A high-speed trusted data storage system

Abstract

The present invention discloses a high-speed trusted data storage system. The high-speed trusted data storage system proposed by the present invention uses a bottom-layer hardware data read-write control module to perform encryption and digest algorithms on the input data input by external devices, that is, the bottom-layer hardware is used to complete data encryption and integrity verification operations. Compared with the traditional solution that uses application-layer software to complete data encryption and integrity verification, it can improve the operation speed, reduce the consumption of CPU operation resources, and can take into account the controllable flexibility of software and the reliability and speed of hardware. Moreover, this solution caches data through multiple physical data channels, which can reduce the performance bottleneck of data read-write operations and improve the data read-write speed.

Description

Technical Field

[0001] The present invention relates to the technical field of computer storage, and particularly to a high-speed trusted data storage system. Background Art

[0002] With the advent of the information age, more and more electronic data is generated in the production and living processes, and various storage systems are required to store this electronic data. A large amount of data tests the storage and reading capabilities of the storage system.

[0003] As more and more data is stored, how to ensure data security is also an urgent problem to be solved; for existing computer high-speed storage devices or apparatuses, the encryption and integrity verification of data are both completed by application software, and this solution will consume a large amount of computing resources and reduce the computing speed. Summary of the Invention

[0004] The main object of the present invention is to provide a high-speed trusted data storage system, aiming to solve the problem that for existing computer high-speed storage devices or apparatuses, the encryption and integrity verification schemes for data will consume a large amount of computing resources and reduce the computing speed.

[0005] The technical solution proposed by the present invention is as follows:

[0006] A high-speed trusted data storage system includes a first data conversion module, a second data conversion module, a management module, a physical data channel, a data reading and writing control module, a high-speed hard disk interface conversion module, and a hard disk group; the data reading and writing control module and the physical data channel are both communicatively connected to the first data conversion module; the second data conversion module and the management module are both communicatively connected to the data reading and writing control module; the second data conversion module and the hard disk group are both communicatively connected to the high-speed hard disk interface conversion module; the management module is used to be communicatively connected to a host computer; the physical data channel is used to be communicatively connected to external devices;

[0007] The physical data channel is used to: obtain input data to be stored from external devices, generate a first data packet, and then send the first data packet to the data reading and writing control module through the first data conversion module;

[0008] The data reading and writing control module is used to: encrypt the first data packet based on write control information to obtain a corresponding second data packet; then calculate the second data packet through a digest algorithm to obtain a first digest information corresponding to the second data packet, and package the second data packet and the corresponding first digest information into a new data packet, which is marked as a third data packet, and then input the third data packet into the hard disk group through the second data conversion module and the high-speed hard disk interface conversion module, where the write control information is sent from the host computer to the data reading and writing control module through the management module.

[0009] Preferably, the system further includes a plurality of data cache modules; the number of data read / write control modules is equal to that of the data cache modules, and the data read / write control modules are communicatively connected to the data cache modules in a one-to-one correspondence; the number of high-speed hard disk interface conversion modules and hard disk groups is both a plurality, the number of high-speed hard disk interface conversion modules is equal to that of the hard disk groups, and the high-speed hard disk interface conversion modules are communicatively connected to the hard disk groups in a one-to-one correspondence; the number of physical data channels is a plurality;

[0010] The physical data channel is further configured to: sort and cache the input data to be stored to form a first data packet;

[0011] The first data conversion module is configured to: output the first data packet to the data read / write control module through connection conversion;

[0012] The data read / write control module is further configured to: input a third data packet into the data cache module, and when the data cache module returns writable disk information, read the third data packet in the data cache module and input it into the second data conversion module, where the writable disk information is used to indicate that the remaining space of the hard disk group can store the third data packet;

[0013] The second data conversion module is configured to: write the third data packet into the hard disk group through the high-speed hard disk interface conversion module.

[0014] Preferably, the physical data channel includes a multiplexer, a demultiplexer, and a plurality of virtual data channels; each virtual data channel includes a data cache block; the data cache blocks are communicatively connected to the multiplexer and the demultiplexer respectively;

[0015] The physical data channel is further configured to: perform virtual channel allocation on the input data according to the data information attached to the input data sent by an external device to form virtual channel data; sort and cache the virtual channel data to form a first data packet, and then output the first data packet to the first data conversion module.

[0016] Preferably, the physical data channel further includes a data input interface and a data output interface; the data input interfaces of each physical data channel are respectively communicatively connected to different data writing channels of an external device; the first data conversion module includes a plurality of data input channels and a plurality of data output channels; the number of data input channels of the first data conversion module is consistent with the number of physical data channels, and the number of data output channels of the first data conversion module is consistent with the number of data read / write control modules; the data output interfaces of each physical data channel are communicatively connected to the respective data input channels of the first data conversion module in a one-to-one correspondence;

[0017] Inside the physical data channel, the data input interface of the physical data channel is communicatively connected to the demultiplexer; each data output interface of the demultiplexer, the corresponding data input interface of the virtual data channel, the corresponding data output interface of the virtual data transmission channel, and the corresponding data output interface in the multiplexer are communicatively connected in sequence; the data output interface of the multiplexer is communicatively connected to the data output interface of the physical data channel;

[0018] The demultiplexer is configured to: distribute the input data input from the data input interface of the demultiplexer to different virtual data channels according to data information;

[0019] The virtual data channel is configured to: add the allocated virtual channel data to different virtual data channels and cache it;

[0020] The multiplexer is further configured to: orderly output the virtual channel data in multiple virtual data channels to form a first data packet.

[0021] Preferably, the first data conversion module further includes a data arbiter and a data router;

[0022] The data input channel of the first data conversion module is configured to: receive the first data packet from the physical data channel;

[0023] The data arbiter of the first data conversion module is configured to: perform access arbitration on the first data packet;

[0024] The data router of the first data conversion module is configured to: route the first data packet to multiple data output channels;

[0025] The data output channel of the first data conversion module is configured to: send the first data packet to the data read / write control module.

[0026] Preferably, the management module includes an upper computer bidirectional interaction interface and multiple first bidirectional interaction interfaces; the upper computer bidirectional interaction interface is communicatively connected to the upper computer for data interaction;

[0027] The data read / write control module includes a second bidirectional interaction interface; the number of the first bidirectional interaction interfaces of the management module is the same as the number of the data read / write control modules; the first bidirectional interaction interfaces and the second bidirectional interaction interfaces of the data read / write control modules are communicatively connected in one-to-one correspondence; the management module is used for control information interaction with the data read / write control module.

[0028] Preferably, the system further includes a plurality of data read channels, and a third data conversion module communicatively connected to the data read / write control module; the data read channels are used for communicatively connecting to external devices; the third data conversion module includes a data arbiter, a data router, a plurality of data input channels, and a plurality of data output channels; the number of data input channels of the third data conversion module is the same as the number of data read / write control modules; the number of data output channels of the third data conversion module is the same as the number of data read channels;

[0029] The second data conversion module includes a data arbiter, a data router, a plurality of slave data bidirectional interfaces, and a plurality of master data bidirectional interfaces; the number of slave data bidirectional interfaces of the second data conversion module is the same as the number of data read / write control modules; the number of master data bidirectional interfaces of the second data conversion module is the same as the number of high-speed hard disk interface conversion modules;

[0030] The data read / write control module further includes a direct read / write controller module, a trusted algorithm module, a data input interface, a data read interface, a first master data bidirectional interface, and a second master data bidirectional interface; each trusted algorithm module includes an encryption / decryption algorithm module and a digest algorithm module;

[0031] The data input interfaces of the respective data read / write control modules are communicatively connected to the respective data output channels of the first data conversion module in a one-to-one correspondence;

[0032] The data read interfaces of the respective data read / write control modules are communicatively connected to the respective data input channels of the third data conversion module in a one-to-one correspondence; the first master data bidirectional interfaces of the respective data read / write control modules are communicatively connected to the slave data bidirectional interaction interfaces of the respective data cache modules in a one-to-one correspondence; the second master data bidirectional interfaces of the respective data read / write control modules are connected to the respective slave data bidirectional interfaces of the second data conversion module in a one-to-one correspondence;

[0033] Inside the data read / write control module, the second bidirectional interaction interface is communicatively connected to the first information interaction interface of the direct read / write controller module; the data input interface of the data read / write control module is communicatively connected to the data input interface of the direct read / write controller module, the data output interface of the direct read / write controller module is communicatively connected to the data read interface of the data read / write control module, and the trusted operation information interaction interface of the direct read / write controller module is communicatively connected to the second information interaction interface of the encryption / decryption algorithm module; the master data bidirectional interaction interface of the direct read / write controller module is communicatively connected to the slave data bidirectional interaction interface of the encryption / decryption algorithm module; the master data bidirectional interaction interface of the encryption / decryption algorithm module is communicatively connected to the slave data bidirectional interaction interface of the digest algorithm module; the master data bidirectional interaction interface of the digest algorithm module is communicatively connected to the first master data bidirectional interface of the data read / write control module; the data bidirectional interface of the direct read / write controller module is communicatively connected to the second master data bidirectional interface of the data read / write control module;

[0034] The data reading and writing control module is further configured to: write the third data packet into the data cache module, and read out the third data packet from the data cache module and transfer it to the second data conversion module;

[0035] The data reading and writing control module is further configured to: when data needs to be read, receive the third data packet from the hard disk group through the second data conversion module and the high-speed hard disk interface conversion module and store it in the data cache module, then read out the third data packet from the data cache module and perform trusted verification, and then transfer the packet after the verification is completed to the third data conversion module, and then send the third data packet to an external device through the third data conversion module.

[0036] Preferably, the data reading and writing control module is further configured to:

[0037] When the digest algorithm module receives the disk reading control information input by the host computer through the management module and the second bidirectional interface, send a disk reading command to the hard disk group through the data bidirectional interface of the direct reading and writing controller module, and then receive the third data packet corresponding to the disk reading control information from the hard disk group, and pass the third data packet through the main data bidirectional interface of the direct reading and writing controller module through the encryption / decryption algorithm module and the digest algorithm module for straight-through processing and then write it into the data cache module through the first main data bidirectional interface;

[0038] The direct reading and writing controller module controls to read out the third data packet in the data cache module, and inputs it into the digest algorithm module through the main data bidirectional interface of the direct reading and writing controller module for trusted verification;

[0039] If the trusted verification passes, the first digest information is removed from the third data packet to form a fourth data packet, and the fourth data packet is input into the encryption / decryption algorithm module through the second main data bidirectional interface of the encryption / decryption algorithm module for decryption to form a fifth data packet; the fifth data packet is input into the direct reading and writing controller module through the main data bidirectional interface of the direct reading and writing controller module, and then the fifth data packet is forwarded to the data read-out interface through the data output interface of the direct reading and writing controller module, and then the fifth data packet is sent to the data output channel of the third data conversion module through the data read-out interface, and the fifth data packet is sent to an external device through the data output channel and the data read-out channel of the third data conversion module;

[0040] If the trusted verification fails, a verification error signal is generated, and then the verification error signal is returned to the management module through the second bidirectional interaction interface of the direct read / write controller module. The process of the trusted verification is as follows: Calculate the second data packet in the third data packet through a digest algorithm to obtain the second digest information corresponding to the second data packet, and compare whether the first digest information and the second digest information are consistent. If they are consistent, the trusted verification passes; if they are inconsistent, the trusted verification fails.

[0041] Preferably, the data read / write control module is further configured to: input command information through the second bidirectional interaction interface and perform read / write operations on the data cache module based on the main data bidirectional interaction interface of the direct read / write controller module; perform read / write operations on the hard disk group through the main data bidirectional interaction interface of the direct read / write controller module; read and output the data on the hard disk group through the data output interface of the direct read / write controller module; complete the forwarding operation of the trusted processing information through the trusted operation information interaction interface of the direct read / write controller module; return control information to the management module through the second bidirectional interaction interface;

[0042] The encryption / decryption algorithm module is configured to: according to the trusted processing information received through the second information interaction interface, encrypt the data packet to be encrypted received through the slave data bidirectional interaction interface of the encryption / decryption algorithm module, and then forward it to the direct read / write controller module through the main data bidirectional interaction interface of the encryption / decryption algorithm module; perform a pass-through process on the data packet that does not need to be encrypted and then forward it to the direct read / write controller module through the main data bidirectional interaction interface of the encryption / decryption algorithm module; decrypt the data packet to be decrypted received through the main data bidirectional interaction interface of the encryption / decryption algorithm module, and then forward it to the direct read / write controller module through the data slave bidirectional interaction interface of the encryption / decryption algorithm module. Perform a pass-through process on the data packet that does not need to be encrypted and then forward it to the direct read / write controller module through the slave data bidirectional interaction interface of the encryption / decryption algorithm module;

[0043] The direct read / write controller module is configured to:

[0044] Perform a digest calculation on the second data packet received through the main data bidirectional interaction interface of the encryption / decryption algorithm module, and form a third data packet by combining the calculated first digest information with the original second data packet. Then, forward the third data packet to the first main data bidirectional interface of the data read / write control module through the main data bidirectional interaction interface of the digest algorithm module;

[0045] Perform a digest calculation on the third data packet received by the master data bi-directional interaction interface of the digest algorithm module to obtain the second digest information, and compare whether the first digest information and the second digest information are consistent. If they are consistent, forward the third data packet with the second digest information removed to the encryption / decryption algorithm module through the slave data bi-directional interaction interface of the digest algorithm module. If they are inconsistent, generate a verification error signal and forward it to the encryption / decryption algorithm module through the slave data bi-directional interaction interface of the digest algorithm module; for the data packet received by the master data bi-directional interaction interface of the digest algorithm module that does not need to be encrypted, directly forward it to the encryption / decryption algorithm module through the slave data bi-directional interaction interface of the digest algorithm module.

[0046] Preferably, the data cache module includes a slave data bi-directional interaction interface, a cache block control module, and a data cache block; the slave data bi-directional interaction interface of the data cache module is communicatively connected to the data bi-directional interface of the cache block control module; the data bi-directional interface of the cache block control module is communicatively connected to the data bi-directional interface of the data cache block of the data cache module;

[0047] The data cache module is used to: complete the writing and reading of data according to the read / write commands and data sent by the data read / write control module; implement the parsing and response of the commands sent by the data read / write control module through the cache block control module, and generate read / write operations on the data cache block of the data cache module to complete the reading or writing of data.

[0048] Through the above technical solutions, the following beneficial effects can be achieved:

[0049] The high-speed trusted data storage system proposed by the present invention uses the underlying hardware data read / write control module DMM to perform encryption and digest algorithms on the input data input by external devices, that is, the underlying hardware completes the data encryption and integrity verification operations. Compared with the traditional solution that uses application layer software to complete data encryption and integrity verification, it can improve the operation speed and reduce the consumption of CPU operation resources, and can take into account the controllable flexibility of software and the reliability and speed of hardware; and this solution caches data through multiple physical data channels P_CH, which can reduce the performance bottleneck of data read / write operations and improve the data read / write speed. Description of the Drawings

[0050] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings required for use in the description of the embodiments or the prior art. Obviously, the following drawings are only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other drawings can be obtained based on the structures shown in these drawings.

[0051] Figure 1Schematic diagram of the module structure of a high-speed trusted data storage system proposed by the present invention;

[0052] Figure 2 Schematic diagram of the module structure of the physical data channel P_CH of a high-speed trusted data storage system proposed by the present invention;

[0053] Figure 3 Schematic diagram of the module structure of the second data conversion module Switch2 of a high-speed trusted data storage system proposed by the present invention;

[0054] Figure 4 Schematic diagram of the module structure of the data read / write control module DMM of a high-speed trusted data storage system proposed by the present invention;

[0055] Figure 5 Schematic diagram of the module structure of the data cache module DAT_CACHE of a high-speed trusted data storage system proposed by the present invention.

[0056] Explanation of reference numerals:

[0057] 0, First information interaction interface; 1, Data input interface; 2, Data output interface; 3, Trusted operation information interaction interface; 4, Main data bidirectional interaction interface; 5, Data bidirectional interface; 6, Second information interaction interface; 7, Slave data bidirectional interaction interface; 8, Main data bidirectional interaction interface; 9, Slave data bidirectional interaction interface; 10, Main data bidirectional interaction interface; 11, Data bidirectional interface; 12, Data bidirectional interface; 13, Data bidirectional interface. Detailed implementation manners

[0058] It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0059] The present invention proposes a high-speed trusted data storage system.

[0060] As shown in the appendix Figures 1 to 5As shown, in an embodiment of a high-speed trusted data storage system proposed by the present invention, the system includes a first data conversion module Switch1, a second data conversion module Switch2, a management module Admin, a physical data channel P_CH, a data read / write control module DMM, a high-speed hard disk interface conversion module DWC_CTL, and a hard disk group Disk; the data read / write control module DMM and the physical data channel P_CH are both communicatively connected to the first data conversion module Switch1; the second data conversion module Switch2 and the management module Admin are both communicatively connected to the data read / write control module DMM; the second data conversion module Switch2 and the hard disk group Disk are both communicatively connected to the high-speed hard disk interface conversion module DWC_CTL; the management module Admin is used to communicatively connect to a host computer; the physical data channel P_CH is used to communicatively connect to external devices; the external devices here can be the user's application client (such as a personal computer).

[0061] The physical data channel P_CH is used to: obtain input data to be stored from external devices, generate a first data packet, and then send the first data packet to the data read / write control module DMM through the first data conversion module Switch1.

[0062] The data read / write control module DMM is used to: encrypt the first data packet based on write control information to obtain a corresponding second data packet; then calculate the second data packet through a digest algorithm (Digest algorithm) to obtain first digest information corresponding to the second data packet, and package the second data packet and the corresponding first digest information into a new data packet, which is marked as the third data packet, and then input the third data packet into the hard disk group Disk through the second data conversion module Switch2 and the high-speed hard disk interface conversion module DWC_CTL, where the write control information is sent from the host computer to the data read / write control module DMM through the management module Admin, and the write control information includes the storage location where the third data packet needs to be written into the hard disk group Disk.

[0063] In the high-speed trusted data storage system proposed by the present invention, the underlying hardware data read / write control module DMM is used to complete the encryption and digest algorithm for the input data from external devices, that is, the underlying hardware is used to complete the data encryption and integrity verification operations. Compared with the traditional solution that uses application layer software to complete the data encryption and integrity verification, it can improve the operation speed and reduce the consumption of CPU operation resources, and can take into account the controllable flexibility of software and the reliability and speed of hardware; and this solution can reduce the performance bottleneck of data read / write operations and improve the data read / write speed by setting multiple physical data channels P_CH to cache data.

[0064] In addition, the system further includes a data cache module DAT_CACHE, and there are multiple (e.g., M) data cache modules DAT_CACHE; the number of data read / write control modules DMM is equal to the number of data cache modules DAT_CACHE (i.e., the number of data read / write control modules DMM is also M), and the data read / write control modules DMM are communicatively connected to the data cache modules DAT_CACHE in a one-to-one correspondence; the number of high-speed hard disk interface conversion modules DWC_CTL and the number of hard disk groups Disk are both multiple (in this embodiment, the number of high-speed hard disk interface conversion modules DWC_CTL and the number of hard disk groups Disk are both N), the number of high-speed hard disk interface conversion modules DWC_CTL is equal to the number of hard disk groups Disk, and the high-speed hard disk interface conversion modules DWC_CTL and the hard disk groups Disk are communicatively connected to each other in a one-to-one correspondence; the number of physical data channels P_CH is multiple (e.g., X); the above X, M, and N are all positive integers.

[0065] The physical data channel P_CH is further configured to: sort and cache the input data to be stored and form a first data packet.

[0066] The first data conversion module Switch1 is configured to: output the first data packet to the data read / write control module DMM through connection conversion.

[0067] The data read / write control module DMM is further configured to: input a third data packet into the data cache module DAT_CACHE, and when the data cache module DAT_CACHE returns writable disk information, read the third data packet in the data cache module DAT_CACHE and input it into the second data conversion module Switch2, where the writable disk information is used to indicate that the remaining space of the hard disk group Disk can store the third data packet.

[0068] The second data conversion module Switch2 is configured to: write the third data packet into the hard disk group Disk through the high-speed hard disk interface conversion module DWC_CTL.

[0069] This embodiment provides specific working solutions for the physical data channel P_CH, the data read / write control module DMM, and the second data conversion module Switch2.

[0070] In addition, as shown in the appendix Figure 2 The physical data channel P_CH includes 1 demultiplexer DMUX_P, 1 multiplexer MUX_P, and multiple virtual data channels V_CH (e.g., I); each virtual data channel V_CH includes 1 data cache block V_RAM; the data cache blocks V_RAM are communicatively connected to the demultiplexer DMUX_P and the multiplexer MUX_P respectively.

[0071] The physical data channel P_CH is also used for: performing virtual channel allocation on the input data according to the data information attached to the input data sent by the external device to form virtual channel data; sorting and caching the virtual channel data to form a first data packet, and then outputting the first data packet to the first data conversion module Switch1.

[0072] This embodiment gives a specific solution on how the physical data channel P_CH outputs the first data packet to the first data conversion module Switch1.

[0073] In addition, the physical data channel P_CH further includes a data input interface Sdin and a data output interface MDout; the data input interfaces Sdin of each physical data channel P_CH are respectively communicatively connected to different data writing channels of the external device. Specifically: the data input interface Sdin of the xth (x is a positive integer and x ≤ X) physical data channel P_CH x is communicatively connected to the xth data writing channel Datain Channel of the external device x for communication.

[0074] The first data conversion module Switch1 includes multiple data input channels Sin and multiple data output channels Mout; the number of data input channels Sin of the first data conversion module Switch1 is the same as the number of physical data channels P_CH, and the number of data output channels Mout of the first data conversion module Switch1 is the same as the number of data reading and writing control modules DMM; specifically: the first data conversion module Switch1 includes X data input channels Sin and M data output channels Mout; the data output interface MDout of the xth physical data channel P_CH x is communicatively connected to the xth data input channel Sin of the first data conversion module Switch1 x for communication; x is a positive integer less than or equal to X.

[0075] The data output interface MDout of each physical data channel P_CH is communicatively connected to each data input channel Sin of the first data conversion module Switch1 in a one-to-one correspondence.

[0076] Inside the physical data channel P_CH, the data input interface Sdin of the physical data channel P_CH is communicatively connected to the demultiplexer DMUX_P; each data output interface of the demultiplexer DMUX_P, the data input interface of the corresponding virtual data channel V_CH, the data output interface of the corresponding virtual data transmission channel V_CH, and the corresponding data output interface in the multiplexer MUX_P are communicatively connected in sequence.

[0077] Specifically: The i-th data output interface of the demultiplexer DMUX_P is communicatively connected to the data input interface of the i-th virtual data channel V_CH (i is a positive integer and i ≤ I); the data output interface of the i-th virtual data channel V_CH is communicatively connected to the i-th data input interface of the multiplexer MUX_P; the data output interface of the multiplexer MUX_P is communicatively connected to the data output interface MDout of the physical data channel P_CH; i is a positive integer less than or equal to I.

[0078] The demultiplexer DMUX_P is used to: distribute the input data input from the data input interface Sdin of the demultiplexer DMUX_P to different virtual data channels V_CH according to data information.

[0079] The virtual data channel V_CH is used to: add the allocated virtual channel data to different channels and cache it.

[0080] The multiplexer MUX_P is further used to: orderly output the virtual channel data in multiple virtual data channels V_CH to form a first data packet.

[0081] Specifically, this embodiment provides a specific solution for the physical data channel P_CH to generate a first data packet based on the input data to be stored.

[0082] In addition, the first data conversion module Switch1 further includes 1 data arbiter Arbiter and 1 data router Router.

[0083] The data input channel Sin of the first data conversion module Switch1 is used to: receive the first data packet from the physical data channel P_CH.

[0084] The data arbiter Arbiter of the first data conversion module Switch1 is used to: perform access arbitration on the first data packet.

[0085] The data router Router of the first data conversion module Switch1 is used to: route the first data packet to multiple data output channels Mout.

[0086] The data output channel Mout of the first data conversion module Switch1 is used to: send the first data packet to the data read / write control module DMM.

[0087] Specifically, this embodiment provides a specific solution for how the first data conversion module Switch1 sends the first data packet to the data read / write control module DMM.

[0088] In addition, the management module Admin includes one host computer two-way interaction interface and multiple first two-way interaction interfaces Mkinout (specifically M); the host computer two-way interaction interface is communicatively connected to the host computer for data interaction, specifically including the issuance of disk reading control information, the issuance of write control information, and other information interaction operations of the host computer.

[0089] As shown in the appendix Figure 4 As shown, the data reading and writing control module DMM includes one second two-way interaction interface Sminout; the number of the first two-way interaction interfaces Mkinout of the management module Admin is the same as the number of the data reading and writing control modules DMM; the first two-way interaction interfaces Mkinout and the second two-way interaction interfaces Sminout of the data reading and writing control module DMM are communicatively connected in one-to-one correspondence; specifically: the m-th first two-way interaction interface Mkinout of the management module Admin m is communicatively connected to the second two-way interaction interface Sminout of the m-th data reading and writing control module DMM (m is a positive integer and m ≤ M), and the management module Admin is used to perform control information interaction with the data reading and writing control module DMM, and the control information includes first summary information, writable disk information, and write control information; where m is a positive integer less than or equal to M.

[0090] This embodiment gives the specific structure and application functions of the management module Admin.

[0091] In addition, the system further includes multiple data readout channels DataOut (specifically Y), and a third data conversion module Switch3 communicatively connected to the data reading and writing control module DMM; the data readout channels DataOut are used to be communicatively connected to external devices; the third data conversion module Switch3 includes one data arbiter Arbiter, one data router Router, multiple data input channels Sin (specifically M), and multiple data output channels Mout (specifically Y); Y is a positive integer.

[0092] That is, the number of the data input channels Sin of the third data conversion module Switch3 is the same as the number of the data reading and writing control modules DMM; the number of the data output channels Mout of the third data conversion module Switch3 is the same as the number of the data readout channels DataOut.

[0093] The second data conversion module Switch2 includes M slave data two-way interfaces Sinout (as shown in the appendix Figure 3 shown, Sinout m is the m-th slave data two-way interface), one data arbiter Arbiter, one data router Router, and N master data two-way interfaces Minout (as shown in the appendixFigure 3 As shown, Minout n is the nth master data bidirectional interface, where n is a positive integer less than or equal to N).

[0094] The data read / write control module DMM also includes 1 direct read / write controller module DMA, 1 trusted algorithm module MM, 1 data input interface Sdin, 1 data readout interface Mdout, 1 first master data bidirectional interface Mdinout0, and 1 second master data bidirectional interface Mdinout1; each trusted algorithm module MM includes 1 encryption / decryption algorithm module JMA and 1 digest algorithm module MDA.

[0095] The data input interfaces Sdin of each data read / write control module DMM are communicatively connected to the respective data output channels Mout of the first data conversion module Switch1 in a one-to-one correspondence; specifically: the data input interface Sdin of the mth data read / write control module DMM m is communicatively connected to the mth data output channel Mout of the first data conversion module Switch1 m for communication connection.

[0096] The data readout interfaces Mdout of each data read / write control module DMM are communicatively connected to the respective data input channels Sin of the third data conversion module Switch3 in a one-to-one correspondence; specifically: the data readout interface Mdout of the mth data read / write control module DMM is communicatively connected to the mth data input channel Sin of the third data conversion module Switch3 m for communication connection.

[0097] The first master data bidirectional interfaces Mdinout0 of each data read / write control module DMM are communicatively connected to the slave data bidirectional interaction interfaces Srdinout of the respective data cache modules DAT_CACHEr in a one-to-one correspondence; specifically: the first master data bidirectional interface Mdinout0 of the mth data read / write control module DMM is communicatively connected to the slave data bidirectional interaction interface Srdinout of the mth data cache module DAT_CACHEr.

[0098] The second master data bidirectional interfaces Mdinout1 of each data read / write control module DMM are connected to the respective slave data bidirectional interfaces Sinout of the second data conversion module Switch2 in a one-to-one correspondence; specifically: the second master data bidirectional interface Mdinout1 of the mth data read / write control module DMM is connected to the mth slave data bidirectional interface Sinout of the second data conversion module Switch2 m for connection.

[0099] Inside the data read / write control module DMM, the second bidirectional interaction interface Sminout is communicatively connected to the first information interaction interface 0 of the direct read / write controller module DMA; the data input interface Sdin of the data read / write control module DMM is communicatively connected to the data input interface 1 of the direct read / write controller module DMA, the data output interface 2 of the direct read / write controller module DMA is communicatively connected to the data readout interface Mdout of the data read / write control module DMM, and the trusted operation information interaction interface 3 of the direct read / write controller module DMA is communicatively connected to the second information interaction interface 6 of the encryption / decryption algorithm module JMA; the main data bidirectional interaction interface 4 of the direct read / write controller module DMA is communicatively connected to the slave data bidirectional interaction interface 7 of the encryption / decryption algorithm module JMA; the main data bidirectional interaction interface 8 of the encryption / decryption algorithm module JMA is communicatively connected to the slave data bidirectional interaction interface 9 of the digest algorithm module MDA; the main data bidirectional interaction interface 10 of the digest algorithm module MDA is communicatively connected to the first main data bidirectional interface Mdinout0 of the data read / write control module DMM; the data bidirectional interface 5 of the direct read / write controller module DMA is communicatively connected to the second main data bidirectional interface Mdinout1 of the data read / write control module DMM.

[0100] The data read / write control module DMM is further configured to: write the third data packet into the data cache module DAT_CACHE, and read out the third data packet from the data cache module DAT_CACHE to transfer it to the second data conversion module Switch2.

[0101] Specifically, it caches the third data packet and writes it into the hard disk group Disk for storage.

[0102] The data read / write control module DMM is further configured to: when data needs to be read, receive the third data packet from the hard disk group Disk through the second data conversion module Switch2 and the high-speed hard disk interface conversion module DWC_CTL and store it in the data cache module DAT_CACHE, then read out the third data packet from the data cache module DAT_CACHE and perform trusted verification, and then transfer the verified data packet to the third data conversion module Switch3, and then send the third data packet to an external device through the third data conversion module Switch3.

[0103] Specifically, this embodiment provides a solution for reading data through the data read / write control module DMM.

[0104] In addition, the data read / write control module DMM is further configured to:

[0105] When the message digest algorithm module MDA receives the disk reading control information input by the host computer through the management module Admin and the second bidirectional interaction interface Sminout interface, it sends a disk reading command to the hard disk group Disk through the data bidirectional interface 5 of the direct read-write controller module DMA, and then receives the third data packet corresponding to the disk reading control information from the hard disk group Disk, and passes the third data packet through the main data bidirectional interaction interface 4 of the direct read-write controller module DMA. After passing through the encryption / decryption algorithm module JMA and the message digest algorithm module MDA for straight-through processing, it is written into the data cache module DAT_CACHE through the first main data bidirectional interface Mdinout0 interface; the disk reading control information here is used to represent the storage address of the data that the user needs to read in the hard disk group Disk.

[0106] The direct read-write controller module DMA controls the reading of the third data packet in the data cache module DAT_CACHE, and inputs it to the message digest algorithm module MDA through the main data bidirectional interaction interface 10 of the direct read-write controller module DMA for trusted verification.

[0107] If the trusted verification passes, the first message digest information is removed from the third data packet to form a fourth data packet, and the fourth data packet is input to the encryption / decryption algorithm module JMA through the second main data bidirectional interaction interface 8 of the encryption / decryption algorithm module JMA for decryption to form a fifth data packet; the fifth data packet is input to the direct read-write controller module DMA through the main data bidirectional interaction interface 4 of the direct read-write controller module DMA, and then the fifth data packet is forwarded to the data read-out interface Mdout through the data output interface 2 of the direct read-write controller module DMA, and then the fifth data packet is sent to the data output channel Mout of the third data conversion module Switch3 through the data read-out interface Mdout, and the fifth data packet is sent to the external device through the data output channel Mout and the data read-out channel DataOut of the third data conversion module Switch3.

[0108] If the trusted verification fails, a verification error signal is generated, and then the verification error signal is returned to the management module Admin through the second bidirectional interaction interface Sminout of the direct read-write controller module DMA. Among them, the process of trusted verification is: calculate the second data packet in the third data packet through the message digest algorithm to obtain the second message digest information corresponding to the second data packet, and compare whether the first message digest information and the second message digest information are consistent. If they are consistent, the trusted verification passes; if they are inconsistent, the trusted verification fails.

[0109] Specifically, this embodiment gives a specific solution for reading data through the data read-write control module DMM.

[0110] In addition, the data read / write control module DMM is further configured to: input command information through the second bidirectional interaction interface Sminout and perform read / write operations on the data cache module DAT_CACHE based on the main data bidirectional interaction interface 4 of the direct read / write controller module DMA; perform read / write operations on the hard disk group Disk through the main data bidirectional interaction interface 4 of the direct read / write controller module DMA; read the data on the hard disk group Disk through the data output interface 2 of the direct read / write controller module DMA and output the data; complete the forwarding operation of the trusted processing information (here, the trusted processing information includes the encryption key of the encryption algorithm, the decryption key of the encryption algorithm, the initial vector, the data packet to be encrypted (such as the first data packet), the data packet to be decrypted (such as the fourth data packet)) through the trusted operation information interaction interface 3 of the direct read / write controller module DMA; return control information to the management module Admin through the second bidirectional interaction interface Sminout; specifically, the control information here includes write control information, the first digest information, a verification error signal, writable disk information, and read disk control information.

[0111] The encryption / decryption algorithm module JMA is configured to: encrypt the data packet to be encrypted (such as the first data packet) received from the slave data bidirectional interaction interface 7 of the encryption / decryption algorithm module JMA according to the trusted processing information received through the second information interaction interface 6, and then forward the encrypted data packet to the direct read / write controller module DMA through the main data bidirectional interaction interface 8 of the encryption / decryption algorithm module JMA; perform a pass-through process on the data packet that does not need to be encrypted (such as the third data packet and the fifth data packet) and then forward the data packet to the direct read / write controller module DMA through the main data bidirectional interaction interface 8 of the encryption / decryption algorithm module JMA; decrypt the data packet to be decrypted received from the main data bidirectional interaction interface 8 of the encryption / decryption algorithm module JMA and then forward the decrypted data packet to the direct read / write controller module DMA through the slave data bidirectional interaction interface 7 of the encryption / decryption algorithm module JMA, and perform a pass-through process on the data packet that does not need to be encrypted and then forward the data packet to the direct read / write controller module DMA through the slave data bidirectional interaction interface 7 of the encryption / decryption algorithm module JMA.

[0112] The direct read / write controller module DMA is configured to:

[0113] calculate the digest of the second data packet received from the main data bidirectional interaction interface 8 of the encryption / decryption algorithm module JMA, form the third data packet by combining the calculated first digest information with the original second data packet, and then forward the third data packet to the first main data interface Mdinout0 of the data read / write control module DMM through the main data bidirectional interaction interface 10 of the digest algorithm module MDA.

[0114] Perform a digest calculation on the third data packet received by the master data two-way interaction interface 10 of the digest algorithm module MDA to obtain the second digest information, and compare whether the first digest information and the second digest information are consistent. If they are consistent, forward the third data packet with the second digest information removed to the encryption / decryption algorithm module JMA through the slave data two-way interaction interface 9 of the digest algorithm module MDA. If they are inconsistent, generate a verification error signal and forward it to the encryption / decryption algorithm module JMA through the slave data two-way interaction interface 9 of the digest algorithm module MDA; for the data packet received by the master data two-way interaction interface 10 of the digest algorithm module MDA that does not need to be encrypted, directly forward it to the encryption / decryption algorithm module JMA through the slave data two-way interaction interface 9 of the digest algorithm module MDA.

[0115] Specifically, this embodiment gives the specific working principle of the data read / write control module DMM when performing data read / write.

[0116] In addition, as shown in the appendix Figure 5 The data cache module DAT_CACHE includes a slave data two-way interaction interface Srdinout, 1 cache block control module RAM_CTAL, and 1 data cache block DAT_RAM; the slave data two-way interaction interface Srdinout of the data cache module DAT_CACHE is communicatively connected to the data two-way interface 11 of the cache block control module RAM_CTAL; the data two-way interface 12 of the cache block control module RAM_CTAL is communicatively connected to the data two-way interface 13 of the data cache block DAT_RAM of the data cache module DAT_CACHE.

[0117] The data cache module DAT_CACHE is used for: completing the writing and reading of data according to the read / write commands and data sent by the data read / write control module DMM; realizing the parsing and response of the commands sent by the data read / write control module DMM through the cache block control module RAM_CTAL, and generating read / write operations on the data cache block DAT_RAM of the data cache module DAT_CACHE to complete the reading or writing of data; the data cache block DAT_RAM can be a RAM, DDR, Flash, or other storage devices, devices, or equipment that can complete the rapid writing and reading of data.

[0118] Specifically, this embodiment gives the specific working principle of the data cache module DAT_CACHE when performing data read / write.

[0119] The above serial numbers of the embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

[0120] Through the description of the above embodiments, those skilled in the art can clearly understand that the above method of the embodiments can be implemented by means of software plus a necessary general hardware platform. Of course, it can also be implemented by hardware, but in many cases the former is a better implementation. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art can be embodied in the form of a software product. The computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes several instructions for causing a terminal (which can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to execute the methods described in the various embodiments of the present invention.

[0121] The embodiments of the present invention have been described above in conjunction with the accompanying drawings. However, the present invention is not limited to the above specific embodiments. The above specific embodiments are merely illustrative and not restrictive. Under the inspiration of the present invention, those of ordinary skill in the art can also make many forms without departing from the spirit and scope protected by the claims of the present invention. All of these are within the protection scope of the present invention.

Claims

1. A high-speed trusted data storage system, characterized in that, It includes a first data conversion module, a second data conversion module, a management module, a physical data channel, a data read / write control module, a high-speed hard disk interface conversion module, and a hard disk group; the data read / write control module and the physical data channel are both communicatively connected to the first data conversion module; the second data conversion module and the management module are both communicatively connected to the data read / write control module; the second data conversion module and the hard disk group are both communicatively connected to the high-speed hard disk interface conversion module; the management module is used to be communicatively connected to a host computer; the physical data channel is used to be communicatively connected to external devices; The physical data channel is used for: obtaining input data to be stored from external devices, generating a first data packet, and then sending the first data packet to the data read / write control module through the first data conversion module; The data read / write control module is used for: encrypting the first data packet based on write control information to obtain a corresponding second data packet; then calculating the second data packet through a digest algorithm to obtain first digest information corresponding to the second data packet, and packing the second data packet and the corresponding first digest information into a new data packet, marking it as a third data packet, and then inputting the third data packet into the hard disk group through the second data conversion module and the high-speed hard disk interface conversion module, where the write control information is sent from the host computer to the data read / write control module through the management module; The system further includes a data cache module, and there are multiple data cache modules; the number of data read / write control modules is equal to the number of data cache modules, and the data read / write control modules are communicatively connected to the data cache modules in a one-to-one correspondence; the number of high-speed hard disk interface conversion modules and hard disk groups is both multiple, the number of high-speed hard disk interface conversion modules is equal to the number of hard disk groups, and the high-speed hard disk interface conversion modules and the hard disk groups are communicatively connected to each other in a one-to-one correspondence; the number of physical data channels is multiple; The physical data channel is further used for: sorting and caching the input data to be stored to form a first data packet; The first data conversion module is used for: outputting the first data packet to the data read / write control module through connection conversion; The data read / write control module is further used for: inputting the third data packet into the data cache module, and when the data cache module returns writable disk information, reading the third data packet in the data cache module and inputting it into the second data conversion module, where the writable disk information is used to indicate that the remaining space of the hard disk group can store the third data packet; The second data conversion module is used for: writing the third data packet into the hard disk group through the high-speed hard disk interface conversion module.

2. A high-speed trusted data storage system according to claim 1, characterized in that, The physical data channel includes a demultiplexer, a multiplexer, and multiple virtual data channels; each virtual data channel includes a data cache block; the data cache blocks are respectively communicatively connected to the demultiplexer and the multiplexer; The physical data channel is further used for: performing virtual channel allocation on the input data according to the data information attached to the input data sent by external devices to form virtual channel data; sorting and caching the virtual channel data to form a first data packet, and then outputting the first data packet to the first data conversion module.

3. A high-speed trusted data storage system according to claim 2, characterized in that, The physical data channel further includes a data input interface and a data output interface; the data input interfaces of each physical data channel are respectively communicatively connected to different data writing channels of an external device; the first data conversion module includes a plurality of data input channels and a plurality of data output channels; The number of data input channels of the first data conversion module is the same as the number of physical data channels, and the number of data output channels of the first data conversion module is the same as the number of data reading and writing control modules; the data output interfaces of each physical data channel are communicatively connected to the respective data input channels of the first data conversion module in a one-to-one correspondence; Inside the physical data channel, the data input interface of the physical data channel is communicatively connected to a demultiplexer; Each data output interface of the demultiplexer, the data input interface of the corresponding virtual data channel, the data output interface of the corresponding virtual data transmission channel, and the corresponding data output interface in the multiplexer are communicatively connected in sequence; the data output interface of the multiplexer is communicatively connected to the data output interface of the physical data channel; The demultiplexer is configured to: distribute the input data input from the data input interface of the demultiplexer to different virtual data channels according to data information; The virtual data channel is configured to: add the allocated virtual channel data to different virtual data channels and perform caching; The multiplexer is further configured to: orderly output the virtual channel data in multiple virtual data channels to form a first data packet.

4. A high-speed trusted data storage system according to claim 3, characterized in that, The first data conversion module further includes a data arbiter and a data router; The data input channels of the first data conversion module are configured to: receive the first data packet from the physical data channel; The data arbiter of the first data conversion module is configured to: perform access arbitration on the first data packet; The data router of the first data conversion module is configured to: route the first data packet to multiple data output channels; The data output channels of the first data conversion module are configured to: send the first data packet to the data reading and writing control module.

5. A high-speed trusted data storage system according to claim 4, wherein, The management module includes an upper computer bidirectional interaction interface and a plurality of first bidirectional interaction interfaces; the upper computer bidirectional interaction interface is communicatively connected to an upper computer for data interaction; The data reading and writing control module includes a second bidirectional interaction interface; the number of first bidirectional interaction interfaces of the management module is the same as the number of data reading and writing control modules; The first bidirectional interaction interfaces and the second bidirectional interaction interfaces of the data reading and writing control module are communicatively connected in a one-to-one correspondence; The management module is configured to perform control information interaction with the data reading and writing control module.

6. The high-speed trusted data storage system according to claim 5, wherein The system further includes a plurality of data reading channels, and a third data conversion module communicatively connected to the data reading and writing control module; the data reading channels are used for communicatively connecting to an external device; the third data conversion module includes a data arbiter, a data router, a plurality of data input channels, and a plurality of data output channels; The number of data input channels of the third data conversion module is the same as the number of data reading and writing control modules; The number of data output channels of the third data conversion module is the same as the number of data reading channels; The second data conversion module includes a data arbiter, a data router, multiple slave data bidirectional interfaces, and multiple master data bidirectional interfaces; the number of slave data bidirectional interfaces of the second data conversion module is the same as the number of data read / write control modules; the number of master data bidirectional interfaces of the second data conversion module is the same as the number of high-speed hard disk interface conversion modules; The data read / write control module further includes a direct read / write controller module, a trusted algorithm module, a data input interface, a data readout interface, a first master data bidirectional interface, and a second master data bidirectional interface; each trusted algorithm module includes an encryption / decryption algorithm module and a digest algorithm module; The data input interfaces of the respective data read / write control modules are communicatively connected to the respective data output channels of the first data conversion module in a one-to-one correspondence; The data readout interfaces of the respective data read / write control modules are communicatively connected to the respective data input channels of the third data conversion module in a one-to-one correspondence; the first master data bidirectional interfaces of the respective data read / write control modules are communicatively connected to the slave data bidirectional interaction interfaces of the respective data cache modules in a one-to-one correspondence; the second master data bidirectional interfaces of the respective data read / write control modules are connected to the respective slave data bidirectional interfaces of the second data conversion module in a one-to-one correspondence; Inside the data read / write control module, the second bidirectional interaction interface is communicatively connected to the first information interaction interface of the direct read / write controller module; the data input interface of the data read / write control module is communicatively connected to the data input interface of the direct read / write controller module, the data output interface of the direct read / write controller module is communicatively connected to the data readout interface of the data read / write control module, and the trusted operation information interaction interface of the direct read / write controller module is communicatively connected to the second information interaction interface of the encryption / decryption algorithm module; the first master data bidirectional interaction interface of the direct read / write controller module is communicatively connected to the first slave data bidirectional interaction interface of the encryption / decryption algorithm module; the second master data bidirectional interaction interface of the encryption / decryption algorithm module is communicatively connected to the second slave data bidirectional interaction interface of the digest algorithm module; the third master data bidirectional interaction interface of the digest algorithm module is communicatively connected to the first master data bidirectional interface of the data read / write control module; the first data bidirectional interface of the direct read / write controller module is communicatively connected to the second master data bidirectional interface of the data read / write control module; The data read / write control module is further configured to: write the third data packet into the data cache module and read out the third data packet from the data cache module for transmission to the second data conversion module; The data read / write control module is further configured to: when data needs to be read, receive the third data packet from the hard disk group through the second data conversion module and the high-speed hard disk interface conversion module and store it in the data cache module, then read out the third data packet from the data cache module and perform trusted verification, and then transmit the packet after the verification is completed to the third data conversion module, and then send the third data packet to an external device through the third data conversion module.

7. A high-speed trusted data storage system according to claim 6, wherein The data read / write control module is further configured to: When the digest algorithm module receives the disk reading control information input by the host computer through the management module and the second bidirectional interface, it sends a disk reading command to the hard disk group through the first data bidirectional interface of the direct read-write controller module, then receives the third data packet corresponding to the disk reading control information from the hard disk group, and writes the third data packet into the data cache module through the first main data bidirectional interface of the direct read-write controller module after passing through the encryption / decryption algorithm module and the digest algorithm module for straight-through processing; The direct read-write controller module controls the third data packet read out from the data cache module and inputs it into the digest algorithm module through the third main data bidirectional interface of the direct read-write controller module for trusted verification; If the trusted verification passes, the first digest information is removed from the third data packet to form a fourth data packet, and the fourth data packet is input into the encryption / decryption algorithm module through the second main data bidirectional interface of the encryption / decryption algorithm module for decryption to form a fifth data packet; the fifth data packet is input into the direct read-write controller module through the first main data bidirectional interface of the direct read-write controller module, then the fifth data packet is forwarded to the data read-out interface through the data output interface of the direct read-write controller module, and then the fifth data packet is sent to the data output channel of the third data conversion module through the data read-out interface, and the fifth data packet is sent to the external device through the data output channel and the data read-out channel of the third data conversion module; If the trusted verification fails, a verification error signal is generated, and then the verification error signal is returned to the management module through the second bidirectional interface of the direct read-write controller module. Among them, the process of trusted verification is: calculate the second data packet in the third data packet through the digest algorithm to obtain the second digest information corresponding to the second data packet, and compare whether the first digest information and the second digest information are consistent. If they are consistent, the trusted verification passes; if they are inconsistent, the trusted verification fails.

8. A high-speed trusted data storage system according to claim 7, wherein The data read-write control module is also used for: inputting command information through the second bidirectional interface and performing read-write operations on the data cache module based on the first main data bidirectional interface of the direct read-write controller module; performing read-write operations on the hard disk group through the first main data bidirectional interface of the direct read-write controller module; reading and outputting the data on the hard disk group through the data output interface of the direct read-write controller module; completing the forwarding operation of the trusted processing information through the trusted operation information interaction interface of the direct read-write controller module; returning control information to the management module through the second bidirectional interface; The encryption / decryption algorithm module is used for: encrypting the data packet to be encrypted received from the first slave data bi-directional interface of the encryption / decryption algorithm module according to the trusted processing information received from the second information interaction interface, and then forwarding it to the direct read / write controller module through the second master data bi-directional interface of the encryption / decryption algorithm module; directly passing the data packet that does not need to be encrypted and then forwarding it to the direct read / write controller module through the second master data bi-directional interface of the encryption / decryption algorithm module; decrypting the data packet to be decrypted received from the second master data bi-directional interface of the encryption / decryption algorithm module and then forwarding it to the direct read / write controller module through the first slave data bi-directional interface of the encryption / decryption algorithm module, and directly passing the data packet that does not need to be encrypted and then forwarding it to the direct read / write controller module through the first slave data bi-directional interface of the encryption / decryption algorithm module; The direct read / write controller module is used for: calculating the digest of the second data packet received from the second master data bi-directional interface of the encryption / decryption algorithm module, forming a third data packet by combining the calculated first digest information with the original second data packet, and then forwarding the third data packet to the first master data interface of the data read / write control module through the third master data bi-directional interface of the digest algorithm module; calculating the digest of the third data packet received from the third master data bi-directional interface of the digest algorithm module to obtain the second digest information, comparing whether the first digest information and the second digest information are consistent, if they are consistent, forwarding the third data packet without the second digest information to the encryption / decryption algorithm module through the second slave data bi-directional interface of the digest algorithm module, if they are not consistent, generating a verification error signal and forwarding it to the encryption / decryption algorithm module through the second slave data bi-directional interface of the digest algorithm module; directly forwarding the data packet that does not need to be encrypted received from the third master data bi-directional interface of the digest algorithm module to the encryption / decryption algorithm module through the second slave data bi-directional interface of the digest algorithm module.

9. A high-speed trusted data storage system according to claim 8, characterized in that, The data cache module includes a slave data bi-directional interface, a cache block control module, and a data cache block; the slave data bi-directional interface of the data cache module is communicatively connected to the second data bi-directional interface of the cache block control module; the third data bi-directional interface of the cache block control module is communicatively connected to the fourth data bi-directional interface of the data cache block of the data cache module; The data cache module is used for: completing the writing and reading of data according to the read / write commands and data sent by the data read / write control module; realizing the parsing and response of the commands sent by the data read / write control module through the cache block control module, and generating read / write operations on the data cache block of the data cache module to complete the reading or writing of data.

Images