Methods of using NVM to improve performance of cryptographic file system

Abstract

The invention discloses methods of using NVM to improve performance of a cryptographic file system. Dynamic planning is carried out according to data block features of a file writing request, a suitable soft or hard calculation method is selected to execute an encryption operation, then ciphertext is written into an NVM cache, and finally, ciphertext data in the NVM are collectively written back to a disk layer by a background thread in a manner of asynchronous IO. NVM memory space is allocated and managed by an NVM memory management strategy. A storage location of requested data is quickly queried according to the NVM memory management strategy, a decryption operation is carried out on read ciphertext by selecting a suitable soft or hard calculation method by a dynamic planning method, and finally, plaintext is returned to an upper-layer application. Compared with manners in which the need for calling hardware engines for multiple times and waiting for data writing-back to disks causes delay in traditional eCryptfs data encryption / decryption, the method can effectively reduce mode context switching overheads of hardware and delay due to IO speed mismatching, improves application of a hardware encryption engine, and also improves overall performance of the cryptographic file system.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method for improving the performance of an encrypted file system by using NVM. Background technique [0002] In recent years, how to protect sensitive data from being leaked has become a hot issue that people pay attention to. In addition to directly stealing physical storage devices, intruders can also steal file data through network attacks; moreover, due to sharing requirements, sensitive data will be accessed by multiple people, which also increases the possibility of leakage. Encrypting data or files has become a recognized and successful method of protecting data, ensuring that the content is encrypted and stored in physical devices, and improving the storage security of file data. [0003] As an enterprise-level encrypted file system, eCryptfs is a stackable encrypted file system (Stackable Cryptographic File System). This encrypted file system can be regar...

AI Technical Summary

Problems solved by technology

[0012] In view of this, the present invention provides a method for improving file system encryption / decryption performance by using NVM, which solves a large amount of context switching overhead caused by multiple calls to hardware accelerators and problems caused by waiting for data to be written back to the disk during the eCryptfs encryption process. delay problem

Images