A data security guarantee method in hybrid cloud environment based on service grid

A data security, hybrid cloud technology, applied in the computer field, can solve the problem of not being responsible for public cloud application communication security and data storage security, not being able to define whether secure access is enabled between cross-cloud services, and not being able to guarantee the network between multiple clouds. Transport layer security and other issues to achieve the effect of ensuring security, reducing costs, and improving access efficiency

CN112511560BActive Publication Date: 2021-10-22北京云思畅想科技有限公司
0 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Publication Date
2021-10-22

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
Patent Text Reader

Abstract

A method for ensuring data security in a hybrid cloud environment based on a service grid, involving the field of computer technology, comprising the following steps: an administrator configures access security between services, defines services A, B, C, and storage services The security policy determines encrypted communication and non-encrypted communication, and the control plane uniformly sends it to the intelligent agent sidecar; after the external incoming request reaches service A, service A resolves to the address of service B through DNS, and initiates the call; service A's request to call B is intercepted by the sidecar, and the traffic is transparently transmitted; service B calls service C, and DNS resolves the address of service C to the public cloud address, and configures the security policy. The present invention can remove the restrictions of public cloud vendors, and can ensure the security of the network transmission layer between multiple clouds and the security of application communication and data storage inside the public cloud; it can flexibly customize secure transmission, and define cross-cloud services to enable secure access .
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention relates to the field of computer technology, in particular to a method for ensuring data security in a service grid-based hybrid cloud environment. Background technique

[0002] With the development of cloud computing, almost every enterprise plans or is using cloud computing nowadays. At the same time, due to security and auditing reasons, not all enterprise information can be placed on the public cloud, so most enterprises that have applied cloud computing are using the hybrid cloud model. While using a hybrid cloud allows users to take advantage of the respective advantages of public and private clouds, it also provides great flexibility in moving applications across a multi-cloud environment. However, the configuration management of hybrid cloud is relatively more complex and difficult to maintain; since hybrid cloud is a combination of different cloud platforms, data and applications, integration will be a challenge; A compatibilit...

Examples

Embodiment Construction

[0031] In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in combination with specific embodiments and with reference to the accompanying drawings. It should be understood that these descriptions are exemplary only, and are not intended to limit the scope of the present invention. Also, in the following description, descriptions of well-known structures and techniques are omitted to avoid unnecessarily obscuring the concept of the present invention.

[0032] Such as Figure 1-2 As shown, the present invention proposes a method for ensuring data security in a service grid-based hybrid cloud environment, the method comprising:

[0033] S1: First, the administrator configures the access security between services, and defines the security policies between services A, B, C, and storage services. The communication between service A and service B is non-encrypted, and the co...