Data sharing and access control method based on Xen

Abstract

The invention provides a data sharing and access control method based on Xen, comprising a data sharing system, an access control system and a virtual disc control system, wherein, the data sharing system performs data sharing for the same shared virtual disc by the way that a plurality of virtual client operation systems are operated on an Xen virtual machine; the access control system is respectively arranged in an Xen host system and a client system, and the control mode thereof is that the client system actively communicates with the host system to notice the virtual disc control system to control the dynamic access of the shared virtual disc; and the virtual disc control system controls the read-write access of the virtual disc, which ensures that a client operation system has operation of different accesses for the shared virtual disc to realize the access control of shared data.

Description

technical field [0001] The invention belongs to the field of information security access control, in particular to a Xen-based data sharing and access control method. technical background [0002] Xen is a virtual machine monitor that runs directly on the hardware device. The operating system runs on the Xen virtual machine monitor. The Linux operation with Xen patches is used as the host system to provide a running platform for Xen. The host system can create and manage multiple virtual guest operating systems such as Windows, Linux, etc. Multiple virtual guest systems are isolated between domains and share their own network environment, and the guest systems have good isolation. [0003] Traditional data sharing methods include network-based data sharing, shared memory data sharing, and mobile storage data sharing. Network data sharing is widely used and flexible in operation, but it relies on a complex network environment and low security; shared memory data sharing is m...

AI Technical Summary

Problems solved by technology

[0005] At present, there are many inconveniences and potential safety hazards in the data sharing between client systems based on the Xen full virtual environment: 1. Multiple client systems are isolated between domains and have their own network environments. The common way of passing through the network is not suitable for Xen virtual machines Data sharing between multiple client systems in the environment; 2. The data sharing method of shared memory is often used for multiple processes in one system to share data, and the amount of shared data is limited, which is also not suitable for the Xen virtual machine environment; 3. Ordinary The data sharing method based on virtual disk and mobile storage has better usability and work efficiency, but there is no guarantee for the security of the shared data; 4. The traditional data sharing method does not detect the content of the shared data, and the The access control permissions of shared data are not restricted, which makes the security of shared data unable to be guaranteed

5. The traditional Xen client system data sharing method does not have the client system's active request to open and close the virtual disk mechanism, which makes it impossible for the client system to disable its confidential data sharing urgently, and the client lacks active protection for its shared data

Therefore, there are many hidden dangers in the flexibility and security of data sharing among multiple client systems based on the Xen virtual machine environment

Images