Data encryption and decryption method and device, encryption equipment and storage medium

Abstract

The invention provides a data encryption and decryption method and device, encryption equipment and a storage medium. The data encryption and decryption method comprises the steps of: acquiring a server identifier, a disk array identifier and a corresponding port number based on a source device identifier and a destination device identifier; splicing the server identifier, the disk array identifier and the corresponding port number into a write address, and writing a logic unit number and a logic block address in a fiber channel protocol instruction frame into a memory corresponding to the write address; acquiring a server identifier, a disk array identifier and a corresponding port number based on the source equipment identifier and the destination equipment identifier; splicing the server identifier, the disk array identifier and the corresponding port number into a read address for query, and reading a logic unit number and a logic block address; and splicing the server identifier, the disk array identifier, the logic unit number and the logic block address into a secret key, and encrypting or decrypting the fiber channel protocol data frame.

Description

technical field [0001] The present disclosure relates to the field of data storage, in particular to a data encryption and decryption method and device, an encryption device, and a storage medium. Background technique [0002] Fiber Channel-Storage Area Network (FC-SAN) has high network performance and short delay, and is currently being used by large-scale data centers in various industries. FC-SAN usually consists of servers, switches, disk arrays, and encryption devices. The encryption devices are mainly used to encrypt or decrypt stored data to ensure the data security of large data centers based on FC-SAN. [0003] In the related art, when the encryption device receives the FC command frame, it converts the source device identification (Sourcedevice IDentifier, S_ID) / destination device identification (Destination device IDentifier, D_ID) and the originating station exchange identification (Originator eXchange IDentifier) ​​in the FC command frame , OX_ID) link to perfo...

AI Technical Summary

Problems solved by technology

[0004] However, the use of HASH compression will inevitably generate conflicts, resulting in the possibility of querying wrong LUN and LBA data, resulting in encrypted data that cannot be decrypted, and the current FCP data frame can only be discarded, resulting in FC-SAN performance loss; when a large number of conflicts occur, lost When there are a large number of FCP data frames, it may even cause FC link interruption

In addition, in the encryption process, RAID_ID is mainly used for encryption, and the security isolation of the data source server is not considered.

Images