A cryptographic service cluster classification scheduling method, device and system

Abstract

The present invention discloses a cryptographic service cluster classification scheduling method, device and system. When performing encryption request processing, the scheduling method includes: receiving an encryption request from a business application service of a sender; selecting a corresponding cryptographic service type according to the encryption request and the cryptographic system type of the receiver; selecting a cryptographic service instance with the smallest load according to load balancing based on the load conditions of all cryptographic service instances of the selected cryptographic service type; forwarding the encryption request to the selected cryptographic service instance; after the selected cryptographic service instance completes the encryption request processing, returning the encryption processing result for the sender to transmit the encryption processing result to the receiver according to business requirements; the encryption processing result includes a cryptographic system type identifier. In the method, the cryptographic service cluster can effectively allocate encryption requests, realize encryption intercommunication between cryptographic services of the same technical system, avoid overloading of certain cryptographic service instances, and improve the overall processing efficiency of the system.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and more specifically to a cryptographic service cluster classification scheduling method, device and system. Background Art

[0002] At present, with the rapid development of Internet technology and information construction, business applications have increasingly higher requirements for the security of data transmission, storage and processing. As the security and confidentiality support for data transmission, storage, processing and other functions in business application systems, cryptographic services have an important impact on the stability and security of the entire system due to their security and processing capabilities.

[0003] In actual applications, as the volume of business visits increases, the original cryptographic service processing capacity may not be able to meet the demand, becoming a performance bottleneck for the system. At the same time, with the development of technology and the upgrade of security systems, cryptographic services of different technical systems need to coexist for a long period of time, which brings challenges to the compatibility and scalability of the system. Summary of the invention

[0004] In view of this, in order to solve the problem of how to improve the processing capability of cryptographic services and support the coexistence of cryptographic services of different technical systems, the present invention proposes a cryptographic service cluster classification scheduling method, device and system, which improves the cryptographic service processing capability through cluster scheduling, realizes the coexistence of cryptographic services of different technical systems, and ensures the smooth transition of the cryptographic security system.

[0005] In order to achieve the above object, the present invention adopts the following technical solution:

[0006] In a first aspect, an embodiment of the present invention provides a cryptographic service cluster classification scheduling method. When performing encryption request processing, the scheduling method includes the following steps:

[0007] Receiving an encryption request from a sender business application service;

[0008] Select the corresponding cryptographic service type based on the encryption request and the recipient's cryptographic system type;

[0009] Based on the load conditions of all cryptographic service instances of the selected cryptographic service type, select the cryptographic service instance with the smallest current load according to load balancing; forward the encryption request to the selected cryptographic service instance;

[0010] After the selected cryptographic service instance completes the encryption request processing, the encryption processing result is returned to the sender's business application service, so that the sender can pass the encryption processing result to the receiver according to business requirements; the encryption processing result includes the cryptographic system type identifier.

[0011] Furthermore, the cryptographic service instance with the smallest current load is selected based on load balancing. The specific process includes the following:

[0012] When the cryptographic service cluster scheduling service is started, the health status of all cryptographic service instances in the current system is checked;

[0013] Monitor the health status of each cryptographic service instance in real time during operation, and update the cryptographic service status information in real time based on the monitoring results;

[0014] Before each encryption operation, the size of the encrypted data is collected and added to the traffic information of the corresponding cryptographic service instance. After the encryption is completed, the data size is subtracted from the traffic information.

[0015] When the sender's business application initiates a cryptographic service request and is dispatched to the corresponding type of cryptographic service cluster, the cryptographic service cluster scheduling service queries the health status and traffic information of each cryptographic service instance in the cryptographic service cluster, and selects the healthiest and least loaded cryptographic service instance for cryptographic service processing.

[0016] In a second aspect, an embodiment of the present invention further provides a cryptographic service cluster classification scheduling device for performing encryption request processing, the scheduling device comprising:

[0017] An encryption request receiving module is used to receive an encryption request from a sender's business application service;

[0018] A type selection module, used to select a corresponding cryptographic service type according to the encryption request and the cryptographic system type of the recipient;

[0019] A load balancing selection module, based on the load conditions of all cryptographic service instances of the cryptographic service type, selects the cryptographic service instance with the smallest current load according to load balancing; and forwards the encryption request to the selected cryptographic service instance;

[0020] The encryption result returning module is used to return the encryption processing result to the sender's business application service after the selected cryptographic service instance completes the encryption request processing, so that the sender can pass the encryption processing result to the receiver according to business requirements; the encryption processing result includes the cryptographic system type identifier.

[0021] In a third aspect, an embodiment of the present invention further provides a cryptographic service cluster classification scheduling method. When processing a decryption request, the scheduling method includes the following steps:

[0022] Receiving a decryption request from a recipient's business application service;

[0023] According to the decryption request, extract the cryptographic system type identifier from the message and select the corresponding cryptographic service type;

[0024] Based on the load conditions of all cryptographic service instances of the selected cryptographic service type, select the cryptographic service instance with the smallest current load according to load balancing; forward the decryption request to the selected cryptographic service instance;

[0025] After the selected cryptographic service instance completes the decryption request processing, it returns the decryption processing result to the recipient business application service.

[0026] Furthermore, the cryptographic service instance with the smallest current load is selected based on load balancing. The specific process includes the following:

[0027] When the cryptographic service cluster scheduling service is started, the health status of all cryptographic service instances in the current system is checked;

[0028] Monitor the health status of each cryptographic service instance in real time during operation, and update the cryptographic service status information in real time based on the monitoring results;

[0029] Before each decryption operation, the size of the decrypted data is collected and added to the traffic information of the corresponding cryptographic service instance. After the decryption is completed, the data size is subtracted from the traffic information;

[0030] When the receiving business application initiates a cryptographic service request and is dispatched to the corresponding type of cryptographic service cluster, the cryptographic service cluster scheduling service queries the health status and traffic information of each cryptographic service instance in the cryptographic service cluster, and selects the healthiest and least loaded cryptographic service instance for cryptographic service processing.

[0031] In a fourth aspect, an embodiment of the present invention further provides a cryptographic service cluster classification scheduling device for processing decryption requests, the scheduling device comprising:

[0032] A decryption request receiving module, used for receiving a decryption request from a receiving party's business application service;

[0033] An extraction and selection module, used to extract the cryptographic system type identifier from the message according to the decryption request and select the corresponding cryptographic service type;

[0034] A load balancing selection module selects a cryptographic service instance with the smallest current load based on the load conditions of all cryptographic service instances of the selected cryptographic service type according to load balancing; and forwards the decryption request to the selected cryptographic service instance;

[0035] The decryption result return module returns the decryption processing result to the recipient business application service after the selected cryptographic service instance completes the decryption request processing.

[0036] In a fifth aspect, an embodiment of the present invention further provides a cryptographic service cluster classification scheduling method, the scheduling method comprising the following steps:

[0037] Steps to process request classification:

[0038] Receive encryption or decryption requests from business application services;

[0039] Select the corresponding cryptographic service type according to the encryption request and the recipient's cryptographic system type, or according to the cryptographic system type identifier extracted from the decryption request message;

[0040] Load balancing selection steps:

[0041] Based on the load conditions of all cryptographic service instances of the selected cryptographic service type, select the cryptographic service instance with the smallest current load according to load balancing; forward the encryption or decryption request to the selected cryptographic service instance;

[0042] Request processing and result return steps:

[0043] The selected cryptographic service instance completes the encryption or decryption request processing; returns the processing result to the corresponding business application service; the encryption processing result includes the cryptographic system type identifier; the sender's business application service transmits the encryption processing result to the receiver online or offline according to business needs; the receiver checks the sender's business needs based on the returned decryption processing result.

[0044] Furthermore, the cryptographic service instance with the smallest current load is selected based on load balancing. The specific process includes the following:

[0045] When the cryptographic service cluster scheduling service is started, the health status of all cryptographic service instances in the current system is checked;

[0046] Monitor the health status of each cryptographic service instance in real time during operation, and update the cryptographic service status information in real time based on the monitoring results;

[0047] Before each encryption and decryption operation, the size of the encrypted and decrypted data is collected and added to the traffic information of the corresponding cryptographic service instance. When the expedited decryption is completed, the data size is subtracted from the traffic information;

[0048] When the corresponding business application initiates a cryptographic service request and is dispatched to the corresponding type of cryptographic service cluster, the cryptographic service cluster scheduling service queries the health status and traffic information of each cryptographic service instance in the cryptographic service cluster, and selects the healthiest and least loaded cryptographic service instance for cryptographic service processing.

[0049] In a sixth aspect, an embodiment of the present invention further provides a cryptographic service cluster classification scheduling system, the scheduling system comprising: a sender client, a cryptographic service cluster and a receiver client;

[0050] When the sending client and the receiving client exchange business data, the cryptographic services of the same technical system need to realize transmission encryption and decryption intercommunication, and the encryption and decryption process needs to be completed by the cryptographic service cluster;

[0051] Encryption and decryption request processing flow:

[0052] The cryptographic service cluster receives an encryption request from a sender client business application service; or receives a decryption request from a receiver client business application service;

[0053] Select the corresponding cryptographic service type according to the encryption request and the cryptographic system type of the receiving client, or according to the cryptographic system type identifier extracted from the decryption request message;

[0054] Load balancing selection process:

[0055] The cryptographic service cluster selects the cryptographic service instance with the smallest current load based on the load conditions of all cryptographic service instances of the selected cryptographic service type according to load balancing; forwards the encryption or decryption request to the selected cryptographic service instance;

[0056] Request processing and result return process:

[0057] The selected cryptographic service instance completes the encryption or decryption request processing; returns the processing result to the corresponding sender client or receiver client business application service; the encryption processing result includes the cryptographic system type identifier; the sender client business application service transmits the encryption processing result to the receiver client online or offline according to business needs; the receiver client checks the business needs of the sender client based on the returned decryption processing result.

[0058] The technical advantages of the first to sixth aspects mentioned above and the embodiments of each aspect can be referenced to each other.

[0059] It can be seen from the above technical solution that compared with the prior art:

[0060] The present invention discloses a classification scheduling method for a cryptographic service cluster. When processing encryption requests, the cryptographic service cluster can effectively allocate encryption requests, realize encryption transmission and intercommunication between cryptographic services of the same technical system, and avoid overloading of certain cryptographic service instances in the system, thereby improving the overall processing efficiency of the system and ensuring the security and stability of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0061] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0062] Figure 1 A schematic diagram of the cryptographic service cluster scheduling provided by the present invention.

[0063] Figure 2 A schematic diagram of the cryptographic service request load balancing provided by the present invention.

[0064] Figure 3 This is a flow chart of the encryption service cluster classification scheduling method provided by the present invention.

[0065] Figure 4 A block diagram of the encryption-time cryptographic service cluster classification scheduling device provided by the present invention.

[0066] Figure 5 This is a flow chart of the cryptographic service cluster classification scheduling method during decryption provided by the present invention.

[0067] Figure 6 A block diagram of the cryptographic service cluster classification scheduling device during decryption provided by the present invention. DETAILED DESCRIPTION

[0068] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0069] In order to improve the processing capacity of cryptographic services and support the coexistence of cryptographic services of different technical systems, the present invention proposes a cryptographic service cluster classification scheduling method, device and system, which improves the cryptographic service processing capacity through cluster scheduling, realizes the coexistence of cryptographic services of different technical systems, and ensures the smooth transition of the cryptographic security system. It involves the interaction between the sender, the cryptographic service cluster and the receiver. The cryptographic service cluster scheduling diagram is as follows: Figure 1 As shown in the figure; in the interaction process, encryption, decryption and load balancing are involved, and the principle of load balancing for cryptographic service requests is as follows Figure 2 As shown, in the figure, MM is the abbreviation of the password.

[0070] A comprehensive description is given below based on 6 different embodiments.

[0071] Embodiment 1:

[0072] This embodiment involves the interaction between a sender and a cryptographic service cluster, the processing of encryption requests and load balancing during the interaction, and provides a cryptographic service cluster classification scheduling method.

[0073] When the sender's business application needs to send business data to the receiver's business application, in order to ensure the confidentiality of the business data during transmission, the business data to be sent needs to be encrypted. Only cryptographic services with the same technical system can achieve transmission encryption and decryption interoperability. Therefore, the sender must choose to call the corresponding type of cryptographic service based on the receiver's cryptographic system type.

[0074] When processing encryption requests, the cryptographic service cluster classification scheduling method refers to Figure 3 As shown, the following steps are included:

[0075] S1. Receive an encryption request from a sender's business application service;

[0076] S2. Select the corresponding cryptographic service type according to the encryption request and the cryptographic system type of the recipient;

[0077] S3. Based on the load conditions of all cryptographic service instances of the selected cryptographic service type, select the cryptographic service instance with the smallest current load according to load balancing; forward the encryption request to the selected cryptographic service instance;

[0078] S4. After the selected cryptographic service instance completes the encryption request processing, the encryption processing result is returned to the sender's business application service, so that the sender can pass the encryption processing result to the receiver according to business requirements; the encryption processing result includes a cryptographic system type identifier.

[0079] In the above step S3, the cryptographic service request load balancing process is as follows: Figure 2 When the cryptographic service cluster scheduling service is initially started, the health status of all cryptographic service instances in the current system must be detected, and the health status of each cryptographic service instance must be monitored in real time during operation, and the cryptographic service status information must be updated in real time based on the monitoring results.

[0080] Before a cryptographic instance performs a data encryption operation, the cryptographic service cluster scheduling service will collect the size of the encrypted data and add it to the traffic information of the cryptographic service instance. When the data encryption is completed, the data size will be subtracted from the traffic information.

[0081] When a cryptographic service request initiated by a business application is scheduled to a certain type of cryptographic service cluster, the cryptographic service cluster scheduling service will query the health status and traffic information of each cryptographic instance in the cryptographic cluster, and then select a healthy and least loaded cryptographic service instance for cryptographic service processing.

[0082] In this embodiment, through this method, the cryptographic service cluster can effectively allocate encryption requests, realize encrypted transmission and intercommunication between cryptographic services of the same technical system, and at the same time avoid overloading of certain cryptographic service instances in the system, thereby improving the overall processing efficiency of the system and ensuring the security and stability of data transmission.

[0083] Embodiment 2:

[0084] Based on the same inventive concept, the present invention also provides a cryptographic service cluster classification scheduling device, whose scheduling principle is the same as that of Example 1, and the technical effect is also the same. For matters not covered in the description, please refer to the description of Example 1.

[0085] Reference Figure 4 As shown, the scheduling device includes:

[0086] An encryption request receiving module is used to receive an encryption request from a sender's business application service;

[0087] A type selection module, used to select a corresponding cryptographic service type according to the encryption request and the cryptographic system type of the recipient;

[0088] A load balancing selection module, based on the load conditions of all cryptographic service instances of the cryptographic service type, selects the cryptographic service instance with the smallest current load according to load balancing; and forwards the encryption request to the selected cryptographic service instance;

[0089] The encryption result returning module is used to return the encryption processing result to the sender's business application service after the selected cryptographic service instance completes the encryption request processing, so that the sender can pass the encryption processing result to the receiver according to business requirements; the encryption processing result includes the cryptographic system type identifier.

[0090] The device can automatically select the appropriate cryptographic service instance to process encryption requests, ensuring the efficiency and balance of request processing and improving the overall performance and security of the system.

[0091] Embodiment 3:

[0092] This embodiment involves the interaction between a receiver and a cryptographic service cluster, the processing of decryption requests and load balancing during the interaction, and provides a cryptographic service cluster classification scheduling method.

[0093] After receiving the remote encrypted business data, the receiver sends a decryption request to the cryptographic service cluster. Figure 5 As shown, the classification scheduling process of the cryptographic service cluster is as follows:

[0094] S10, receiving a decryption request from a receiving party's business application service;

[0095] S20, extracting the cryptographic system type identifier from the message according to the decryption request, and selecting the corresponding cryptographic service type;

[0096] S30, based on the load conditions of all cryptographic service instances of the selected cryptographic service type, selecting the cryptographic service instance with the smallest current load according to load balancing; forwarding the decryption request to the selected cryptographic service instance;

[0097] S40: After the selected cryptographic service instance completes the decryption request processing, the decryption processing result is returned to the recipient business application service.

[0098] In the above step S30, the cryptographic service request load balancing process is as follows: Figure 2 When the cryptographic service cluster scheduling service is initially started, the health status of all cryptographic service instances in the current system must be detected, and the health status of each cryptographic service instance must be monitored in real time during operation, and the cryptographic service status information must be updated in real time based on the monitoring results.

[0099] Before a cryptographic instance performs a data decryption operation, the cryptographic service cluster scheduling service will collect the size of the decrypted data and add it to the traffic information of the cryptographic service instance. When the data decryption is completed, the data size will be subtracted from the traffic information.

[0100] When a cryptographic service request initiated by a business application is scheduled to a certain type of cryptographic service cluster, the cryptographic service cluster scheduling service will query the health status and traffic information of each cryptographic instance in the cryptographic cluster, and then select a healthy and least loaded cryptographic service instance for cryptographic service processing.

[0101] In this embodiment, through this method, decryption requests can be efficiently processed, load balancing and security of decryption processing can be ensured, and the efficiency and reliability of decryption operations can be improved.

[0102] Embodiment 4:

[0103] Based on the same inventive concept, the present invention further provides a cryptographic service cluster classification scheduling device, whose scheduling principle is the same as that of Example 3, and the technical effect is also the same. For matters not covered in the description, please refer to the description of Example 3.

[0104] Reference Figure 6 As shown, the scheduling device includes:

[0105] A decryption request receiving module, used for receiving a decryption request from a receiving party's business application service;

[0106] An extraction and selection module, used to extract the cryptographic system type identifier from the message according to the decryption request and select the corresponding cryptographic service type;

[0107] A load balancing selection module selects a cryptographic service instance with the smallest current load based on the load conditions of all cryptographic service instances of the selected cryptographic service type according to load balancing; and forwards the decryption request to the selected cryptographic service instance;

[0108] The decryption result return module returns the decryption processing result to the recipient business application service after the selected cryptographic service instance completes the decryption request processing.

[0109] Through this device, automatic decryption request processing can be achieved, ensuring the efficiency and balance of the system when processing decryption requests, and improving the overall stability and security of the system.

[0110] Embodiment 5:

[0111] In this embodiment, refer to Figure 1 As shown, it involves the interaction between the sender, the receiver and the cryptographic service cluster. During the interaction, encryption, decryption and load balancing are involved (refer to Figure 2 as shown).

[0112] The provided cryptographic service cluster classification scheduling method comprises the following steps:

[0113] 1. Steps for processing request classification:

[0114] Receive encryption or decryption requests from business application services;

[0115] Select the corresponding cryptographic service type according to the encryption request and the recipient's cryptographic system type, or according to the cryptographic system type identifier extracted from the decryption request message;

[0116] 2. Load balancing selection steps:

[0117] Based on the load conditions of all cryptographic service instances of the selected cryptographic service type, select the cryptographic service instance with the smallest current load according to load balancing; forward the encryption or decryption request to the selected cryptographic service instance;

[0118] 3. Request processing and result return steps:

[0119] The selected cryptographic service instance completes the encryption or decryption request processing; returns the processing result to the corresponding business application service; the encryption processing result includes the cryptographic system type identifier; the sender's business application service transmits the encryption processing result to the receiver online or offline according to business needs; the receiver checks the sender's business needs based on the returned decryption processing result.

[0120] The following is an explanation from three aspects: encryption, decryption, and load balancing:

[0121] 1.1. Encryption request processing flow

[0122] Reference Figure 1 As shown in the figure, when the sender's business application needs to send business data to the receiver's business application, in order to ensure the confidentiality of the business data during transmission, the business data to be sent needs to be encrypted. Only cryptographic services with the same technical system can achieve transmission encryption and decryption interoperability. Therefore, the sender must choose to call the corresponding type of cryptographic service according to the receiver's cryptographic system type. The encryption process is described as follows:

[0123] (1) The business application service initiates an encryption request to the cryptographic service cluster scheduling service;

[0124] (2) After receiving the encryption request, the cryptographic service cluster scheduling service selects the type of cryptographic service to be called according to the cryptographic system type of the recipient;

[0125] (3) After completing the selection of the cryptographic service type call, select the cryptographic service instance with the smallest current load based on the load of all cryptographic service instances of that type, and forward the encryption request to the selected cryptographic service instance;

[0126] (4) After the cryptographic service instance completes the encryption request processing, it returns the encryption processing result to the business application service. The encryption processing result must include the cryptographic system type identifier;

[0127] (5) After receiving the encryption processing results, the business application service transmits the encrypted business data to the recipient online or offline according to business requirements.

[0128] 1.2. Decryption request processing flow

[0129] Reference Figure 1 As shown, the decryption request processing flow after the receiver receives the remote encrypted business data is as follows:

[0130] (1) The business application service initiates a decryption request to the cryptographic service cluster scheduling service;

[0131] (2) After receiving the decryption request, the cryptographic service cluster scheduling service extracts the cryptographic system type identifier from the message and selects the corresponding cryptographic service type;

[0132] (3) After completing the selection of the cryptographic service type call, select the cryptographic service instance with the smallest current load based on the load of all cryptographic service instances of that type, and forward the decryption request to the selected cryptographic service instance;

[0133] (4) After the cryptographic service instance completes the decryption request processing, it returns the decryption processing result to the business application service.

[0134] 1.3. Load balancing of cryptographic service requests

[0135] The load balancing process for password service requests is as follows: Figure 2 When the cryptographic service cluster scheduling service is initially started, the health status of all cryptographic service instances in the current system must be detected, and the health status of each cryptographic service instance must be monitored in real time during operation, and the cryptographic service status information must be updated in real time based on the monitoring results.

[0136] Before a cryptographic instance performs data encryption and decryption operations, the cryptographic service cluster scheduling service will collect the size of the encrypted and decrypted data and add it to the traffic information of the cryptographic service instance. When the data encryption and decryption is completed, the data size will be subtracted from the traffic information.

[0137] When a cryptographic service request initiated by a business application is scheduled to a certain type of cryptographic service cluster, the cryptographic service cluster scheduling service will query the health status and traffic information of each cryptographic instance in the cryptographic cluster, and then select a healthy and least loaded cryptographic service instance for cryptographic service processing.

[0138] This scheduling method can handle encryption and decryption requests; it can also process them simultaneously; this method can ensure the balance and efficiency of request processing, improve the cryptographic service processing capabilities through cluster scheduling, realize the coexistence of cryptographic services of different technical systems, and ensure the smooth transition of the cryptographic security system; improve the overall performance of the system and data security.

[0139] Embodiment 6:

[0140] Based on the same inventive concept, the present invention further provides a cryptographic service cluster classification scheduling system, including: a sender client, a cryptographic service cluster and a receiver client; the interaction between these three parties is described in detail in detail in FIG. Figure 1 As shown, in the interaction process, encryption, decryption and load balancing are involved (refer to Figure 2 The scheduling principle is the same as that of Example 5, and the technical effect is also the same. For matters not covered in the description, please refer to the description of Example 5.

[0141] When the sending client and the receiving client exchange business data, the cryptographic services of the same technical system need to realize transmission encryption and decryption intercommunication, and the encryption and decryption process needs to be completed by the cryptographic service cluster;

[0142] 1) Encryption and decryption request processing flow:

[0143] The cryptographic service cluster receives an encryption request from a sender client business application service; or receives a decryption request from a receiver client business application service;

[0144] Select the corresponding cryptographic service type according to the encryption request and the cryptographic system type of the receiving client, or according to the cryptographic system type identifier extracted from the decryption request message;

[0145] 2) Load balancing selection process:

[0146] The cryptographic service cluster selects the cryptographic service instance with the smallest current load based on the load conditions of all cryptographic service instances of the selected cryptographic service type according to load balancing; forwards the encryption or decryption request to the selected cryptographic service instance;

[0147] 3) Request processing and result return process:

[0148] The selected cryptographic service instance completes the encryption or decryption request processing; returns the processing result to the corresponding sender client or receiver client business application service; the encryption processing result includes the cryptographic system type identifier; the sender client business application service transmits the encryption processing result to the receiver client online or offline according to business needs; the receiver client checks the business needs of the sender client based on the returned decryption processing result.

[0149] The cryptographic service cluster classification scheduling system provided in this embodiment includes: a sender client, a cryptographic service cluster and a receiver client; the cryptographic service cluster can efficiently process encryption and decryption requests between the sender and the receiver, ensure the security and stability of data transmission, and improve the overall processing capacity and reliability of the system. In addition, the cryptographic service processing capacity is improved through cluster scheduling, and the coexistence of cryptographic services of different technical systems is achieved, ensuring the smooth transition of the cryptographic security system; improving the overall performance and data security of the system.

[0150] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.

[0151] The above description of the disclosed embodiments enables one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A cryptographic service cluster classification scheduling method, characterized in that: When performing encryption request processing, the scheduling method includes the following steps: Receiving an encryption request from a sender business application service; Select the corresponding cryptographic service type based on the encryption request and the recipient's cryptographic system type; Based on the load conditions of all cryptographic service instances of the selected cryptographic service type, select the cryptographic service instance with the smallest current load according to load balancing; forward the encryption request to the selected cryptographic service instance; After the selected cryptographic service instance completes the encryption request processing, the encryption processing result is returned to the sender business application service, so that the sender can pass the encryption processing result to the receiver according to the business requirements; the encryption processing result includes the cryptographic system type identifier; The cryptographic service instance with the smallest current load is selected based on load balancing. The specific process includes the following: When the cryptographic service cluster scheduling service is started, the health status of all cryptographic service instances in the current system is checked; Monitor the health status of each cryptographic service instance in real time during operation, and update the cryptographic service status information in real time based on the monitoring results; Before each encryption operation, the size of the encrypted data is collected and added to the traffic information of the corresponding cryptographic service instance. After the encryption is completed, the data size is subtracted from the traffic information. When the sender's business application initiates a cryptographic service request and is dispatched to the corresponding type of cryptographic service cluster, the cryptographic service cluster scheduling service queries the health status and traffic information of each cryptographic service instance in the cryptographic service cluster, and selects the healthiest and least loaded cryptographic service instance for cryptographic service processing.

2. A cryptographic service cluster classification scheduling device, characterized in that: For performing encryption request processing, the scheduling device includes: An encryption request receiving module is used to receive an encryption request from a sender's business application service; A type selection module, used to select a corresponding cryptographic service type according to the encryption request and the cryptographic system type of the recipient; A load balancing selection module, based on the load conditions of all cryptographic service instances of the cryptographic service type, selects the cryptographic service instance with the smallest current load according to load balancing; and forwards the encryption request to the selected cryptographic service instance; The encryption result returning module is used to return the encryption processing result to the sender business application service after the selected cryptographic service instance completes the encryption request processing, so that the sender can pass the encryption processing result to the receiver according to the business requirements; the encryption processing result includes the cryptographic system type identifier; Among them, in the load balancing selection module, the cryptographic service instance with the smallest current load is selected according to the load balancing. The specific process includes the following: When the cryptographic service cluster scheduling service is started, the health status of all cryptographic service instances in the current system is checked; Monitor the health status of each cryptographic service instance in real time during operation, and update the cryptographic service status information in real time based on the monitoring results; Before each encryption operation, the size of the encrypted data is collected and added to the traffic information of the corresponding cryptographic service instance. After the encryption is completed, the data size is subtracted from the traffic information. When the sender's business application initiates a cryptographic service request and is dispatched to the corresponding type of cryptographic service cluster, the cryptographic service cluster scheduling service queries the health status and traffic information of each cryptographic service instance in the cryptographic service cluster, and selects the healthiest and least loaded cryptographic service instance for cryptographic service processing.

3. A cryptographic service cluster classification scheduling method, characterized in that: When processing a decryption request, the scheduling method includes the following steps: Receiving a decryption request from a recipient's business application service; According to the decryption request, extract the cryptographic system type identifier from the message and select the corresponding cryptographic service type; Based on the load conditions of all cryptographic service instances of the selected cryptographic service type, select the cryptographic service instance with the smallest current load according to load balancing; forward the decryption request to the selected cryptographic service instance; After the selected cryptographic service instance completes the decryption request processing, it returns the decryption processing result to the recipient business application service; The cryptographic service instance with the smallest current load is selected based on load balancing. The specific process includes the following: When the cryptographic service cluster scheduling service is started, the health status of all cryptographic service instances in the current system is checked; Monitor the health status of each cryptographic service instance in real time during operation, and update the cryptographic service status information in real time based on the monitoring results; Before each decryption operation, the size of the decrypted data is collected and added to the traffic information of the corresponding cryptographic service instance. After the decryption is completed, the data size is subtracted from the traffic information; When the receiving business application initiates a cryptographic service request and is dispatched to the corresponding type of cryptographic service cluster, the cryptographic service cluster scheduling service queries the health status and traffic information of each cryptographic service instance in the cryptographic service cluster, and selects the healthiest and least loaded cryptographic service instance for cryptographic service processing.

4. A cryptographic service cluster classification scheduling device, characterized in that: For processing a decryption request, the scheduling device comprises: A decryption request receiving module, used for receiving a decryption request from a receiving party's business application service; An extraction and selection module, used to extract the cryptographic system type identifier from the message according to the decryption request and select the corresponding cryptographic service type; A load balancing selection module selects a cryptographic service instance with the smallest current load based on the load conditions of all cryptographic service instances of the selected cryptographic service type according to load balancing; and forwards the decryption request to the selected cryptographic service instance; The decryption result return module returns the decryption processing result to the receiving business application service after the selected cryptographic service instance completes the decryption request processing; Among them, in the load balancing selection module, the cryptographic service instance with the smallest current load is selected according to the load balancing. The specific process includes the following: When the cryptographic service cluster scheduling service is started, the health status of all cryptographic service instances in the current system is checked; Monitor the health status of each cryptographic service instance in real time during operation, and update the cryptographic service status information in real time based on the monitoring results; Before each decryption operation, the size of the decrypted data is collected and added to the traffic information of the corresponding cryptographic service instance. After the decryption is completed, the data size is subtracted from the traffic information; When the receiving business application initiates a cryptographic service request and is dispatched to the corresponding type of cryptographic service cluster, the cryptographic service cluster scheduling service queries the health status and traffic information of each cryptographic service instance in the cryptographic service cluster, and selects the healthiest and least loaded cryptographic service instance for cryptographic service processing.

5. A cryptographic service cluster classification scheduling method, characterized in that: The scheduling method includes the following steps: Steps to process request classification: Receive encryption or decryption requests from business application services; Select the corresponding cryptographic service type according to the encryption request and the recipient's cryptographic system type, or according to the cryptographic system type identifier extracted from the decryption request message; Load balancing selection steps: Based on the load conditions of all cryptographic service instances of the selected cryptographic service type, select the cryptographic service instance with the smallest current load according to load balancing; forward the encryption or decryption request to the selected cryptographic service instance; Request processing and result return steps: The selected cryptographic service instance completes the encryption or decryption request processing; returns the processing result to the corresponding business application service; the encryption processing result includes the cryptographic system type identifier; the sender's business application service transmits the encryption processing result to the receiver in an online or offline manner according to business requirements; the receiver checks the sender's business requirements based on the returned decryption processing result; Among them, in the load balancing selection step, the cryptographic service instance with the smallest current load is selected according to the load balancing, and the specific process includes the following: When the cryptographic service cluster scheduling service is started, the health status of all cryptographic service instances in the current system is checked; Monitor the health status of each cryptographic service instance in real time during operation, and update the cryptographic service status information in real time based on the monitoring results; Before each encryption and decryption operation, the size of the encrypted and decrypted data is collected and added to the traffic information of the corresponding cryptographic service instance. When the expedited decryption is completed, the data size is subtracted from the traffic information; When the corresponding business application initiates a cryptographic service request and is dispatched to the corresponding type of cryptographic service cluster, the cryptographic service cluster scheduling service queries the health status and traffic information of each cryptographic service instance in the cryptographic service cluster, and selects the healthiest and least loaded cryptographic service instance for cryptographic service processing.

6. A cryptographic service cluster classification scheduling system, characterized in that: The scheduling system includes: a sender client, a cryptographic service cluster and a receiver client; When the sending client and the receiving client exchange business data, the cryptographic services of the same technical system need to realize transmission encryption and decryption intercommunication, and the encryption and decryption process needs to be completed by the cryptographic service cluster; Encryption and decryption request processing flow: The cryptographic service cluster receives an encryption request from a sender client business application service; or receives a decryption request from a receiver client business application service; Select the corresponding cryptographic service type according to the encryption request and the cryptographic system type of the receiving client, or according to the cryptographic system type identifier extracted from the decryption request message; Load balancing selection process: The cryptographic service cluster selects the cryptographic service instance with the smallest current load based on the load conditions of all cryptographic service instances of the selected cryptographic service type according to load balancing; forwards the encryption or decryption request to the selected cryptographic service instance; Request processing and result return process: The selected cryptographic service instance completes the encryption or decryption request processing; returns the processing result to the corresponding sender client or receiver client business application service; the encryption processing result includes the cryptographic system type identifier; the sender client business application service transmits the encryption processing result to the receiver client in an online or offline manner according to the business requirements; the receiver client checks the business requirements of the sender client based on the returned decryption processing result; In the load balancing selection process, the cryptographic service instance with the smallest current load is selected according to the load balancing. The specific process includes the following: When the cryptographic service cluster scheduling service is started, the health status of all cryptographic service instances in the current system is checked; Monitor the health status of each cryptographic service instance in real time during operation, and update the cryptographic service status information in real time based on the monitoring results; Before each encryption and decryption operation, the size of the encrypted and decrypted data is collected and added to the traffic information of the corresponding cryptographic service instance. When the expedited decryption is completed, the data size is subtracted from the traffic information; When the corresponding business application initiates a cryptographic service request and is dispatched to the corresponding type of cryptographic service cluster, the cryptographic service cluster scheduling service queries the health status and traffic information of each cryptographic service instance in the cryptographic service cluster, and selects the healthiest and least loaded cryptographic service instance for cryptographic service processing.

Images