A system and method for trusted data storage

Abstract

The invention discloses a system and method for trusted storage of data. The system mainly comprises four logical entities, namely, a trusted management center, an application server, a storage virtualization security gateway and a rear-end storage system. The trusted management center serves as a configuration and management entity for a trusted strategy. The application server serves as an entity sending a data access request. The storage virtualization security gateway serves as an entity receiving the data request of an application layer and achieving mapping of a virtual port, converting of a virtual storage device address and a physical storage device address and encapsulating of an IO request through the virtualization technology. The rear-end storage system provides a physical medium for data storage and operation. On the basis of the storage virtualization technology, a data access control flow in the trusted technology is provided for the storage virtualization security gateway or an agent layer so that strict security check and control can be carried out on an access request for a storage system, and illegal access or vicious data access operation can be prevented.

Description

technical field [0001] The invention relates to the field of information security in information technology, in particular to a system and implementation method for trusted storage of data. Background technique [0002] The emergence of cloud computing application mode and the application of storage virtualization technology bring new risks to the data security access of the back-end storage system. First, relatively closed storage systems are more likely to be exposed to external network attack environments, while traditional network-based security methods are easily bypassed or breached. Secondly, after the storage server, application server, and network equipment connected to the storage system are compromised, they can easily be used as a springboard for attacks, threatening the back-end storage system with damage. [0003] Usually, when the data access subject initiates an access request, the traditional access control method only judges according to whether the access...

AI Technical Summary

Problems solved by technology

Often the practicability of complex key management will be reduced, and simple key management can be easily broken

Therefore, key management tends to be a weak point of such schemes

Key configuration and human errors can easily cause problems such as low key strength and key leakage

Images