System and method for realizing security storage and access control of data

Abstract

The invention discloses a system and method for realizing the security storage and the access control of data. The system comprises an application server, a storage security gateway, a security strategy server and a backend storage system, wherein the storage security gateway is additionally arranged between the application server and the backend storage system so as to realize the partition, the isolation and the access control of data security domains. The storage security gateway and a storage virtualization gateway can synergistically work, and data can be stored in the manner of the security domains on an actual physical medium by utilizing a virtualization technique. When a data access request arrives at the storage virtualization gateway, the storage virtualization gateway can invoke the functions of the storage security gateway so as to realize the isolation and the access control of the data security domains. Because all data requests for access to the backend storage system can be processed by the storage security gateway, security control is guaranteed to be performed on the single path of data without being bypassed. In addition, security control is realized at the bottom layer of data access, so that attack means to data by upper application layers can be effectively avoided.

Description

technical field [0001] The invention relates to the field of storage security in information technology, in particular to a system and a method for ensuring the safe storage and access control of key data. Background technique [0002] With the development of cloud computing technology and the wide application of virtualization technology in storage systems, the physical storage media of storage systems are unified to provide services in the form of resource pools. The virtualization technology shields the details of the underlying data storage, so that the physical location of the data is independent of the logical location, and the user can obtain a virtual storage space larger than the actual storage capacity, and the user only needs to care about the data representation in the application layer. without having to deal with the details of the underlying storage. However, the application of virtualization technology also brings data security risks. Application layer data...

AI Technical Summary

Problems solved by technology

[0012] From the above analysis, it can be seen that the existing data security technology does not solve the security problem of mixed storage of data with different sensitive levels brought about by the application of virtualization technology.

Images