Key management method based on io block encryption of array

Abstract

The invention provides an array key management method based on IO block encryption. The method concretely includes the steps that a secret key handle chain pool is generated in array internal storage, when a new secrete key is adopted for encryption, and whether the number of handles in the secret key handle chain pool is smaller than a limit value or not is judged; if the number of the handles in the secret key handle chain pool is smaller than the limit value, a handle will be generated and inserted into a root node, and then one is added to the number of the handles; if the number of the handles in the secret key handle chain pool is not smaller than the limit value, a final tail node is deleted, then, a handle is generated and inserted into the root node, next, the new secrete key is introduced to a hardware encrypting device to generate a handle, and finally the generated handle is inserted into a head node of the secrete key handle chain; meanwhile, a latest access array is numbered according to IO, the latest access array and the secrete key are inserted into a fast search tree with the IO serial number as key words, and the incidence relation between the latest access array and the secrete handle chain is reserved; when data are read, the corresponding secret key can be fast searched for according to the IO serial number, a secrete key handle is obtained according to the corresponding operation of the handle chain, and finally, the decrypted data are returned.

Description

technical field [0001] The invention relates to a key management method based on IO block encryption of an array, in particular to a key management method applicable to an array based on IO block encryption in the field of information security. Background technique [0002] With the continuous advancement of informatization construction, there is an increasing demand for various industries, enterprises and institutions to use computer systems and computer network technologies to process and store key business data. However, the method of data storage through the network is different from the traditional storage method of physical isolation of data. Network storage places data in a network environment, which increases the risk of illegal access, theft and abuse of these data. [0003] For storage array systems, data security issues must be resolved. The confidentiality of data involves the encryption of large amounts of data. Currently, most manufacturers adopt the SAN / NAS pr...

AI Technical Summary

Problems solved by technology

[0004] The big data storage encryption system requires high speed and high efficiency, so it cannot spend too much on key management

[0005] The system uses hardware encryption, and the encrypted key uses the key handle for cryptographic operations. Due to limited hardware resources, the number of handles is limited

Images