batch processed described, to the height
After the step of power modulus data are calculated, also include：
Other data to RSA encryption and decryption computings are calculated.
The present invention also provides a kind of SSL processing units of newly-built connection, including：
Data recordin module, in the newly-built connections of multiple SSL, tentatively carrying out RSA calculating, records power modulo operation high
Required power modulus data high；
Computing management module, for being waiting task by the power modulus data encoding high；
Condition setting module, for the quantity according to the waiting task and delay situation, sets each treatment batch
Batch conditions, wherein, the batch conditions include：Setting waiting task quantity weight Wn, while also setting the stand-by period
Weight is Wt, sets total score threshold value S, as the waiting task quantity * Wn+ stand-by period * Wt of storage>It is all by what is stored during S
Waiting task is divided into same treatment batch；
Task module in batches, for by the waiting task for storing, be divided into according to the batch conditions in batches
If dry-cure batch；
First computing module, for calling power modulo operation device waiting task as described in batch processed high, to described
Power modulus data high are calculated.
Preferably, the computing management module, is additionally operable to collect the power modulus data high, according to unified form by institute
Power modulus data encoding high is stated for waiting task, and stores the waiting task.
Preferably, the processing unit of the newly-built connections of SSL also includes：
Suspension module, for hanging up multiple newly-built connections of the SSL.
Preferably, the processing unit of the newly-built connections of SSL also includes：
Second computing module, calculates for other data to RSA encryption and decryption computings.
The present invention by the newly-built connections of SSL, tentatively carrying out RSA calculating, the power high needed for recording power modulo operation high
Modulus data, are waiting task by power modulus data encoding high, and if the waiting task after coding is divided into dry-cure batch
It is secondary；Call power modulo operation device high by batch processed waiting task, power modulus data high are calculated.Taken using power high
Modulo device is calculated power modulus data high, effectively reduces the computational load of CPU, so as to improve the newly-built companies of SSL
The performance for connecing.
Brief description of the drawings
Fig. 1 is the schematic flow sheet of the processing method first embodiment of the newly-built connections of SSL of the present invention；
Fig. 2 be the newly-built connections of SSL of the present invention processing method in flow that the task after coding is classified by batch illustrate
Figure；
Fig. 3 be the newly-built connections of SSL of the present invention processing method in by task by batch be divided into treatment queue flow illustrate
Figure；
Fig. 4 is the schematic flow sheet of the processing method second embodiment of the newly-built connections of SSL of the present invention；
Fig. 5 is the schematic flow sheet of the processing method 3rd embodiment of the newly-built connections of SSL of the present invention；
Fig. 6 is the structural representation of the processing unit first embodiment of the newly-built connections of SSL of the present invention；
Fig. 7 is the structural representation of the computing management module of the processing unit of the newly-built connections of SSL of the present invention；
Fig. 8 is the structural representation of the task submodule in batches of the processing unit of the newly-built connections of SSL of the present invention；
Fig. 9 is the structural representation of the processing unit second embodiment of the newly-built connections of SSL of the present invention；
Figure 10 is the structural representation of the processing unit 3rd embodiment of the newly-built connections of SSL of the present invention.
The realization of the object of the invention, functional characteristics and advantage will be described further referring to the drawings in conjunction with the embodiments.
Specific embodiment
It should be appreciated that the specific embodiments described herein are merely illustrative of the present invention, it is not intended to limit the present invention.
The present invention provides a kind of processing method of the newly-built connections of the SSL of offer.RSA is added using power modulo operation device high
Power modulo operation high in decryption computing is calculated, and passes through CPU or high power modulo operations device calculating RSA operation other
Data, so as to reduce the computational load of CPU.
Reference picture 1, Fig. 1 is the schematic flow sheet of the processing method first embodiment of the newly-built connections of SSL of the present invention.
The processing method of the newly-built connections of SSL that the present embodiment is provided, including：
Step S10, in the newly-built connections of multiple SSL, tentatively carries out RSA calculating, the height needed for recording power modulo operation high
Power modulus data；
When the newly-built connections of multiple SSL are carried out, because operand is larger, carries out computing using CPU and be extremely difficult to high-performance
Requirement, thus, in the present embodiment, the power modulo operation high of the newly-built connections of multiple SSL is integrated into a collection of computing, i.e., many
, it is necessary to when carrying out RSA encryption and decryption computings, RSA meters tentatively be carried out first after the completion of the early stage logical process of the individual newly-built connections of SSL
Calculate, that is, carry out following calculating：1st, data to be decrypted are converted into big integer according to binary value, this big integer is designated as
I；2nd, I is calculated to the value of p modulus, Ip is designated as, and wherein p is first prime factor of public key n；3rd, values of the I to q modulus, note are calculated
It is Iq, wherein q is second prime factor of public key n.Big integer Ip and Iq are exactly the data for needing to carry out power modulo operation high,
During preliminary RSA is calculated, the power modulus number high needed for recording that multiple SSL are newly-built and being connected to power modulo operation process high
According to these power modulus data high are not calculated by CPU.
Step S20, is waiting task by power modulus data encoding high, and the waiting task after coding is divided into some
Treatment batch；
After power modulus data high needed for have recorded all power modulo operation processes high, that is, record all big integer Ip and
Be unified form by these power modulus data encodings high after Iq, will its be encoded to waiting task, then will coding after shape
If into all waiting tasks be divided into dry-cure batch, i.e., when power modulo operation high is carried out, to the treatment batch after in batches
Calculation process is carried out successively.So, all of power modulo operation high can be all arranged in certain a collection of task.
Step S30, calls power modulo operation device high by the pending task of batch processed, to the power modulus data high
Calculated.
If after pending task after by coding is divided into dry-cure batch, power modulo operation device high is called, to every
One treatment batch is processed successively, i.e., the power modulus data high for being recorded are calculated.In the present embodiment, power modulus fortune high
It can be graphic process unit GPU, or FPGA (Field-Programmable Gate Array, field programmable gate to calculate device
Array), or the special chip for processing high-volume quantity computing that GPU and FPGA can be substituted of designed, designed,
Carry out the computing of power modulus data high.
The present embodiment by the newly-built connections of SSL, tentatively carrying out RSA calculating, the height needed for recording power modulo operation high
Power modulus data, are waiting task by power modulus data encoding high, and if the waiting task after coding is divided into dry-cure
Batch；Call power modulo operation device high by batch processed waiting task, power modulus data high are calculated.Using power high
Modulo operation device is calculated power modulus data high, effectively reduces the computational load of CPU, newly-built so as to improve SSL
The performance of connection.
Reference picture 2, Fig. 2 be the newly-built connections of SSL of the present invention processing method in the task after coding is classified by batch
Schematic flow sheet.
In the above-described embodiments, step S20 is specifically included：
Step S21, collects power modulus data high, by power modulus data encoding high is pending according to unified form
Business, and store waiting task；
Step S22, according to the parameter of waiting task, some places is divided into according to preset scheduling strategy by waiting task
Reason batch.
After the power modulus data high needed for have recorded all power modulo operation processes high, the power high that collection is recorded takes
Modulus evidence, and being encoded according to unified form, will power modulus data encoding high be waiting task, and using queue,
Chained list or all waiting tasks of other data structure storages.Then, according to the parameter of waiting task, according to preset scheduling
Strategy, if all tasks are divided into dry-cure batch, to call power modulo operation device high to calculate power modulus number high by batch
According to.In the present embodiment, the parameter of waiting task refers to the quantity of waiting task, and postpones the parameters such as threshold value；Preset
Scheduling strategy refers to the batch conditions for being divided into some batches for the waiting task that will be stored.
Please with reference to Fig. 3, Fig. 3 be the newly-built connections of SSL of the present invention processing method in task is divided into treatment by batch
The schematic flow sheet of queue.
In the present embodiment, step S22 is further included：
Step S221, quantity and delay situation according to waiting task, sets the batch conditions of each treatment batch；
Step S222, is carried out in batches the waiting task of storage according to batch conditions, if being divided into dry-cure batch.
When if waiting task is divided into dry-cure batch, quantity and delay situation first according to waiting task,
The quantity of the waiting task i.e. according to storage, and each waiting task delay situation, each treatment batch is set
Batch conditions, then, all waiting tasks are divided into the treatment batch of respective numbers according to batch conditions.
In the present embodiment, the setting of following several batch conditions is enumerated, and entered waiting task according to batch conditions
Row method in batches：
1st, it is n to set each treatment batch task amount threshold, when the quantity of the waiting task for being stored is more than or equal to n
When, these waiting tasks are divided into same treatment batch, carry out power modulo operation high, and the waiting task that will be stored note
Record is emptied, to continue to collect waiting task.
2nd, it is t to set waiting task stand-by period upper limit threshold, when the stand-by period of the waiting task of oldest stored
When having exceeded t milliseconds, all waiting tasks that will be stored before are divided into same treatment batch, carry out power modulo operation high, and
The record of the waiting task of storage is emptied, to continue to collect waiting task.
3rd, the waiting task amount threshold for setting each treatment batch is n, while it is t also to set the stand-by period upper limit.
When the quantity of the waiting task of storage is exceeded more than equal to n, or the stand-by period of the waiting task of oldest stored exceedes
At t milliseconds, all waiting tasks that will be stored before are divided into same treatment batch, carry out power modulo operation high, and will deposit
The record of the waiting task of storage is emptied, to continue to collect waiting task.
4th, the quantity with reference to waiting task and stand-by period, the waiting task quantity of each treatment batch is set
Weight Wn, while it is Wt also to set stand-by period weight, setting total score threshold value S.Waiting task quantity * Wn+ when storage etc.
Treat time * Wt>During S, all waiting tasks for storing are divided into same treatment batch, carry out power modulo operation high, and will deposit
The record of the waiting task of storage is emptied, to continue to collect waiting task.
5th, when each power modulo operation high starts, report computing starts, and report computing stops when computing is completed.If queue
It is middle pending in the presence of at least one waiting task etc., while now do not carrying out power modulo operation high, then at once will storage
All waiting tasks be divided into same treatment batch, carry out power modulo operation high, and the waiting task that will be stored record
Empty, to continue to collect waiting task.
6th, record the stand-by period t1 of each waiting task, t2 ... tn.Preset a function of many variables f (t1,
T2...tn) as scheduling function, if a certain moment f (t1, t2...tn)>0, k=f (t1, t2...tn) is made, by oldest stored
K waiting task be divided into same treatment batch, carry out power modulo operation high, and by k scheduled waiting task
Record purge, to continue to collect waiting task.On this basis, it is also possible to consider network throughput, system at that time
The parameters such as power consumption, the heat condition of power modulo operation device high, design more complicated scheduling function and are scheduled.
After the power modulus data high needed for have recorded all power modulo operation processes high, power modulus data high are collected,
According to unified form by power modulus data encoding high be waiting task；Quantity and delay situation according to waiting task,
The batch conditions of each treatment batch are set, and are carried out the waiting task of storage according to batch conditions in batches, being divided into some
Treatment batch, so as to improve the operational performance of power modulo operation device high, and further increases the property of the newly-built connections of SSL
Energy.
Reference picture 4, Fig. 4 is the schematic flow sheet of the processing method second embodiment of the newly-built connections of SSL of the present invention.
On the basis of the processing method first embodiment of the newly-built connections of the invention described above SSL, perform step S10 it
Afterwards, the method also includes：
Step S40, hangs up the multiple newly-built connections of SSL.
In the present embodiment, RSA calculating is carried out preliminary, and the power modulus data high needed for having recorded power modulo operation high
Afterwards, the newly-built connections of SSL are hung up, to wait power modulo operation high to complete, after the completion of power modulo operation high, then continues SSL
The process of newly-built connection.
Reference picture 5, Fig. 5 is the schematic flow sheet of the processing method 3rd embodiment of the newly-built connections of SSL of the present invention.
On the basis of the processing method first embodiment of the newly-built connections of the invention described above SSL, perform step S30 it
Afterwards, the method also includes：
Step S50, other data to RSA encryption and decryption computings are calculated.
After the completion of power modulo operation high, continue the process of the newly-built connections of SSL, to other data of RSA encryption and decryption computings
Calculated, so as to complete the newly-built connections of SSL, this part is calculated and can be calculated by CPU, it is also possible to transported by power modulus high
Device is calculated to calculate.Complete following steps：1st, the result of power modulus high is converted into two big integers, is designated as Rp and Rq, point
Not Biao Shi decrypted result mould p and mould q value, wherein p and q is two prime factors of public key n；2nd, using Chinese remainder theorem, lead to
Cross the value that Rp and Rq calculates final result mould n；3rd, result is decoded and effect, algorithm and the SSL of decoding and effect are selected
Data filling mode it is relevant.So, just realize in the newly-built connection procedures of SSL, completed by power modulo operation device high
Power modulo operation high, and after the completion of power modulo operation high, completed to RSA encryption and decryption by CPU or high power modulo operations device
The calculating of other data of computing.
The present invention also provides a kind of SSL processing units of newly-built connection.
Reference picture 6, Fig. 6 is the structural representation of the processing unit first embodiment of the newly-built connections of SSL of the present invention.
The processing unit of the newly-built connections of SSL that the present embodiment is provided, including：
Data recordin module 10, in the newly-built connections of multiple SSL, tentatively carrying out RSA calculating, records power modulus fortune high
Power modulus data high needed for calculating；
Computing management module 20, for by power modulus data encoding high be waiting task, and by coding after it is pending
If task is divided into dry-cure batch；
First computing module 30, for calling power modulo operation device high by batch processed waiting task, takes to power high
Modulus evidence is calculated.
When the newly-built connections of multiple SSL are carried out, because operand is larger, carries out computing using CPU and be extremely difficult to high-performance
Requirement, thus, in the present embodiment, the power modulo operation high of the newly-built connections of multiple SSL is integrated into a collection of computing, i.e., many
, it is necessary to when carrying out RSA encryption and decryption computings, RSA meters tentatively be carried out first after the completion of the early stage logical process of the individual newly-built connections of SSL
Calculate, that is, carry out following calculating：1st, data to be decrypted are converted into big integer according to binary value, this big integer is designated as
I；2nd, I is calculated to the value of p modulus, Ip is designated as, and wherein p is first prime factor of public key n；3rd, values of the I to q modulus, note are calculated
It is Iq, wherein q is second prime factor of public key n.Big integer Ip and Iq are exactly the data for needing to carry out power modulo operation high,
During preliminary RSA is calculated, data recordin module 10 records that multiple SSL are newly-built to be connected to needed for power modulo operation process high
Power modulus data high, these power modulus data high are not calculated by CPU.
After power modulus data high needed for have recorded all power modulo operation processes high, that is, record all big integer Ip and
After Iq, these power modulus data encodings high are unified form by computing management module 20, will its be encoded to waiting task,
If all waiting tasks that will then be formed after coding are divided into dry-cure batch, i.e., when power modulo operation high is carried out, to dividing
Treatment batch after batch carries out calculation process successively.So, all of power modulo operation high can all be arranged at certain a collection of task
In.
If after pending task after by coding is divided into dry-cure batch, the first computing module 30 calls power modulus high
Arithmetic unit, is processed each treatment batch successively, i.e., the power modulus data high for being recorded are calculated.The present embodiment
In, power modulo operation device high can be graphic process unit GPU, or FPGA (Field-Programmable Gate Array,
Field programmable gate array), or designed, designed can substitute GPU and FPGA for processing high-volume quantity computing
Special chip, carry out the computing of power modulus data high.
The present embodiment by the newly-built connections of SSL, tentatively carrying out RSA calculating, the height needed for recording power modulo operation high
Power modulus data, are waiting task by power modulus data encoding high, and if the waiting task after coding is divided into dry-cure
Batch；Call power modulo operation device high by batch processed waiting task, power modulus data high are calculated.Using power high
Modulo operation device is calculated power modulus data high, effectively reduces the computational load of CPU, newly-built so as to improve SSL
The performance of connection.
Reference picture 7, Fig. 7 is the structural representation of the computing management module of the processing unit of the newly-built connections of SSL of the present invention.
In upper embodiment, computing management module 20 is specifically included：
Task encoding submodule 21, for collecting power modulus data high, compiles power modulus data high according to unified form
Code is waiting task, and stores waiting task；
Task submodule 22 in batches, for the parameter according to waiting task, will be pending according to preset scheduling strategy
If task is divided into dry-cure batch.
After the power modulus data high needed for have recorded all power modulo operation processes high, task encoding submodule 21 is received
The power modulus data high that are recorded of collection, and being encoded according to unified form, will power modulus data encoding high be pending
Task, and using queue, chained list or all waiting tasks of other data structure storages.Then, task submodule 22 in batches
According to the parameter of waiting task, according to preset scheduling strategy, if all tasks are divided into dry-cure batch, to call power high
Modulo operation device calculates power modulus data high by batch.In the present embodiment, the parameter of waiting task refers to waiting task
Quantity, and postpone the parameter such as threshold value；Preset scheduling strategy refer to be divided into for the waiting task that will be stored it is some
The batch conditions of batch.
Please with reference to Fig. 8, Fig. 8 is the structure of the task submodule in batches of the processing unit of the newly-built connections of SSL of the present invention
Schematic diagram.
In the present embodiment, submodule 22 is further included task in batches：
Condition setting unit 221, for the quantity according to waiting task and delay situation, sets each treatment batch
Batch conditions；
Task unit 222 in batches, for being carried out the waiting task of storage according to batch conditions in batches, to be divided into some places
Reason batch.
When if waiting task is divided into dry-cure batch, condition setting unit 221 is first according to waiting task
Quantity and delay situation, i.e. the delay situation of the quantity of the waiting task according to storage, and each waiting task, are set
The batch conditions of each treatment batch, then, all waiting tasks are divided into phase to task by unit 222 according to batch conditions in batches
Answer the treatment batch of quantity.
In the present embodiment, the setting of following several batch conditions is enumerated, and entered waiting task according to batch conditions
Row method in batches：
1st, it is n to set each treatment batch task amount threshold, when the quantity of the waiting task for being stored is more than or equal to n
When, these waiting tasks are divided into same treatment batch, carry out power modulo operation high, and the waiting task that will be stored note
Record is emptied, to continue to collect waiting task.
2nd, it is t to set waiting task stand-by period upper limit threshold, when the stand-by period of the waiting task of oldest stored
When having exceeded t milliseconds, all waiting tasks that will be stored before are divided into same treatment batch, carry out power modulo operation high, and
The record of the waiting task of storage is emptied, to continue to collect waiting task.
3rd, the waiting task amount threshold for setting each treatment batch is n, while it is t also to set the stand-by period upper limit.
When the quantity of the waiting task of storage is exceeded more than equal to n, or the stand-by period of the waiting task of oldest stored exceedes
At t milliseconds, all waiting tasks that will be stored before are divided into same treatment batch, carry out power modulo operation high, and will deposit
The record of the waiting task of storage is emptied, to continue to collect waiting task.
4th, the quantity with reference to waiting task and stand-by period, the waiting task quantity of each treatment batch is set
Weight Wn, while it is Wt also to set stand-by period weight, setting total score threshold value S.Waiting task quantity * Wn+ when storage etc.
Treat time * Wt>During S, all waiting tasks for storing are divided into same treatment batch, carry out power modulo operation high, and will deposit
The record of the waiting task of storage is emptied, to continue to collect waiting task.
5th, when each power modulo operation high starts, report computing starts, and report computing stops when computing is completed.If queue
It is middle pending in the presence of at least one waiting task etc., while now do not carrying out power modulo operation high, then at once will storage
All waiting tasks be divided into same treatment batch, carry out power modulo operation high, and the waiting task that will be stored record
Empty, to continue to collect waiting task.
6th, record the stand-by period t1 of each waiting task, t2 ... tn.Preset a function of many variables f (t1,
T2...tn) as scheduling function, if a certain moment f (t1, t2...tn)>0, k=f (t1, t2...tn) is made, by oldest stored
K waiting task be divided into same treatment batch, carry out power modulo operation high, and by k scheduled waiting task
Record purge, to continue to collect waiting task.On this basis, it is also possible to consider network throughput, system at that time
The parameters such as power consumption, the heat condition of power modulo operation device high, design more complicated scheduling function and are scheduled.
After the power modulus data high needed for have recorded all power modulo operation processes high, power modulus data high are collected,
According to unified form by power modulus data encoding high be waiting task；Quantity and delay situation according to waiting task,
The batch conditions of each treatment batch are set, and are carried out the waiting task of storage according to batch conditions in batches, being divided into some
Treatment batch, so as to improve the operational performance of power modulo operation device high, and further increases the property of the newly-built connections of SSL
Energy.
Reference picture 9, Fig. 9 is the structural representation of the processing unit second embodiment of the newly-built connections of SSL of the present invention.
On the basis of the processing unit first embodiment of the newly-built connections of SSL of the present invention, the device also includes：
Suspension module 40, for hanging up the newly-built connections of multiple SSL.
In the present embodiment, RSA calculating is carried out preliminary, and the power modulus data high needed for having recorded power modulo operation high
Afterwards, suspension module 40 hangs up the newly-built connections of SSL, to wait power modulo operation high to complete, after the completion of power modulo operation high,
Then continue the process of the newly-built connections of SSL.
Reference picture 10, Figure 10 is the structural representation of the processing unit 3rd embodiment of the newly-built connections of SSL of the present invention.
On the basis of the processing unit first embodiment of the newly-built connections of SSL of the present invention, the device also includes：
Second computing module 50, calculates for other data to RSA encryption and decryption computings.
After the completion of power modulo operation high, continue the process of the newly-built connections of SSL, the second computing module 50 is to RSA encryption and decryption
Other data of computing are calculated, so as to complete the newly-built connections of SSL, this part is calculated and can be calculated by CPU, it is also possible to
Calculated by power modulo operation device high.Complete following steps：1st, the result of power modulus high is converted into two big integers,
Rp and Rq is designated as, the value of decrypted result mould p and mould q is represented respectively, wherein p and q is two prime factors of public key n；2nd, in use
State's remainder theorem, the value of final result mould n is calculated by Rp and Rq；3rd, result is decoded and effect, is decoded and effect
Algorithm is relevant with the data filling mode that SSL is selected.So, just realize in the newly-built connection procedures of SSL, by power modulus high
Arithmetic unit etc. completes power modulo operation high, and after the completion of power modulo operation high, it is complete by CPU or high power modulo operation devices
The calculating of other data of paired RSA encryption and decryption computings.
The preferred embodiments of the present invention are the foregoing is only, the scope of the claims of the invention, every utilization is not thereby limited
Equivalent structure or equivalent flow conversion that description of the invention and accompanying drawing content are made, or directly or indirectly it is used in other correlations
Technical field, be similarly included in scope of patent protection of the invention.
Claims (8)
1. the processing method of the newly-built connections of a kind of SSL, it is characterised in that including step：
In the newly-built connections of multiple SSL, RSA calculating is tentatively carried out, the power modulus data high needed for recording power modulo operation high；
It is waiting task by the power modulus data encoding high；
Quantity and delay situation according to the waiting task, set the batch conditions of each treatment batch, wherein, described point
Note of instruction part includes：Setting waiting task quantity weight Wn, while it is Wt also to set stand-by period weight, sets total score threshold value S,
As the waiting task quantity * Wn+ stand-by period * Wt of storage>During S, all waiting tasks for storing are divided into same treatment
Batch；Or, record the stand-by period t1 of each waiting task, t2 ... tn；Preset a function of many variables f (t1,
T2...tn) as scheduling function, if a certain moment f (t1, t2...tn)>0, k=f (t1, t2...tn) is made, by oldest stored
K waiting task be divided into same treatment batch；
The waiting task for storing is carried out in batches according to the batch conditions, if being divided into dry-cure batch；
Power modulo operation device waiting task as described in batch processed high is called, the power modulus data high are calculated.
2. the processing method of the newly-built connections of SSL according to claim 1, it is characterised in that described by power modulus data high
The step of being encoded to waiting task specifically includes：
Collect the power modulus data high, according to unified form by the power modulus data encoding high be waiting task, and
Store the waiting task.
3. the processing method of the newly-built connections of SSL according to claim 1 and 2, it is characterised in that record power high and take described
After the step of power modulus data high needed for modular arithmetic, also including step：
Hang up multiple newly-built connections of the SSL.
4. the processing method of the newly-built connections of SSL according to claim 1 and 2, it is characterised in that call power high to take described
Modulo device waiting task as described in batch processed, the step of calculate the power modulus data high after, also wrap
Include：
Other data to RSA encryption and decryption computings are calculated.
5. the processing unit of the newly-built connections of a kind of SSL, it is characterised in that including：
Data recordin module, in the newly-built connections of multiple SSL, tentatively carrying out RSA calculating, needed for recording power modulo operation high
Power modulus data high；
Computing management module, for being waiting task by the power modulus data encoding high；
Condition setting module, for the quantity according to the waiting task and delay situation, sets dividing for each treatment batch
Note of instruction part, wherein, the batch conditions include：Setting waiting task quantity weight Wn, while also setting stand-by period weight
It is Wt, sets total score threshold value S, as the waiting task quantity * Wn+ stand-by period * Wt of storage>During S, by store need located
Reason task is divided into same treatment batch；Or, record the stand-by period t1 of each waiting task, t2 ... tn；Set in advance
A function of many variables f (t1, t2...tn) is determined as scheduling function, if a certain moment f (t1, t2...tn)>0, make k=f (t1,
T2...tn), k waiting task of oldest stored is divided into same treatment batch；
Task module in batches, for by the waiting task for storing, be divided into some according to the batch conditions in batches
Treatment batch；
First computing module, for calling power modulo operation device waiting task as described in batch processed high, to the power high
Modulus data are calculated.
6. the processing unit of the newly-built connections of SSL according to claim 5, it is characterised in that the computing management module, also
For collecting the power modulus data high, according to unified form by the power modulus data encoding high be waiting task, and
Store the waiting task.
7. the processing unit of the newly-built connections of SSL according to claim 5 or 6, it is characterised in that also include：
Suspension module, for hanging up multiple newly-built connections of the SSL.
8. the processing unit of the newly-built connections of SSL according to claim 5 or 6, it is characterised in that also include：
Second computing module, calculates for other data to RSA encryption and decryption computings.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310574743.5A CN103561041B (en) | 2013-11-15 | 2013-11-15 | The treating method and apparatus of the newly-built connections of SSL |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310574743.5A CN103561041B (en) | 2013-11-15 | 2013-11-15 | The treating method and apparatus of the newly-built connections of SSL |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103561041A CN103561041A (en) | 2014-02-05 |
| CN103561041B true CN103561041B (en) | 2017-05-31 |
Family
ID=50015191
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201310574743.5A Active CN103561041B (en) | 2013-11-15 | 2013-11-15 | The treating method and apparatus of the newly-built connections of SSL |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103561041B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109389286B (en) * | 2018-09-03 | 2022-11-18 | 阿里巴巴集团控股有限公司 | Business processing, scheduling and batching method, device, equipment and medium |
Family Cites Families (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN100422893C (en) * | 2004-12-01 | 2008-10-01 | 上海宝信软件股份有限公司 | Control Method Based on Task Queue |
| CN101273885B (en) * | 2007-03-26 | 2010-12-01 | 深圳迈瑞生物医疗电子股份有限公司 | Method and system of monitor screen remote indication |
| CN101599828A (en) * | 2009-06-17 | 2009-12-09 | 刘霁中 | A kind of encipher-decipher method of RSA efficiently and coprocessor thereof |
| CN102118261B (en) * | 2009-12-30 | 2014-11-26 | 上海中兴软件有限责任公司 | Method and device for data acquisition, and network management equipment |
| CN102253821A (en) * | 2011-04-12 | 2011-11-23 | 深圳市蓝韵实业有限公司 | Data transmission processing method in ultrasonic diagnostic equipment |
| CN102299843B (en) * | 2011-06-28 | 2015-01-07 | 北京安天电子设备有限公司 | Network data processing method based on graphic processing unit (GPU) and buffer area, and system thereof |
| CN102637214B (en) * | 2012-04-28 | 2014-05-07 | 中国工商银行股份有限公司 | Method and system for synchronizing general data among database services |
| CN102707924B (en) * | 2012-05-02 | 2015-06-10 | 广州中大微电子有限公司 | RSA coprocessor for RFID (radio frequency identification device) intelligent card chip |
| CN102905311B (en) * | 2012-09-29 | 2015-07-15 | 北京傲天动联技术股份有限公司 | Data-message aggregating device and method |
| CN103107879B (en) * | 2012-12-21 | 2015-08-26 | 杭州晟元芯片技术有限公司 | A kind of RAS accelerator |
-
2013
- 2013-11-15 CN CN201310574743.5A patent/CN103561041B/en active Active
Also Published As
| Publication number | Publication date |
|---|---|
| CN103561041A (en) | 2014-02-05 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102779075B (en) | Method, device and system for scheduling in multiprocessor nuclear system | |
| CN102004670B (en) | Self-adaptive job scheduling method based on MapReduce | |
| CN105808328B (en) | The methods, devices and systems of task schedule | |
| CN107704269A (en) | A kind of method and system based on block chain generation block | |
| CN106802826A (en) | A kind of method for processing business and device based on thread pool | |
| CN107957903A (en) | Asynchronous task scheduling method, server and storage medium | |
| CN107656813A (en) | The method, apparatus and terminal of a kind of load dispatch | |
| CN110221914B (en) | File processing method and device | |
| CN112214299B (en) | Multi-core processor and task scheduling method and device thereof | |
| CN109324983A (en) | A kind of method, storage medium, equipment and the system of automatic cleaning cache file | |
| CN114283007B (en) | Method and device for solving payment hotspot account problem and electronic equipment | |
| CN108052396A (en) | A kind of resource allocation methods and system | |
| CN102073547B (en) | Performance optimizing method for multipath server multi-buffer-zone parallel packet receiving | |
| CN106201443A (en) | A kind of method and system based on the Storm how concurrent written document of streaming Computational frame | |
| WO2019061647A1 (en) | Queue message processing method and device, terminal device and medium | |
| CN106484459A (en) | It is applied to flow control method and the device of JavaScript | |
| CN107102897A (en) | A kind of database active defense method of many GPU parallel processings | |
| CN109325603A (en) | Fault request processing method, device and terminal device | |
| CN103956991B (en) | A kind of FIR filtering Parallel Realization methods based on CPU/GPU heterogeneous platforms | |
| CN103561041B (en) | The treating method and apparatus of the newly-built connections of SSL | |
| CN108572872B (en) | Resource management method based on FPGA reconfigurable technology | |
| CN110505655A (en) | Data command processing method, storage medium and bluetooth shield | |
| WO2018055507A1 (en) | Scheduling of tasks in a multiprocessor device | |
| CN115543613A (en) | Data processing method and device, electronic equipment and storage medium | |
| CN119960982A (en) | A task dispatching method, device, equipment and medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20200616 Address after: Nanshan District Xueyuan Road in Shenzhen city of Guangdong province 518000 No. 1001 Nanshan Chi Park building A1 layer Patentee after: SANGFOR TECHNOLOGIES Inc. Address before: 518000 Nanshan Science and Technology Pioneering service center, No. 1 Qilin Road, Guangdong, Shenzhen 418, 419, Patentee before: Shenxin network technology (Shenzhen) Co.,Ltd. |
|
| TR01 | Transfer of patent right |