Storage data protection method and device

Abstract

The invention discloses a storage data protection method and device. The encryption and decryption adjustment values are calculated according to the storage addresses of the data and the feature information corresponding to the systems storing the data, the data to be stored or required to be read are encrypted and decrypted according to the encryption and decryption adjustment values in the datastorage and reading process, and isolation protection of the data is achieved among different systems. In the encryption and decryption processes, through the design of the feature information corresponding to the system and the encryption and decryption calculation, the same set of encryption and decryption device can be used for realizing the storage resource protection of a plurality of hosts or a plurality of systems. Different encryption and decryption adjustment values can be obtained for different addresses of each host and each system, and different plaintext and ciphertext corresponding relationships are obtained, so that the privacy of data between different systems is protected, and the security of the data is greatly enhanced.

Description

technical field [0001] The present invention relates to the field of information security, in particular to a data protection method and device. Background technique [0002] In today's chips and systems, the demand for data storage is increasing, and the demand for storage security is also increasing day by day. Many systems have multiple host systems, and each host system has its own corresponding private storage space. In the case where there are multiple hosts in a system, the storage medium often needs to be shared among the multiple hosts due to cost considerations. That is to say, each host can access the storage medium, and the difference between each host is only the process of reading the storage space. Therefore, the isolation and protection of data between different systems is particularly important. [0003] For a single host, since many hosts now support virtualization, one host can also run multiple host systems after virtualization. These host systems have...

AI Technical Summary

Problems solved by technology

Need to restrict other hosts or host systems from reading and writing their private resources

[0004] In the prior art, although these private resources can be encrypted and stored using a symmetric encryption algorithm, due to the possibility of accessing each other’s private data among multiple host systems, once this encryption method is known and illegal reading occurs, the Data Protection for Multi-Host Systems Poses Serious Threats

Images