Secure storage system

Abstract

The invention discloses a secure storage system. The secure storage system comprises a storage device, and a PCIE encryption card which is in plug-in connection with a slot part of a PCIE card of the storage device, and the PCIE encryption card is used for encrypting data input into the storage device in dependence on a data encryption key stored in the PCIE encryption card. The storage device is provided with a universal PCIE card slot portion, the PCIE encryption card stored with the data encryption key is connected with the storage device, by means of the high-speed data encryption function of the encryption card, real-time encryption and decryption of a data flow are achieved, and therefore the encryption device and the storage device are fused together. Because the PCIE has a hot plug characteristic, the hot plug function of the PCIE encryption card is achieved. When the PCIE encryption card is broken down, hot replacement can be carried out conveniently, the stability and reliability of the encryption function are guaranteed, and the case that when the encryption portion is broken down, all businesses are paused can be avoided at the same time.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a safe storage system. Background technique [0002] Computer information security has always been an important topic in computer research. Since the Snowden incident, the importance of information security has risen to a higher level and has become an important part of national security. [0003] Data security includes many tasks aimed at maintaining data integrity, such as data encryption, as well as data destruction for the purpose of completely destroying data integrity. At present, information security mainly includes the following three levels of encryption implementation: direct data encryption at the application layer, encryption at the file system level, and encryption at the SAN storage network. At present, in SAN storage network encryption, encryption is mainly carried out on the network, that is, a storage encryption gateway and a key management device ...

AI Technical Summary

Problems solved by technology

The disadvantage is that it is difficult to integrate the storage business with the encryption function to the greatest extent.

In addition, since all data will flow through the encryption system, the reliability, stability and performance of the encryption system will become the bottleneck of the overall secure storage system

And once the encryption system fails, all businesses must be suspended, which is costly

[0004] Therefore, how to ensure the stability and reliability of the encryption function and at the same time avoid the situation that all services must be suspended when the encryption part fails is a technical problem that those skilled in the art need to solve at present.

Images