A cryptographic machine, implementation and working method based on container virtualization technology

Abstract

The invention belongs to the technical field of information security codes, and in particular provides a container virtualization technology based cipher machine, an implementation method and a working method therefor. The invention, aims to solve the problems existing in the prior art, by providing the container virtualization technology based cipher machine, the implementation method and the working method therefor, used for improving resource utilization rate of equipment, improving high availability of the cipher equipment, and enhancing the on-demand service ability of the equipment. The implementation method for the container virtualization technology based cipher machine comprises the steps of decompressing and installing a vHSM mirror image to a catalogue of an assigned target physical cipher machine through a vHSM management module; performing vHSM container configuration and application configuration, assigning the hardware resource quota for the vHSM; performing vHSM application configuration through the vHSM management module, and assigning the operation setting of the vHSM cipher machine application; and establishing the vHSM by the vHSM management module based on the vHSM container configuration and the application configuration, and operating the vHSM.

Description

technical field [0001] The invention belongs to the technical field of information security encryption, in particular to an encryption machine based on container virtualization technology, its implementation and its working method. Background technique [0002] Container virtualization technology is a lightweight operating system virtualization method supported by the Linux kernel. It provides virtualization functions with operating efficiency close to physical machines. Compared with traditional virtualization technologies, it has the ability to share the kernel with the host machine, start Fast speed, minimal performance loss and so on. Container virtualization technology uses technologies such as NameSpace and CGroup provided by the Linux kernel to provide an independent virtual operating environment for applications, and realizes security isolation between containers and resource control of each container. Among them, the NameSpace technology realizes the security isola...

AI Technical Summary

Problems solved by technology

In the actual application process of cipher machine, a single cipher device provides limited cipher services in a specific production environment, the service type is single, and the resource utilization rate is low

When other cryptographic services are needed, usually the service can only be provided by adding corresponding cryptographic devices instead of reusing the original cryptographic devices, resulting in further waste of resources

Images