Remote mirror image method and system based on iSCSI

Abstract

The invention discloses a remote mirror image method and system based on iSCSI. The method comprises the steps that: a client stores critical application data in a local storage device, copies a copy of critical application data and sends a copy text of the critical application data to an encryption middleware; the encryption middleware encrypts the copy text to generate a data ciphertext and sends the data ciphertext to a remote server through an IP network; and the remote server stores the data ciphertext in an iSCSI disk array to serve as mirror image data. The method is used for guaranteeing the transmission and storage security of network data and improving the reading and writing performance of the system.

Description

technical field [0001] The invention relates to the technical field of remote mirroring, in particular to an iSCSI-based remote mirroring method and system. Background technique [0002] Informatization construction promotes the development of data assets. In order to protect the security of information, the Internet small computer system interface iSCSI remote mirroring technology is used in the data disaster recovery system. iSCSI uses the standard TCP / IP protocol to integrate the existing SCSI interface with Ethernet technology. In combination, SCSI data and commands are transmitted on the IP network, so the attack methods on the ordinary IP network are applicable to the iSCSI environment, and the attacker can also steal the data stored in the storage device through remote disaster recovery backup or data mirroring, such data Storage security is low. Traditional data protection involves encrypting data on communication lines and storage devices, which are encrypted and d...

AI Technical Summary

Problems solved by technology

[0002] Informatization construction promotes the development of data assets. In order to protect the security of information, the Internet small computer system interface iSCSI remote mirroring technology is used in the data disaster recovery system. iSCSI uses the standard TCP / IP protocol to integrate the existing SCSI interface with Ethernet technology. In combination, SCSI data and commands are transmitted on the IP network, so the attack methods on the ordinary IP network are applicable to the iSCSI environment, and the attacker can also steal the data stored in the storage device through remote disaster recovery backup or data mirroring, such data Storage security is low

Traditional data protection is to encrypt data on communication lines and storage devices, all of which are encrypted and decrypted based on the application host, resulting in increased load on the server and client, and low read and write performance of the system

Images