A data encryption method for SAN storage system with horizontal expansion function

Abstract

The invention discloses a data encryption method for an SAN storage system with a horizontal expansion function. The method comprises the application steps that a data encryption protection system is deployed and installed in advance and a manager divides idle subareas A in a storage space of the SAN storage system through a configuration management server; data encryption servers initialize the subareas A into corresponding encryption volumes Bi through utilization of keys obtained from a key management server; and the data encryption protection system externally provides SAN storage service based on the encryption volumes Bi of the data encryption servers, and the data encryption servers transmit unencrypted plaintext data with an application server and transmit encrypted data with the SAN storage system. The method has the advantages of horizontal expansion, high performance, and high reliability and low-delay and high-reliability demands for encrypting and storing the data can be satisfied and improved.

Description

technical field [0001] The invention relates to the field of safe storage, in particular to a high-performance, high-reliability data encryption method for a SAN storage system with a horizontal expansion function. Background technique [0002] At present, storage technology is constantly improving, and the SAN storage system based on the storage area network (SAN) architecture has become the mainstream choice for enterprise-level storage. The SAN storage system mainly uses Fiber Channel (FC-SAN) or Ethernet (IP-SAN) to connect server hosts to store data in a centralized manner, which can improve the efficiency of users' IT systems and reduce data operation and maintenance costs. [0003] Such as figure 1 As shown, in the current SAN storage system, the application server's access to the SAN storage system is in the form of plain text, which inevitably has potential security risks. Therefore, while SAN storage systems are widely used, in order to ensure the security of dat...

AI Technical Summary

Problems solved by technology

[0003] like figure 1 As shown, in the current SAN storage system, the application server's access to the SAN storage system is in the form of plain text, which will inevitably pose a security risk

Therefore, while SAN storage systems are widely used, in order to ensure the security of data storage, there are currently methods for encrypting stored data, but the existing methods cannot be extended horizontally, resulting in only one or more data encryption protection servers Serial operation, resulting in low encryption and decryption performance, high latency, poor user experience, and the risk of encrypted data corruption

Images