Encryption copy organization method under distributed storage environment

Abstract

The invention discloses an encryption copy organization method under a distributed storage environment. In the method, the management unit data block of system data is divided into a plurality of data segments with the same size; the system carries out management by taking the block as the unit; and a client side encrypts the data by taking the data segment as the unit so as to provide finer granularity control to the data block. Because the data block is encrypted by segments, the ciphertext data segments have no dependence and can be encrypted and decrypted in parallel so as to avoid the phenomenon that read-write of small data amount brings great cost for carrying out encryption and decryption on the whole data block; for read of a large data amount, read requests are grouped, and different grouping requests are sent in parallel to each storage node maintaining a requested file data block copy; and each grouping is read in parallel to improve the efficiency of reading data. The invention realizes that the encryption technology and the copy technology are applied in the distributed storage environment. The provided encryption copy organization method greatly improves the efficiency of reading and writing data.

Description

technical field [0001] The invention belongs to the field of computer distributed storage security, and in particular relates to an organization method of encrypted copies in a distributed storage system environment. This method distributes user data to multiple storage nodes in the form of blocks, and the data of each block is segmented for encryption. At the same time, in order to improve the availability of the system, each encrypted block maintains multiple copies in multiple storage nodes. , so as to ensure high security and high availability of user data, and all data organization information is maintained by a separate metadata server. Background technique [0002] Encryption technology is usually used to ensure the confidentiality of user data. The user's private data is encrypted by a certain encryption algorithm. The user only needs to protect the security of the encryption key to ensure that the private data will not be leaked, even if a malicious attacker obtains...

AI Technical Summary

Problems solved by technology

[0006] Some researchers combine encryption technology with copy technology, encrypt data blocks of system files, and back up encrypted data to near-line or offline backup servers. This method improves data security and availability, but in When some data in the system is damaged, the backup data cannot be put into use immediately and needs to be migrated from the backup server, resulting in the system not being able to guarantee timely application services

Images