Multitask security isolation system and method under virtual-real interconnected environment of cloud platform

Abstract

The invention provides a multitask security isolation system and method under a virtual-real interconnected environment of a cloud platform to solve the technical problem existing in the prior art that the unified management of multiple virtual and physical resources and the task security isolation cannot be implemented at the same time. The system comprises a task flow identification module for identifying different tasks, an access control module creating task resources according to the task identification, a task isolation module for security isolation between the tasks and between the resources, and a resource management module for unified management of the securely isolated resources. The implementing steps are as follows: the task flow label module adds a security label to a task and required resources thereof; the access control module verifies user identity and authority information and applies for the virtual and physical resources required by the task; the access control module performs network isolation and virtual resource isolation on the resources applied for the task; and the resource management module performs unified management on the securely isolated virtual and physical resources in the cloud platform and assigns the resources required by the task to the task.

Description

technical field [0001] The invention belongs to the field of information technology, and relates to a multi-task security isolation system and method in a cloud platform virtual-real interconnection environment, which can be used in the cloud computing platform to isolate private resources used by users. Background technique [0002] Cloud computing is a kind of distributed computing technology. Its most basic concept is to automatically split a huge computing processing program into countless smaller subroutines through the network, and then hand it over to a huge system composed of multiple servers. After searching, calculation and analysis, the processing results are sent back to the user. Through this technology, network service providers can process tens of millions or even billions of information in a few seconds, and achieve network services with the same powerful performance as supercomputers. Therefore, the cloud computing service platform is the development of appl...

AI Technical Summary

Problems solved by technology

[0006] The purpose of the present invention is to overcome the deficiencies in the above-mentioned prior art, and propose a multi-task security isolation system and method under the virtual-real interconnection environment of the cloud platform, which is used to solve the problem in the prior art that it is impossible to simultaneously realize multiple virtual and physical Unified management of resources and technical issues of task security isolation, and solving the problem of poor isolation of virtual resources

Images