An openstack system with block storage encryption function and its application method

Abstract

The invention discloses an OpenStack system with a block storage encryption function and an application method thereof. The OpenStack system includes a control node, a computing node, hardware storage and a block storage encryption device, and the control node integrates a Cinder encryption storage plug-in to process Openstack block storage management requests , the block storage resources provided by the hardware storage are provided to the virtual machines of the computing nodes through the block storage encryption device adapted to the encryption storage plug-in. The block storage encryption device is used to transparently encrypt and decrypt the block storage data. The invention can realize transparent encryption and decryption of Openstack Cinder block storage data, can prevent block storage data from being maliciously stolen and tampered with, and has the advantage of good compatibility. The block storage encryption device uses a hardware encryption card to transparently encrypt and decrypt block storage data, Compared with the way of software implementation, the encryption and decryption performance is high, and the data security is good.

Description

technical field [0001] The invention relates to the field of cloud computing data security, in particular to an OpenStack system with a block storage encryption function and an application method thereof. Background technique [0002] OpenStack is a cloud computing platform that provides computing, storage, and even network resources. It is a collection of a series of service components with RESTful interfaces. Among them, Nova is responsible for the management of the entire life cycle of virtual machines, and Cinder is responsible for the management of block storage resources. Cinder is a block storage resource management system. In order to adapt to the heterogeneous storage environment, it provides a unified RESTful interface externally, and internally uses storage plug-ins (Cinder Volume Driver) to abstract, encapsulate and manage different back-end hardware storage. The block storage provided by Cinder in Openstack can realize encrypted data transmission with the help o...

AI Technical Summary

Problems solved by technology

The block storage provided by Cinder in Openstack can realize encrypted data transmission with the help of SSL, but the encryption implemented by the software algorithm has disadvantages such as the possibility of the secret key being stolen and low encryption speed. In addition, the data of the block storage itself is stored in plain text, which is easy to be stolen maliciously. and tampering

Images