A data security guarantee method in hybrid cloud environment based on service grid

Abstract

A method for ensuring data security in a hybrid cloud environment based on a service grid, involving the field of computer technology, comprising the following steps: an administrator configures access security between services, defines services A, B, C, and storage services The security policy determines encrypted communication and non-encrypted communication, and the control plane uniformly sends it to the intelligent agent sidecar; after the external incoming request reaches service A, service A resolves to the address of service B through DNS, and initiates the call; service A's request to call B is intercepted by the sidecar, and the traffic is transparently transmitted; service B calls service C, and DNS resolves the address of service C to the public cloud address, and configures the security policy. The present invention can remove the restrictions of public cloud vendors, and can ensure the security of the network transmission layer between multiple clouds and the security of application communication and data storage inside the public cloud; it can flexibly customize secure transmission, and define cross-cloud services to enable secure access .

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a method for ensuring data security in a service grid-based hybrid cloud environment. Background technique [0002] With the development of cloud computing, almost every enterprise plans or is using cloud computing nowadays. At the same time, due to security and auditing reasons, not all enterprise information can be placed on the public cloud, so most enterprises that have applied cloud computing are using the hybrid cloud model. While using a hybrid cloud allows users to take advantage of the respective advantages of public and private clouds, it also provides great flexibility in moving applications across a multi-cloud environment. However, the configuration management of hybrid cloud is relatively more complex and difficult to maintain; since hybrid cloud is a combination of different cloud platforms, data and applications, integration will be a challenge; A compatibilit...

AI Technical Summary

Problems solved by technology

These two solutions have their own advantages and can be applied to the needs of different users, but both of these solutions are limited by public cloud vendors, and cannot guarantee the security of the network transport layer between multiple clouds, and are not responsible for the internal security of the public cloud. Application communication security and data storage security; cannot flexibly customize secure transmission, and cannot define whether to enable secure access between cross-cloud services

Images