OpenStack system with block storage encryption function and application method thereof

Abstract

The invention discloses an OpenStack system with a block storage encryption function and an application method thereof. The OpenStack system comprises a control node, a computing node and hardware storage and block storage encryption equipment. The control node integrates a Cinder encryption storage plug-in so as to process the Openstack block storage management request. The block storage resources provided by the hardware storage are provided for the virtual machine of the computing node for use through a block storage encryption device matched with the encrypted storage plug-in, and the block storage encryption device is used for transparently encrypting and decrypting the block storage data. According to the invention, transparent encryption and decryption of Openstack Cinder block storage data can be realized. The block storage encryption equipment can prevent block storage data from being maliciously stolen and tampered, has the advantage of good compatibility, uses the hardware encryption card to transparently encrypt and decrypt the block storage data, and is high in encryption and decryption performance and good in data security compared with a software implementation mode.

Description

technical field [0001] The invention relates to the field of cloud computing data security, in particular to an OpenStack system with a block storage encryption function and an application method thereof. Background technique [0002] OpenStack is a cloud computing platform that provides computing, storage, and even network resources. It is a collection of a series of service components with RESTful interfaces. Among them, Nova is responsible for the management of the entire life cycle of virtual machines, and Cinder is responsible for the management of block storage resources. Cinder is a block storage resource management system. In order to adapt to the heterogeneous storage environment, it provides a unified RESTful interface externally, and internally uses storage plug-ins (Cinder Volume Driver) to abstract, encapsulate and manage different back-end hardware storage. The block storage provided by Cinder in Openstack can realize encrypted data transmission with the help o...

AI Technical Summary

Problems solved by technology

The block storage provided by Cinder in Openstack can realize encrypted data transmission with the help of SSL, but the encryption implemented by the software algorithm has disadvantages such as the possibility of the secret key being stolen and low encryption speed. In addition, the data of the block storage itself is stored in plain text, which is easy to be stolen maliciously. and tampering

Images