A cloud hard disk encryption and decryption method, device, system and readable storage medium

Abstract

The invention discloses a cloud hard disk encryption and decryption method, device, system and computer-readable storage medium. The method includes: calling a pre-established encrypted disk according to an operation request; The operation interface is sent to the target encryption machine, so that the target encryption machine performs corresponding operations on the operation data; the operation result returned by the target encryption machine is received through the operation interface to the server; when the disk file is encrypted and decrypted in the present invention, by using The operation data is sent to the encryption machine for encryption and decryption operations, avoiding the encryption and decryption operations on the server to occupy server resources, which is conducive to improving business operation efficiency and server performance.

Description

technical field [0001] The present invention relates to the technical field of cloud computing, in particular to a cloud hard disk encryption and decryption method, device, system and computer-readable storage medium. Background technique [0002] In recent years, cloud computing has gradually become an important development trend in the industry. With the help of cloud computing system virtualization, it can not only help cloud service providers reduce the number of servers and optimize resource utilization, but also help users achieve elastic infrastructure configuration, thereby reducing costs. , Rapid response to changes in demand. However, with the cloudification of business systems, data security issues in the systems have become increasingly prominent. [0003] Most of the public cloud and private cloud are developed based on OpenStack. Among them, OpenStack is an open source cloud computing management platform project and a combination of a series of software open s...

AI Technical Summary

Problems solved by technology

[0004] Currently, there are four ways to encrypt and decrypt disk files in qemu-kvm, namely, qemu built-in encryption algorithm (such as builtin / glibc), calling the kernel encryption module, calling the nettle library, and calling the libgcrypt library. These four encryption and decryption methods are all It is carried out at the hypervisor (virtual machine monitor) layer, which greatly affects the performance of the hypervisor, and the encryption and decryption process and business data are both running on the server, and because the entire disk data is encrypted and decrypted, the read and write loss is very large. Through the business data pressure test , when using the nettle library to encrypt and decrypt data, comparing unencrypted read and write data and using AES-256 to encrypt and decrypt disk data, the read and write loss is more than 50%, which is difficult to meet the business requirements of cloud hard disk with large data volume, which is serious Affect the business operation on the server and affect the server performance

Images