A key management method for a secure storage system

A technology of safe storage and safe management, which is applied in the field of safe storage and can solve problems such as not supporting domestic commercial secret algorithms

Active Publication Date: 2018-05-04
中电科网络安全科技股份有限公司
View PDF5 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

EMC's Data Domain Encryption uses centralized encryption key lifecycle management to achieve transparent encryption and decryption, but EMC's products only support the AES encryption algorithm and do not support domestic commercial encryption algorithms

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A key management method for a secure storage system

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0012] A key management method for a secure storage system, wherein: the secure storage system includes a security management center and a secure storage array, and its architecture is as follows figure 1 As shown, the security management center is the key management center of the secure storage system, which is responsible for the entire life cycle management of the keys of the entire secure storage system, and its functions are mainly realized by the proxy server program deployed therein. The secure storage array includes an array controller and a disk group. The secure storage array receives the ciphertext key data issued by the security management center, and is responsible for the construction of the key chain and secure storage. The encryption and decryption process of the secure storage system is performed in the secure storage array. (It is mainly completed by the array controller, and its functions are mainly realized by the proxy client program) It is implemented inte...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a key management method of a secure storage system, the secure storage system includes a security management center and a secure storage array; the security management center is responsible for key management, and the secure storage array includes an array controller and a disk storage unit The security management center and the array controller implement key distribution through a secure channel, and the array controller implements transparent encryption and decryption by deploying an encryption agent and a storage encryption module inside the array controller. The positive effects of the present invention are: safe and efficient; easy to use and friendly, can be seamlessly integrated with storage devices, and the interaction between business logic in the key management system follows the industry standard technology, with maintainability and scalability; supports multiple A variety of algorithms to meet different business needs, support domestic business secret algorithm and general encryption algorithm.

Description

technical field [0001] The invention belongs to the technical field of safe storage, and in particular relates to a key management method of a safe storage system. Background technique [0002] At present, there are few safe storage system products in China, mainly because the manufacturers of storage devices generally do not involve in the field of information security. Foreign NetApp's DecruDataFort equipment is an enterprise-level storage encryption system. The technical route it adopts is to encrypt all data through the gateway and store it to the backend. Network encryption performance has become an important performance bottleneck. EMC's Data Domain Encryption uses centralized encryption key lifecycle management to achieve transparent encryption and decryption, but EMC's products only support the AES encryption algorithm and do not support domestic commercial encryption algorithms. [0003] Therefore, the key to developing a safe and efficient secure storage system is...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & AuthorityPatents(China)
IPC IPC(8): H04L9/08H04L29/06
Inventor尹一桦王斯梁
Owner中电科网络安全科技股份有限公司