System-on-chip for performing virtual private network function and system including the same
Provided is a system-on-chip that may perform a message encryption operation based on a transport layer security (TLS) scheme. The system-on-chip may include an authentication unit configured for exchanging a key used for the message encryption operation and performing authentication for a subject to perform communication, an advanced encryption standard (AES) engine core configured for performing a function of encrypting a message using a key or decrypting the encrypted message and a function of encrypting the key or decrypting the encrypted key, and a controller configured for controlling the AES engine core and the authentication unit based on a real time operating system (RTOS) and firmware for performing the message encryption operation.
1. A system-on-chip for performing a message encryption operation based on a transport layer security (TLS), the system-on-chip comprising:
an authentication unit configured for exchanging a key used for the message encryption operation and performing authentication for a subject to perform communication;
an advanced encryption standard (AES) engine core configured for performing a function of encrypting a message using the key or decrypting the encrypted message; and
a controller configured for controlling the AES engine core and the authentication unit based on a real time operating system (RTOS) and firmware for performing the message encryption operation,
wherein the firmware includes a code or a function for replacing signal delivery performed in a commercial or general-purpose operating system for the message encryption operation with message delivery in the RTOS.
2. The system-on-chip of claim 1 , wherein the authentication unit includes a circuit configured for performing an elliptic curve digital signature algorithm (ECDSA) and a Rivest Shamir Adleman (RSA) algorithm.
3. The system-on-chip of claim 1 , further comprising:
a random number generator configured for generating a random number used for the message encryption operation;
a hash unit configured for hashing the message or the key; and
private key storage configured for storing a private key.
4. The system-on-chip of claim 3 , further comprising:
a micro controller unit (MCU) including the AES engine core, the random number generator, and the hash unit; and
a trusted platform module (TPM) including the authentication unit and the private key storage.
5. The system-on-chip of claim 1 , further comprising a memory,
wherein the RTOS, the firmware, and a software application for receiving an X.509 certificate are stored in the memory.
6. The system-on-chip of claim 1 , wherein information about a physical or logical address indicating a memory region at which a file is capable of being input or output is recorded in the firmware.
7. An electronic device including the system-on-chip of claim 1 .
8. A system for transmitting a message through a virtual private network, the system comprising:
a client device configured for generating the message;
a virtual private network (VPN) client configured for performing an encryption operation based on a transport layer security (TLS) on a message received from the client device through a communication channel to output an encapsulated message;
a VPN server configured for receiving the encapsulated message from the VPN client through the VPN tunnel and for decrypting the encapsulated message; and
a server configured for receiving the decrypted message from the VPN server, wherein the VPN client includes a system-on-chip for performing the encryption operation based on the TLS based on a real time operating system (RTOS) and firmware,
wherein the firmware includes a code or a function for replacing signal delivery performed in a commercial or general-purpose operating system for the encryption operation based on the TLS with message delivery in the RTOS.
9. The system of claim 8 , wherein the system-on-chip includes a micro controller unit (MCU),
wherein the MCU includes:
an advanced encryption standard (AES) engine core configured for performing a function of encrypting a message using the key or decrypting the encrypted message;
a random number generator configured for generating a random number used for the encryption operation based on the TLS; and
a hash unit configured for hashing the message or the key.
10. The system of claim 9 , wherein the system-on-chip further includes a trusted platform module (TPM),
wherein the TPM includes:
a circuit configured for performing an elliptic curve digital signature algorithm (ECDSA) and a Rivest Shamir Adleman (RSA) algorithm; and
private key storage configured for storing a private key.
11. The system of claim 8 , wherein the communication channel includes at least one of an Ethernet, a long term evolution (LTE), a universal serial bus (USB), or a wireless fidelity (WIFI).
12. The system of claim 8 , wherein the VPN client is embedded in the client device.
13. The system of claim 8 , wherein the client device is an Internet of Things device.
14. The system of claim 8 , wherein information about a physical or logical address indicating a memory region at which a file is capable of being input or output is recorded in the firmware.