Safety communication among virtual machines in cloud computing framework

Abstract

Provided is a method used for building a virtual machine of a user in a cloud computing framework. The method used for building the virtual machine of the user in the cloud computing framework comprises receiving a request for building the virtual machine from a tenant built by the user, responding to the request, and building the virtual machine of the user; and recording mapping between an identifier of the built virtual machine and a identifier of the tenant of the virtual machine in a mapping table. Due to the facts that the virtual machine is built, and the mapping between the identifier of the virtual machine and the identifier of the tenant of the virtual machine is recorded at the same time, relevance between the virtual machine and the tenant can be built, and safe communication among virtual machines can be provided. In addition, the invention further provides a corresponding device, and a method and a device used for controlling the safety communication among the virtual machines in the cloud computing framework.

Description

technical field [0001] The present invention relates to the technical field of cloud computing, in particular to a method and device for creating a user's virtual machine in a cloud computing architecture and a method and device for controlling secure communication between virtual machines in a cloud computing architecture. Background technique [0002] In recent years, cloud computing technology is developing rapidly. Cloud computing is an Internet-based computing method, through which shared hardware and software resources and information can be provided to users on demand. [0003] figure 1 A schematic diagram showing an example of an existing cloud computing architecture. like figure 1 As shown, the infrastructure layer uses virtualization, database storage and other technologies to prepare the required computing and storage resources for the middle layer, and the middle layer uses multi-tenant (tenant) technology to enable individual applications to serve multiple or...

AI Technical Summary

Problems solved by technology

However, since virtual machines belonging to the same type of tenants can communicate without executing security policies, there are malicious users who create virtual machines belonging to a certain type of tenants to attack other virtual machines belonging to the same type of tenants and Risks of Obtaining Corresponding Tenant Data

[0008] In addition, the existing security mechanism for communication between virtual machines is set according to the security policy of the cloud provider or service provider, and users cannot actively customize the required security level according to their security needs to protect its web resources

For example, for tenant A and tenant B belonging to the same type, if user A wants to request a high security level to protect tenant A's data, the existing security mechanism cannot assign more security to tenant A's data according to user A's request The data storage area of ​​the tenant A cannot perform high-level security access control on the virtual machine requesting to communicate with the virtual machine belonging to tenant A according to the request of user A, but can only set the tenant according to the security policy of the cloud provider or service provider A's security mechanism

Images