Special data encryption method and encryption card suitable for xen virtualization environment
A technology of data encryption card and virtualization environment, which is applied in the field of special data encryption method and encryption card, can solve the problem of low efficiency of encryption card hardware use, and achieve the effect of improving use efficiency and high data security
Inactive Publication Date: 2019-04-12
NAT COMP NETWORK & INFORMATION SECURITY MANAGEMENT CENT
View PDF1 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0003] However, currently in a virtualized environment, one encryption card hardware can only be used by one virtual machine; there is a problem of low efficiency in the use of encryption card hardware
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0027] The present invention is described in detail below in conjunction with accompanying drawing:
[0028] Such as figure 1 As shown, the present invention provides a kind of special-purpose data encryption method applicable to Xen virtualization environment, comprises the following steps:
[0029] S1. According to the configuration rules, map the hardware of the data encryption card into multiple independent buffer resource pools, and one end of each buffer resource pool uniquely corresponds to one virtual machine; the other end of the buffer resource pool uniquely corresponds to one Group input queue and output queue.
[0030] In practical applications, each data encryption card can store a configuration table, which is used to store the unique correspondence between virtual machine ID, buffer resource pool ID and input / output queue ID. Therefore, whenever the data encryption card receives data from When a virtual machine requests business processing, the configuration t...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention provides a special data encryption method and an encryption card suitable for Xen virtualized environment. The encryption card comprises an access control unit, a data distribution unit, a queue processing unit and a business processing unit, the data distribution unit is used for mapping hardware of the data encryption card to be multiple independent buffer resource pools, one end of each buffer resource pool uniquely corresponds to a virtual machine, the queue processing unit is used for establishing an input queue and an output queue which uniquely correspond to each buffer resource pool, the input queues are used for receiving encryption business requests from the uniquely-corresponding buffer resource pools and sending the encryption business requests to the business processing unit sequentially,and the output queues are used for sequentially returning received encryption business response from the business processing unit to the uniquely-corresponding buffer resource pools. Multiple virtual machines share one encryption card which is hardware, so that using efficiency of the encryption card is improved, and the encryption card has the advantage of high data safety.
Description
technical field [0001] The invention belongs to the technical field of cloud computing, and in particular relates to a special data encryption method and an encryption card suitable for a Xen virtualization environment. Background technique [0002] The encryption card is a special plug-in cryptographic device that provides encryption services for PCs. It usually provides various security and confidentiality services for computer application systems through the application program interface API, such as: data encryption, digital signature, information integrity verification, identity Authentication and access control, etc., are mainly used in e-government, e-commerce, e-finance and other industries. By installing a special encryption card on the computer and the external communication interface, it can ensure that the data output by the computer is processed by the encryption card and is difficult to be stolen and interpreted by attackers on the network; at the same time, on...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): G06F21/34
Inventor 彭义刚石旭鲁松张良姜杨
Owner NAT COMP NETWORK & INFORMATION SECURITY MANAGEMENT CENT