A virtualized cryptographic device high availability method and system

Abstract

The application discloses a high-availability method and system for virtualized password equipment, wherein encrypted information is automatically backed up to a key center module through an equipment management module; after the equipment management module checks a fault of the virtualized password equipment, a control module acquires backup information of the fault virtualized password equipment in the key center module and migrates to a target virtualized password equipment, exchanges the IP of the fault virtualized password equipment and the target virtualized password equipment after the migration is completed, and realizes uninterrupted service; and through searching for un-initialized virtualized password equipment in other host computers as the target virtualized password equipment, cross-host fault migration of the virtualized password equipment can be realized, the virtualized password equipment can be quickly migrated to a new host computer after the host computer is faulty, and the continuity of the network and service in the migration process is ensured.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of virtualized cryptographic device, more particularly to a high-availability method and system for virtualized cryptographic device. BACKGROUND

[0002] The virtualized cryptographic device (VSM) failover technology refers to migrating the key, critical parameter and other information of a failed virtualized cryptographic device to another virtualized cryptographic device, and is mainly used for disaster recovery, hot backup and other high-availability scenarios of the virtualized cryptographic device.

[0003] The current virtualized cryptographic device failover method is a manual intervention method, which logs into the host using a tool to migrate the key, critical parameter and other information of the failed virtualized cryptographic device to a new virtualized cryptographic device. This method requires normal login to the host, and once the host cannot be started, the information of the virtualized cryptographic device will be permanently lost. Moreover, during the manual intervention period, the service is in a state of interruption for a certain period of time for the user.

[0004] Therefore, the conventional virtualized cryptographic device failover cannot meet the real-time and cross-host requirements, and the present application provides a high-availability method and system for virtualized cryptographic device to at least solve the above technical problem. SUMMARY

[0005] Therefore, the present application provides a high-availability method and system for virtualized cryptographic device, which can realize non-interruption of service and cross-host failover of the virtualized cryptographic device.

[0006] In order to achieve the above purpose, the present application adopts the following technical solutions:

[0007] A high-availability method for virtualized cryptographic device, comprising:

[0008] S1: The device management module of the host machine monitors the information change of each virtualized cryptographic device in real time, and if the information change is monitored, the changed virtualized cryptographic device information is encrypted and sent to the key center module of the server for backup;

[0009] S2: The device management module of the host machine monitors the running state of the virtualized cryptographic device by calling the service health check instruction in the virtualized cryptographic device in real time, and if the running state is abnormal, the unique identifier of the failed virtualized cryptographic device is sent to the control module of the server;

[0010] S3: The control module obtains the backup information of the failed virtualized cryptographic device from the key center module according to the unique identifier of the failed virtualized cryptographic device, retrieves the un-initialized virtualized cryptographic device and selects one of the un-initialized virtualized cryptographic device from the un-initialized virtualized cryptographic device list as the target virtualized cryptographic device;

[0011] The control module sends the backup information of the failed virtualized cryptographic device and the unique identifier of the target virtualized cryptographic device to the device management module of the host computer where the target virtualized cryptographic device is located;

[0012] S4: The device management module of the host computer where the target virtualized cryptographic device is located decrypts the backup information of the failed virtualized cryptographic device and restores the backup information to the target virtualized cryptographic device, and notifies the control module that the migration is completed;

[0013] S5: After receiving the notification, the control module exchanges the IP of the failed virtualized cryptographic device and the target virtualized cryptographic device.

[0014] Preferably, the method for judging the change of information in S1 is as follows:

[0015] The device management module of the host computer calculates the digest value of the key and the parameter information of the virtualized cryptographic device, and compares the digest value with the digest value calculated last time. If the digest value changes, the information of the virtualized cryptographic device changes.

[0016] Preferably, the method for obtaining the target virtualized cryptographic device in S3 is as follows:

[0017] First, search for the target virtualized cryptographic device from the host computer where the failed virtualized cryptographic device is located: obtain the information of all virtualized cryptographic devices in the host computer corresponding to the failed virtualized cryptographic device, search for a virtualized cryptographic device that has not been initialized, and select one from the list of virtualized cryptographic devices that have not been initialized as the target virtualized cryptographic device.

[0018] Preferably, the system includes M host computers, and M≥2.

[0019] Preferably, each host computer is provided with N virtualized cryptographic devices, and N≥2.

[0020] A high-availability system for virtualized cryptographic devices includes a server and a host computer, the cloud server includes a key center module and a control module, and the host computer includes a virtualized cryptographic device and a device management module.

[0021] The device management module is used to monitor the change of information of each virtualized cryptographic device in real time, encrypt the changed virtualized cryptographic device information, and monitor the running state of the virtualized cryptographic device in real time by calling the service health check instruction in the virtualized cryptographic device. If an abnormal running state is monitored, the unique identifier of the failed virtualized cryptographic device is sent to the control module of the server, and the backup information of the failed virtualized cryptographic device is decrypted and restored to the target virtualized cryptographic device, and the control module is notified that the migration is completed.

[0022] The key center module is used to store the backup information of the virtualized cryptographic device.

[0023] The control module is configured to obtain the backup information of the failed virtual cryptographic device from the key center module according to the unique identifier of the failed virtual cryptographic device, retrieve the uninitialized virtual cryptographic devices and select one of the uninitialized virtual cryptographic devices as the target virtual cryptographic device from the list of the uninitialized virtual cryptographic devices;

[0024] send the backup information of the failed virtual cryptographic device and the unique identifier of the target virtual cryptographic device to the device management module of the host computer where the target virtual cryptographic device is located; and exchange the IP of the failed virtual cryptographic device and the target virtual cryptographic device.

[0025] Preferably, the principle of the information change judgment of the device management module is that:

[0026] The information of the virtual cryptographic device is changed by calculating the digest value of the key and parameter information of the virtual cryptographic device and comparing the digest value with the last calculated digest value, and if the digest value changes, the information of the virtual cryptographic device changes.

[0027] Preferably, the principle of the control module obtaining the target virtual cryptographic device is that:

[0028] The target virtual cryptographic device is preferentially retrieved from the host computer where the failed virtual cryptographic device is located: the information of all the virtual cryptographic devices in the host computer corresponding to the failed virtual cryptographic device is obtained, the uninitialized virtual cryptographic devices are retrieved, and one of the uninitialized virtual cryptographic devices is selected as the target virtual cryptographic device from the list of the uninitialized virtual cryptographic devices.

[0029] Preferably, the system comprises M host computers, and M≥2.

[0030] Preferably, each host computer is provided with N virtual cryptographic devices, and N≥2.

[0031] According to the above technical solution, compared with the prior art, the present application provides a virtual cryptographic device high-availability method and system, which automatically backs up the encryption information to the key center module through the device management module. After the device management module detects the VSM failure, the control module obtains the backup information of the failed VSM in the key center module and migrates to the target VSM, exchanges the IP of the failed VSM and the target VSM after the migration is completed, and realizes the uninterrupted service. BRIEF DESCRIPTION OF DRAWINGS

[0032] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings needed to be used in the embodiments or the prior art description. Obviously, the drawings in the following description are only embodiments of the present application, and those skilled in the art can obtain other drawings according to the provided drawings without any creative labor.

[0033] Figure 1 The accompanying drawings are a flow chart of a high-availability method of a virtualized cryptographic device provided by the present application.

[0034] Figure 2 The accompanying drawings are a schematic diagram of a high-availability system structure of a virtualized cryptographic device provided by the present application. DETAILED DESCRIPTION

[0035] The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all the embodiments. Based on the embodiments in the present application, all the other embodiments obtained by those skilled in the art without creative work fall within the scope of protection of the present application.

[0036] The embodiments of the present application disclose a high-availability method of a virtualized cryptographic device, as shown in the accompanying drawings, comprising: Figure 1

[0037] S1: A device management module of a host machine monitors information changes of each virtualized cryptographic device in real time, and if the information changes are monitored, the changed virtualized cryptographic device information is encrypted and sent to a key center module of a server for backup;

[0038] S2: The device management module of the host machine monitors the running state of the virtualized cryptographic device in real time by calling a service health check instruction in the virtualized cryptographic device, and if the running state is monitored to be abnormal, the unique identifier of the faulty virtualized cryptographic device is sent to a control module of the server;

[0039] S3: The control module obtains the backup information of the faulty virtualized cryptographic device from the key center module according to the unique identifier of the faulty virtualized cryptographic device, searches for an uninitialized virtualized cryptographic device, and selects one of the uninitialized virtualized cryptographic devices as a target virtualized cryptographic device from a list of the uninitialized virtualized cryptographic devices;

[0040] The control module sends the backup information of the faulty virtualized cryptographic device and the unique identifier of the target virtualized cryptographic device to the device management module of the host machine where the target virtualized cryptographic device is located;

[0041] S4: The device management module of the host machine where the target virtualized cryptographic device is located decrypts the backup information of the faulty virtualized cryptographic device and restores it to the target virtualized cryptographic device, and notifies the control module that the migration is completed;

[0042] S5: After receiving the notification, the control module exchanges the IP of the faulty virtualized cryptographic device and the target virtualized cryptographic device, and completes the service switching.

[0043] ​In the embodiment, the method for judging the information change in S1 is as follows:

[0044] The device management module of the host computer compares the digest value of the key and parameter information of the virtualized cryptographic device with the digest value calculated last time, and if the digest value changes, the information of the virtualized cryptographic device changes.

[0045] In the embodiment, the method for obtaining the target virtualized cryptographic device in S3 is as follows:

[0046] The target virtualized cryptographic device is preferentially searched from the host computer where the fault virtualized cryptographic device is located: the information of all virtualized cryptographic devices in the host computer corresponding to the fault virtualized cryptographic device is obtained, the un-initialized virtualized cryptographic device is searched out, and one of the un-initialized virtualized cryptographic devices is selected as the target virtualized cryptographic device.

[0047] If the fault virtualized cryptographic device does not have the target virtualized cryptographic device, the target virtualized cryptographic device is searched from other host computers: the information of all virtualized cryptographic devices in the other host computers is obtained, the un-initialized virtualized cryptographic device is searched out, and one of the un-initialized virtualized cryptographic devices is selected as the target virtualized cryptographic device.

[0048] The present application can realize the cross-host fault migration of the virtualized cryptographic device, solve the fast migration of the virtualized cryptographic device to the new host computer after the fault of the host computer, and ensure the continuity of the network and service in the migration process.

[0049] The embodiment of the present application discloses a virtualized cryptographic device high-availability system, as shown in Figure 2 The system comprises a server and a host computer, the cloud server comprises a key center module and a control module, and the host computer comprises a virtualized cryptographic device and a device management module.

[0050] The device management module is used for monitoring the information change of each virtualized cryptographic device in real time, encrypting the changed virtualized cryptographic device information, calling the service health check instruction in the virtualized cryptographic device to monitor the running state of the virtualized cryptographic device in real time, sending the unique identifier of the fault virtualized cryptographic device to the control module of the server if the running state is abnormal, decrypting and restoring the backup information of the fault virtualized cryptographic device to the target virtualized cryptographic device, and notifying the control module of the migration completion.

[0051] The key center module is used for storing the backup information of the virtualized cryptographic device, and the backup information specifically comprises the key and parameter information of the virtualized cryptographic device.

[0052] The control module is configured to obtain backup information of the failed virtual cryptographic device from a key center module according to a unique identifier of the failed virtual cryptographic device, receive virtual cryptographic device running state information, retrieve un-initialized virtual cryptographic devices, and select one of the un-initialized virtual cryptographic devices as a target virtual cryptographic device;

[0053] send the backup information of the failed virtual cryptographic device and the unique identifier of the target virtual cryptographic device to a device management module of a host computer where the target virtual cryptographic device is located, and exchange IP addresses of the failed virtual cryptographic device and the target virtual cryptographic device to complete service switching.

[0054] The various embodiments are described in the specification by way of progression, each building on the last to facilitate ease of understanding. The embodiments are illustrative of the application but not limiting thereof. The same reference numerals in different drawings represent the same or similar elements.

[0055] The above description of disclosed embodiments provides enough information to enable those skilled in the art to make and use the application. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein can be applied to other embodiments without departing from the spirit or scope of the application. Thus, the present application is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A virtualized cryptographic device high availability method, characterized in that, Comprise: S1: the device management module of the host computer monitors the information change of each virtualization password device in real time, if the information change is monitored, the changed virtualization password device information is encrypted and sent to the key center module of the server for backup; S2: the device management module of the host computer monitors the running state of the virtualization password device by calling the service health check instruction in the virtualization password device in real time, if the running state is monitored to be abnormal, the unique identifier of the fault virtualization password device is sent to the control module of the server; S3: the control module obtains the backup information of the fault virtualization password device from the key center module according to the unique identifier of the fault virtualization password device, retrieves the uninitialization virtualization password device and selects one of them as the target virtualization password device from the uninitialization virtualization password device list; The control module sends the backup information of the fault virtualization password device and the unique identifier of the target virtualization password device to the device management module of the host computer where the target virtualization password device is located; S4: the device management module of the host computer where the target virtualization password device is located decrypts the backup information of the fault virtualization password device and restores it to the target virtualization password device, and notifies the control module that the migration is completed; S5: the control module receives the notification, and exchanges the IP of the fault virtualization password device and the target virtualization password device.

2. The high availability method for virtualized cryptographic devices according to claim 1, wherein, The judgment method of information change in S1 is: The device management module of the host computer compares the digest value of the key and parameter information of the virtualization password device with the last calculated digest value, if the digest value changes, the information of the virtualization password device changes.

3. The virtualized cryptographic device high availability method of claim 1, wherein, The method for obtaining the target virtualization password device in S3 is: Prior to retrieve the target virtualization password device from the host computer where the fault virtualization password device is located: obtain the information of all virtualization password devices in the host computer corresponding to the fault virtualization password device, retrieve the uninitialization virtualization password device and select one from the uninitialization virtualization password device list as the target virtualization password device.

4. The high availability method for virtualized cryptographic devices of claim 1, wherein, Comprise M host computers, M≥2.

5. The virtualized cryptographic device high availability method of claim 1, wherein, Each host computer is provided with N virtualization password devices, N≥2.

6. A virtualized cryptographic device high availability system, comprising: Comprise: Server and host computer, cloud server includes key center module and control module, host computer includes virtualization password device and device management module; The device management module is used for monitoring the information change of each virtualization password device in real time, and encrypting the changed virtualization password device information; And by calling the service health check instruction in the virtualization password device, the running state of the virtualization password device is monitored in real time, if the running state is monitored to be abnormal, the unique identifier of the fault virtualization password device is sent to the control module of the server; And the backup information of the fault virtualization password device is decrypted and restored to the target virtualization password device, and the control module is notified that the migration is completed; The key center module is used for storing the backup information of the virtualization password device; The control module is configured to obtain backup information of the failed virtual cryptographic device from a key center module according to a unique identifier of the failed virtual cryptographic device, retrieve un-initialized virtual cryptographic devices, and select one of the un-initialized virtual cryptographic devices as a target virtual cryptographic device from a list of the un-initialized virtual cryptographic devices; send the backup information of the failed virtual cryptographic device and the unique identifier of the target virtual cryptographic device to a device management module of a host computer where the target virtual cryptographic device is located; and exchange an IP of the failed virtual cryptographic device with an IP of the target virtual cryptographic device.

7. The virtualized cryptographic device high availability system of claim 6, wherein, The principle of the information change judgment of the device management module is that: the device management module compares a digest value of key and parameter information of the virtual cryptographic device with a last calculated digest value, and if the digest value changes, the information of the virtual cryptographic device changes.

8. The virtualized cryptographic device high availability system of claim 6, wherein, The principle of the control module to obtain the target virtual cryptographic device is that: the control module preferentially retrieves the target virtual cryptographic device from the host computer where the failed virtual cryptographic device is located, obtains information of all virtual cryptographic devices in the host computer corresponding to the failed virtual cryptographic device, retrieves un-initialized virtual cryptographic devices, and selects one of the un-initialized virtual cryptographic devices as the target virtual cryptographic device from a list of the un-initialized virtual cryptographic devices.

9. The virtualized cryptographic device high availability system of claim 6, wherein, The system includes M host computers, and M≥2.

10. The virtualized cryptographic device high availability system of claim 6, wherein, Each host computer is provided with N virtual cryptographic devices, and N≥2.

Images