Flow processing system and method oriented on cloud storage data encryption and decryption

Abstract

The invention discloses a flow processing system oriented on cloud storage data encryption and decryption. TCP connection is established with a client side and a cloud storage server side separately;the system comprises two ring buffer areas including a buffer area from the client side to a server and a buffer area from the server to the client side; the buffer area from the client side to the server is used for processing two non-blocking socket IO events including a socket readable event of the client side and a socket writable event of the cloud storage server side; when the socket readable event of the client side occurs, data needs to be read from the socket of the client side, encrypted, and filled in the buffer area; when the socket writable event of the cloud storage server side occurs, data needs to be read from the buffer area, and written in the socket of the server side; the buffer area from the server to the client side is used for processing two non-blocking socket IO events including a socket readable event of the server and a socket writable event of the client side; when the socket readable event of the server occurs, data needs to be read from the socket of the server, decrypted, and filled in the buffer area; and, when the socket writable event of the client side occurs, data needs to be read from the buffer area, and written in the socket of the client side.

Description

technical field [0001] The invention relates to the field of network storage security, in particular to a stream processing system and method for cloud storage data encryption and decryption. Background technique [0002] Cloud storage is a new concept extended and developed by cloud computing technology, and it is an emerging network storage technology. Cloud storage technology integrates a large number of different types of storage devices in the network through application software to work together through functions such as cluster applications, network technology, or distributed file systems, and jointly provide data storage and business access functions to the outside world. For users of cloud storage services, it can save the cost of building a large storage computer room and the labor cost of operation and maintenance, and can access elastically scalable storage resources through the network at any time and any place. [0003] However, the characteristics of cloud st...

AI Technical Summary

Problems solved by technology

[0004] Cloud storage client-side encryption means that the file is encrypted by the client before the file is uploaded. This method can better ensure data confidentiality, but it will cause delay and additional computing overhead, especially for performance and power consumption. Restricted handheld devices bring a burden; cloud storage server-side encryption means that after the file is uploaded to the cloud, the server encrypts the data and then writes it to the storage medium. The server can access the plaintext data, so there is a possibility of privacy leakage, and a large number of Data encryption and decryption operations tend to become a bottleneck

Images