Wide-area virtual data space account dynamic mapping mechanism and data security management and control method

Abstract

The invention provides a wide-area virtual data space account dynamic mapping mechanism and a data security management and control method. Based on a global unified account and supercomputing center local account diversified mapping mechanism, a set of account dynamic mapping mechanism is realized, and based on the account dynamic mapping mechanism, account data space isolation and safety access are realized through account data space isolation and authority control. Firstly, a set of dynamic account mapping mechanism is realized by researching a mapping relationship between a global unified account and a local account, the problem of balanced mapping between a virtual account and the local account is solved, and unified management and access of the global account are supported; secondly,based on an account dynamic mapping mechanism, isolation and space authority management are carried out through data space, and safety control over user space is achieved. According to the method, theproblem of unbalanced distribution of the virtual data space account and the local account of the supercomputing center is solved, and safe access of the user space is realized through isolation andauthority management of the user space.

Description

technical field [0001] The invention discloses a wide-area virtual data space account dynamic mapping mechanism and data security management and control method, relates to a cross-domain virtual account mapping mechanism and account data security management and control, and belongs to the field of computer technology. Background technique [0002] At present, in the national high-performance computing environment, each supercomputing center has an independent account management system, which covers various forms such as tokens, virtual private networks, and access keys, and is independent of each other between supercomputing centers. Each management method brings challenges to the unified account security management and control of multiple supercomputing centers in a wide-area environment. For the unified management of storage resources in multiple supercomputing centers, it is necessary to design a set of reasonable cross-domain virtual data space to manage and schedule the...

AI Technical Summary

Problems solved by technology

The method mainly has the following three points: (1) The service provider separates the data of the tenant by cutting the database, storage area, structure description or table. If necessary, symmetric or asymmetric encryption is required to protect sensitive data, but different isolation practices have different implementation complexities and different security risks

(2) Suppliers can use the application mounting environment to separate the application operating environments of different tenants on the process, and protect the application operating environments of each tenant when cross-process communication is not possible, but this requires the service provider to provide reasonable computing environment

SAAS technology is mainly aimed at the isolation of user space under the one-to-one account mapping mechanism, but it lacks the consideration of data isolation and secure access under the many-to-many account dynamic mapping mechanism

Images