An openstack system with block storage encryption function and its application method

An encryption function and block storage technology, which is applied in the direction of instruments, computing, and electrical digital data processing, etc., can solve the problems of low encryption speed, secret key being stolen, easy to be stolen and tampered maliciously, and achieve good compatibility and prevent malicious The effect of stealing and tampering, high encryption and decryption performance

CN110543780BActive Publication Date: 2021-08-13湖南麒麟信安科技股份有限公司
4 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Publication Date
2021-08-13

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention discloses an OpenStack system with a block storage encryption function and an application method thereof. The OpenStack system includes a control node, a computing node, hardware storage and a block storage encryption device, and the control node integrates a Cinder encryption storage plug-in to process Openstack block storage management requests , the block storage resources provided by the hardware storage are provided to the virtual machines of the computing nodes through the block storage encryption device adapted to the encryption storage plug-in. The block storage encryption device is used to transparently encrypt and decrypt the block storage data. The invention can realize transparent encryption and decryption of Openstack Cinder block storage data, can prevent block storage data from being maliciously stolen and tampered with, and has the advantage of good compatibility. The block storage encryption device uses a hardware encryption card to transparently encrypt and decrypt block storage data, Compared with the way of software implementation, the encryption and decryption performance is high, and the data security is good.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention relates to the field of cloud computing data security, in particular to an OpenStack system with a block storage encryption function and an application method thereof. Background technique

[0002] OpenStack is a cloud computing platform that provides computing, storage, and even network resources. It is a collection of a series of service components with RESTful interfaces. Among them, Nova is responsible for the management of the entire life cycle of virtual machines, and Cinder is responsible for the management of block storage resources. Cinder is a block storage resource management system. In order to adapt to the heterogeneous storage environment, it provides a unified RESTful interface externally, and internally uses storage plug-ins (Cinder Volume Driver) to abstract, encapsulate and manage different back-end hardware storage. The block storage provided by Cinder in Openstack can realize encrypted data transmission with the help o...

Examples

Embodiment Construction

[0024] Such as figure 1 and figure 2 As shown, the OpenStack system with block storage encryption function in this embodiment includes a control node, a computing node and hardware storage, and also includes a block storage encryption device connected between the computing node and hardware storage, and the control node is integrated with an Openstack Cinder-based The encrypted storage plug-in is implemented, and the encrypted storage plug-in is responsible for processing the block storage management request of the Openstack system. The block storage encryption device and the encrypted storage plug-in are adapted and connected, and the block storage resources provided by the hardware storage are all passed through the encrypted storage plug-in The adapted block storage encryption device is provided for use by the virtual machine of the computing node, and the block storage encryption device is used for transparently encrypting and decrypting block storage data.

[0025] In t...