Low-coupling universal data encryption and decryption method and system

Abstract

The invention discloses a low-coupling universal data encryption and decryption method and a low-coupling universal data encryption and decryption system. The low-coupling universal data encryption and decryption method comprises the steps of: mounting a pre-deployed underlying storage system by means of a data encryption and decryption client in advance and mounting a data encryption card as a data encryption and decryption server, blocking and waiting for a read / write request of a user, if a write request of the user is received, decomposing the write request into data segments of a specified size and aligning the data segments, then transmitting the data segments to the encryption and decryption server one by one, and encrypting the data segments and writing the encrypted data segmentsinto the underlying storage system by means of the encryption and decryption server; and if a read request of the user is received, reading cached plaintext data, or decrypting the encrypted data in the underlying storage system and returning the decrypted data. The low-coupling universal data encryption and decryption method and system can adapt to different underlying storage systems, has the advantages of low coupling architecture, high performance, high reliability and good universality, can maximize the availability of the system, reduces encryption and decryption data delay, and meets the high reliability requirements.

Description

technical field [0001] The invention relates to data storage security technology, in particular to a low-coupling general data encryption and decryption method and system. Background technique [0002] Data is the core asset in the storage system, and its security is of paramount importance. The initial storage system is a local direct connection method, and data security can be achieved through external network isolation. Nowadays, with the development of network storage and distributed storage, data is shared by many machines on the network, so it is more vulnerable to attacks. Fundamentally speaking, the safe storage of data is mainly to ensure that the data is complete, reliable and not leaked. [0003] At this stage, there are many commercial or open-source underlying storage systems, and most of these storage systems access the underlying data through plain text, which inevitably poses security risks. At the same time, due to the tightly coupled structure of some sto...

AI Technical Summary

Problems solved by technology

[0003] At this stage, there are many commercial or open source underlying storage systems. Most of these storage systems access the underlying data through plain text, which will inevitably pose security risks.

At the same time, due to the tightly coupled structure of some storage systems, that is, the internal modules of the storage system are closely related, and the dependencies between modules are strong; if developers need to insert encryption and decryption modules into these storage systems, it will take a long time to understand The system is decoupled, and the encryption and decryption modules inserted at the same time can easily make the system more fragile and more likely to crash, which undoubtedly increases the difficulty of technology development and prolongs the development cycle of the technology; for some storage systems with built-in encryption and decryption modules, the system There is no external encryption and decryption interface, and encryption and decryption can only be performed using CPU resources. Due to factors such as encryption and decryption calculation-intensive features and weak CPU concurrency performance, the performance of encryption and decryption is low, and the CPU resources occupied by encryption and decryption are large, resulting in users poor experience

Images