Multi-host shared storage system and data integrity protection method

Abstract

The invention discloses a multi-host shared storage system and a data integrity protection method. The fingerprint for the data is calculated according to the feature information of the data owner system, the address information needing to be stored and the like, and the fingerprint and the data are written into the storage medium together. Therefore, in the data access process, whether the fingerprint information corresponds to the original fingerprint information or not can be judged on the basis of the system identity of the system corresponding to the visitor, the provided address and other information, and therefore the integrity of data is protected between different systems. Particularly, since in the data access process, fingerprint matching needs to be carried out on the system requested to be accessed in advance, illegal access can be prevented and the system sending the abnormal data access request can be reported in time when fingerprint mismatching is judged, traceabilityis achieved, illegal reading and tampering of data can be detected and prevented, integrity of data between different systems is protected, and data safety is greatly enhanced.

Description

Technical field [0001] The present invention relates to the field of information security, in particular to a data protection method and storage system. Background technique [0002] In today's chips and systems, the demand for data storage is increasing, and the demand for storage security is also increasing. Many systems have multiple host systems, and each host system has its own corresponding private storage space. For the situation where there are multiple hosts in a system, the storage medium often needs to be shared among multiple hosts due to cost considerations. In other words, each host can access the storage medium, and the difference between each host is only in the process of reading the storage space. Therefore, the integrity protection of data between different systems is extremely important. [0003] For a single host, since many of the current hosts support virtualization, after virtualization, a host can also run multiple host systems. These host systems have t...

AI Technical Summary

Problems solved by technology

Need to restrict other hosts or host systems from reading and writing their private resources

[0004] In the prior art, although these private resources can be encrypted and stored using a symmetric encryption algorithm, due to the possibility of accessing each other's private data among multiple host systems, once such illegal reading occurs, it will lead to data leakage

What is more dangerous is that once illegal writing occurs, the data will be tampered with, and the tampered data will lead to data errors, and even cause system crashes

That is to say, a major problem faced by the existing multi-host shared storage system is that the legitimate host and storage control system cannot prevent its private data from being illegally read or tampered with, and there is no way to know whether the data has been illegally read or not. take or illegally tamper with

Data errors caused by illegal tampering can directly lead to system crashes. The data integrity of the existing multi-host shared storage system is actually facing a great security risk and is an extremely urgent problem.

Images