A method and device for supporting overall drift of cloud cryptographic machine cluster

Abstract

The present invention discloses a method and device for supporting the overall drift of a cloud cryptographic machine cluster, which relates to the field of information security technology. The steps include: a cloud cryptographic machine management platform collects cluster status information and cluster snapshot information of a cluster on an original cloud cryptographic machine host, and constructs a cluster snapshot file; determines whether to perform cluster drift according to the cluster status information and a set fault threshold; if cluster drift is performed, the cloud cryptographic machine management platform queries the idle standby cloud cryptographic machine host and the latest cluster snapshot file, notifies the idle standby cloud cryptographic machine host to restore a new cluster according to the latest cluster snapshot file, notifies the original cloud cryptographic machine host to perform network isolation on the cluster according to the cluster status information, and deletes the cluster on the original cloud cryptographic machine host and releases resources if the drift is successful, otherwise waits for manual processing; otherwise, cluster drift is not performed and returns to the aforementioned collection process. The present invention can shorten the cloud cryptographic machine cluster fault repair time and ensure the stability and reliability of the cluster.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and more specifically to a method and device for supporting overall drift of a cloud cryptographic machine cluster. Background Art

[0002] Cloud cryptographic machine clusters virtualize the functions of physical cryptographic machines through virtualization technology and provide services in a cloud environment. It supports full life cycle management such as key generation, storage, distribution and destruction in a multi-tenant environment, while ensuring the security and compliance of keys. However, cloud cryptographic machine clusters also face technical challenges such as performance, high availability, and fault recovery. When a cloud cryptographic machine cluster fails, current technology uses manual or semi-automatic methods for recovery, and the granularity of recovery is a single node in the cluster. When the cluster is large and the business is complex, the single node recovery method is inefficient and time-consuming. In addition, when the causes of node failures are different, they need to be checked one by one, making recovery difficult.

[0003] Therefore, how to improve the stability and reliability of cloud cryptographic machine clusters is an urgent problem that technical personnel in this field need to solve. Summary of the invention

[0004] In view of this, the present invention provides a method and device for supporting the overall drift of a cloud cryptographic machine cluster. Through the overall migration of the cloud cryptographic machine cluster, the fault repair time of the cloud cryptographic machine cluster is shortened, and the stability and reliability of the cloud cryptographic machine cluster are guaranteed.

[0005] In order to achieve the above object, the present invention adopts the following technical solution:

[0006] A method for supporting overall drift of a cloud cryptographic machine cluster includes the following steps:

[0007] Step 1: The cloud cryptographic machine management platform collects the cluster status information and cluster snapshot information of the cluster on the original cloud cryptographic machine host, and builds a cluster snapshot file based on the cluster snapshot information;

[0008] Step 2: Determine whether to perform cluster drift according to the cluster status information and the set fault threshold. If cluster drift is performed, go to step 3; otherwise, return to step 1.

[0009] Step 3: The cloud cryptographic machine management platform queries the idle standby cloud cryptographic machine host and queries the latest cluster snapshot file;

[0010] Step 4: The cloud cryptographic machine management platform notifies the idle standby cloud cryptographic machine host to restore the new cluster based on the latest cluster snapshot file;

[0011] Step 5: The cloud cryptography machine management platform notifies the original cloud cryptography machine host to perform network isolation on the cluster based on the cluster status information; if all virtual machines in the new cluster operate normally, the migration is successful, the cluster on the original cloud cryptography machine host is deleted, and resources are released; otherwise, an alarm message is generated and waits for manual processing.

[0012] The technical effect of the above technical solution is to create a new cluster through the cluster snapshot file, thereby realizing the rapid drift and recovery of the cluster; the business calls on the original cloud cryptographic machine host are automatically switched to the new cluster through network isolation. Network isolation can be achieved by DOWNing the virtual network port of the virtual machine or deleting the virtual network card of the virtual machine.

[0013] Preferably, the cluster snapshot file includes basic information of the cluster snapshot file, cluster topology information, a virtual machine name and IP comparison table, and a cluster node snapshot; the basic information of the cluster snapshot file includes snapshot generation time, snapshot file size, snapshot file verification code and snapshot file signature value; the cluster topology information adopts a directed graph set; the virtual machine name and IP comparison table records the comparison relationship between the virtual machine name and IP; the cluster node snapshot is a snapshot of all virtual machines in the cluster, including all data of the restored virtual machine.

[0014] Preferably, the cloud cryptographic machine management platform encrypts the cluster snapshot file using the device key of the cloud cryptographic machine host and transmits it to the file server. The file server defines the cluster snapshot file name based on the corresponding cluster name combined with the timestamp, and sorts all cluster snapshot files by time.

[0015] Preferably, the cluster status information includes cluster node key update, cluster node configuration update, cluster node addition and cluster node reduction.

[0016] Preferably, the process of calculating the snapshot file signature value includes:

[0017] Step 11: Calculate the summary value of cluster topology information, virtual machine name and IP comparison table, and cluster node snapshot as the snapshot file verification code, and set the snapshot file verification code attribute value;

[0018] Step 12: Use the cloud cryptographic machine device key to sign the snapshot file verification code, use the signature result as the snapshot file signature value, and set the snapshot file signature attribute value.

[0019] Preferably, the cloud cryptographic machine management platform collects cluster status information regularly and counts the number of faulty nodes in the cluster. If the number of faulty nodes is greater than or equal to the fault threshold, cluster drift is performed; the cloud cryptographic machine management platform queries all cluster snapshot files of the cluster according to the cluster name, selects the most recent cluster snapshot file name, and the cloud cryptographic machine management platform notifies the idle standby cloud cryptographic machine host to use the latest cluster snapshot file name to perform cluster drift. The cluster drift process includes:

[0020] Step 41: the idle standby cloud cryptographic machine host downloads the corresponding cluster snapshot file from the file server according to the cluster snapshot file name of the latest cluster snapshot, and decrypts it using the device key of the idle standby cloud cryptographic machine host;

[0021] Step 42: The idle standby cloud cryptographic machine host verifies the snapshot file signature value and snapshot file verification code in the downloaded decrypted cluster snapshot file; specifically includes:

[0022] Calculate the summary of cluster topology information, virtual machine name and IP comparison table, and cluster node snapshot in the cluster snapshot file to obtain the summary value;

[0023] The digest value and the snapshot file verification signature value are used as parameters, and the device key of the idle standby cloud cryptographic machine host is used to verify the signature. If the verification is successful, step 43 is entered, otherwise an alarm message is generated and manual processing is required. The device key is preset at the factory, and all cloud cryptographic machine hosts are preset to be the same, which reduces the complexity of device key management and use;

[0024] Step 43: The idle standby cloud cryptographic machine host uses the cluster topology information, the virtual machine name and IP comparison table, and the cluster node snapshot to restore a new cloud cryptographic machine cluster to obtain a new cluster; specifically:

[0025] Use the cluster node snapshot to create a new virtual machine; restore the cluster topology structure of the newly created virtual machine according to the cluster topology information and the virtual machine name IP comparison table to obtain a new cluster.

[0026] A device supporting overall drift of a cloud cryptographic machine cluster, comprising an original cloud cryptographic machine host, a plurality of backup cloud cryptographic machine hosts, a cloud cryptographic machine management platform and a file server;

[0027] The cloud cryptography machine management platform monitors the cluster of the original cloud cryptography machine host, obtains cluster status information and cluster snapshot information, builds cluster snapshot files and transmits them to the file server, and determines whether to perform cluster drift; when performing cluster drift, the cloud cryptography machine management platform queries the idle standby cloud cryptography machine hosts from all standby cloud cryptography machine hosts, and queries the latest cluster snapshot files at the same time;

[0028] The idle standby cloud cryptography machine host downloads the latest cluster snapshot file from the file server, restores the new cluster according to the latest cluster snapshot file, and notifies the cloud cryptography machine management platform to control the original cloud cryptography machine host to isolate the cluster from the network;

[0029] When the original cloud cryptographic machine host creates a new cluster, it deletes its own cluster and releases resources.

[0030] Through the above technical solutions, it can be known that compared with the prior art, the present invention discloses a method and device that supports the overall drift of a cloud cryptographic machine cluster. By constructing a cluster snapshot file of a cloud cryptographic machine host, the export and storage of cluster snapshot files are supported, thereby improving the disaster recovery capability of cloud cryptographic machine data; by setting the content range of the cluster snapshot file, the differences and complexity of cloud cryptographic machine project construction are reduced, and the unified design of the cloud cryptographic machine host manufacturer can be independent; cluster snapshot files are used to achieve cluster replication and recovery on different cloud cryptographic machine hosts, and the overall migration of cloud cryptographic machine clusters is achieved, thereby shortening the cloud cryptographic machine cluster fault repair time and improving the efficiency of use and maintenance. The present invention can be applied to relevant cryptographic equipment in the field of information security technology, including but not limited to cryptographic machines, encryption machines, SSL VPN gateways, IPSecVPN gateways, signature verification servers, financial data cryptographic machines, etc. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0032] Figure 1 A flow chart of a method for supporting overall drift of a cloud cryptographic machine cluster provided by the present invention;

[0033] Figure 2 A schematic diagram of the composition of a cluster snapshot file provided by the present invention;

[0034] Figure 3 A schematic diagram of the overall drift of the cloud cryptographic machine cluster provided by the present invention. DETAILED DESCRIPTION

[0035] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0036] The embodiment of the present invention discloses a method for supporting the overall drift of a cloud cryptographic machine cluster, which mainly relies on cluster snapshot files to store the data of the entire cluster. When the cluster drifts, these data can be used to completely restore a new cluster, and the new cluster data is consistent with the original cluster, thereby realizing the overall drift of the cloud cryptographic machine cluster. The cluster snapshot file is exported when the cluster status is normal, and the export is prohibited when the cluster status is abnormal, so as to ensure the correctness of the cluster snapshot file. The specific process is as follows Figure 1 As shown:

[0037] S1: The cloud cryptographic machine management platform collects the cluster status information and cluster snapshot information of the cluster on the original cloud cryptographic machine host, and builds a cluster snapshot file based on the cluster snapshot information;

[0038] S2: Determine whether to execute cluster drift according to the cluster status information and the set fault threshold. If cluster drift is executed, enter S3; otherwise, return to S1;

[0039] S3: The cloud cryptographic machine management platform queries the idle standby cloud cryptographic machine host and queries the latest cluster snapshot file;

[0040] S4: The cloud cryptographic machine management platform notifies the idle standby cloud cryptographic machine host to restore the new cluster according to the latest cluster snapshot file;

[0041] S5: The cloud cryptography machine management platform notifies the original cloud cryptography machine host to perform network isolation on the cluster based on the cluster status information; if all virtual machines in the new cluster operate normally, the migration is successful, the cluster on the original cloud cryptography machine host is deleted, and resources are released; otherwise, an alarm message is generated and waits for manual processing.

[0042] Furthermore, the cluster snapshot file structure of the original cloud cryptographic machine host is as follows: Figure 2 As shown in the figure, the cluster snapshot file consists of four parts: basic information of the cluster snapshot file, cluster topology information, virtual machine name and IP comparison table, and cluster node snapshot; the basic information of the cluster snapshot file includes: snapshot generation time, snapshot file size, snapshot file verification code, and snapshot file signature value. The snapshot file verification code and snapshot file signature value are designed to prevent tampering and ensure the integrity of the cloud cryptographic machine cluster snapshot file; the cluster topology information is represented by a directed graph set: , V is the set of cluster nodes, such as Figure 2 Shown , E is the cluster master-slave relationship set, such as Figure 2 Shown , Indicates that B is a slave node of A; the virtual machine name and IP comparison table records the correspondence between the virtual machine name and the IP. Cluster nodes communicate based on IP addresses, so the correspondence needs to be recorded; the cluster node snapshot is a snapshot of the virtual machine in the cluster. The snapshot contains all the data required to restore a new virtual machine, and the restored virtual machine is the same as the original virtual machine. All nodes in the cluster are restored through the snapshot, thereby realizing the overall drift of the cluster. When exporting, the virtual machine snapshot cloud cryptography machine uses the device key to encrypt and upload it to the file server. When the overall cluster drift uses the snapshot to restore the virtual machine, it is first decrypted with the device key of the cloud cryptography machine and then restored, thereby ensuring the confidentiality of the virtual machine snapshot.

[0043] Furthermore, the overall drift process of the cloud cryptographic machine cluster is as follows: Figure 3 As shown, the cloud cryptography machine management platform manages and detects cloud cryptography machine hosts and regularly monitors the cluster status. If the cluster status is normal but the cluster has changed, the cloud cryptography machine management platform summarizes the cluster information, exports snapshots of all nodes in the cluster, generates cluster snapshot files according to the cluster snapshot file structure, and uploads the generated cluster snapshot files to the file server. The file name of the cluster snapshot file is named in the format of cluster name plus timestamp to facilitate retrieval and sorting by time. When the cluster status in the main cloud cryptography machine host is abnormal, the cloud cryptography machine management platform searches and starts the backup cloud cryptography machine host to perform an overall drift of the cloud cryptography machine cluster in the main cloud cryptography machine host. The backup cloud cryptography machine host searches and downloads the latest cluster snapshot from the file server and replies with a new cluster.

[0044] Furthermore, when the cloud cryptographic machine management platform monitors the cluster status and finds that the number of faulty nodes in the cluster exceeds a threshold, the cloud cryptographic machine management platform executes a cluster drift processing process; specifically, it includes:

[0045] S3: The cloud cryptographic machine management platform queries the idle standby cloud cryptographic machine hosts and the name of the latest cluster snapshot file;

[0046] S4: The cloud cryptography machine management platform notifies the idle standby cloud cryptography machine host to download the corresponding cluster snapshot file with the latest cluster snapshot file name to restore a new cluster;

[0047] S5: The cloud cryptography machine management platform notifies the original cloud cryptography machine host to perform network isolation on the faulty cloud cryptography machine cluster, so that business calls are automatically switched to the new cluster; if the cloud cryptography machine cluster drifts successfully, the original faulty cloud cryptography machine cluster can be deleted to release resources, and the overall drift of the cloud cryptography machine cluster is completed. Otherwise, an alarm message is generated and waits for manual processing.

[0048] Furthermore, the process of restoring a new cluster from an idle standby cloud cryptographic machine host in S4 with the specified cluster snapshot file name includes:

[0049] S41: The standby cloud cryptographic machine host downloads the corresponding cluster snapshot file from the file server according to the name of the latest cluster snapshot file, and decrypts it using the device key;

[0050] S42: The standby cloud cryptographic machine host verifies the snapshot file signature value and the snapshot file check code. The verification process is as follows: calculate the summary of the cluster topology information, the virtual machine name and IP comparison table, and the file data of the virtual cryptographic machine snapshot to obtain the summary value; use the calculated summary value and the snapshot file check code in the cluster snapshot file basic information as parameters and use the device key to verify the signature;

[0051] S43: After verification, the standby cloud cryptographic machine host uses the cluster topology information and cluster node snapshots to restore a new cloud cryptographic machine cluster. The core operations of restoring the new cluster are: 1. Create a new virtual machine using the virtual machine snapshot in the cluster snapshot file; 2. Restore the cluster topology structure based on the cluster topology information and the virtual machine name IP comparison table.

[0052] Furthermore, the cloud cryptographic machine management platform monitors and obtains cluster status information at different times by calling the cloud cryptographic machine host management program on the cloud cryptographic machine host, and perceives cluster changes by comparing cluster status information at adjacent times; cluster changes include but are not limited to: updating the keys of cluster nodes, updating the configurations of cluster nodes, adding nodes to the cluster, and reducing nodes from the cluster.

[0053] Furthermore, the snapshot file signature value is calculated as follows:

[0054] Calculate the summary of the cluster topology information, the virtual machine name and IP comparison table, and the file data of the virtual cryptographic machine snapshot, use the obtained summary value as the snapshot file verification code, and update the value of the snapshot file verification code attribute in the cluster snapshot file basic information;

[0055] Use the cloud cryptographic machine device key to sign the snapshot file verification code, use the signature result as the snapshot file signature value, and update the value of the snapshot file signature attribute in the cluster snapshot file basic information.

[0056] On the other hand, in a specific embodiment, a device for supporting overall drift of a cloud cryptographic machine cluster includes an original cloud cryptographic machine host, a plurality of backup cloud cryptographic machine hosts, a cloud cryptographic machine management platform, and a file server;

[0057] The cloud cryptography machine management platform monitors the cluster of the original cloud cryptography machine host, obtains cluster status information and cluster snapshot information, builds cluster snapshot files and transmits them to the file server, and determines whether to perform cluster drift; when performing cluster drift, the cloud cryptography machine management platform queries the idle standby cloud cryptography machine hosts from all standby cloud cryptography machine hosts, and queries the latest cluster snapshot files at the same time;

[0058] The idle standby cloud cryptography machine host downloads the latest cluster snapshot file from the file server, restores the new cluster according to the latest cluster snapshot file, and notifies the cloud cryptography machine management platform to control the original cloud cryptography machine host to isolate the cluster from the network;

[0059] When the original cloud cryptographic machine host creates a new cluster, it deletes its own cluster and releases resources.

[0060] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.

[0061] The above description of the disclosed embodiments enables one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A method for supporting the overall drift of a cloud cryptographic machine cluster, characterized in that: The following steps are involved: Step 1: The cloud cryptographic machine management platform collects the cluster status information and cluster snapshot information of the cluster on the original cloud cryptographic machine host, and builds a cluster snapshot file based on the cluster snapshot information; Step 2: Determine whether to perform cluster drift according to the cluster status information and the set fault threshold. If cluster drift is performed, go to step 3; otherwise, return to step 1. Step 3: The cloud cryptographic machine management platform queries the idle standby cloud cryptographic machine host and queries the latest cluster snapshot file; Step 4: The cloud cryptographic machine management platform notifies the idle standby cloud cryptographic machine host to restore the new cluster based on the latest cluster snapshot file; Step 5: The cloud cryptography machine management platform notifies the original cloud cryptography machine host to isolate the cluster based on the cluster status information; if all virtual machines in the new cluster run normally, the migration is successful, the cluster on the original cloud cryptography machine host is deleted, and resources are released; otherwise, an alarm message is generated and waits for manual processing; The cluster snapshot file includes basic information of the cluster snapshot file, cluster topology information, virtual machine name and IP comparison table, and cluster node snapshot; The basic information of the cluster snapshot file includes the snapshot generation time, snapshot file size, snapshot file verification code and snapshot file signature value; The cluster topology information adopts a directed graph set; the virtual machine name and IP comparison table records the comparison relationship between the virtual machine name and IP; the cluster node snapshot is a snapshot of all virtual machines in the cluster, including all data of the restored virtual machine; The cloud cryptographic machine management platform transfers the cluster snapshot file to the file server. The file server defines the cluster snapshot file name according to the corresponding cluster name combined with the timestamp, and sorts all cluster snapshot files by time. Cluster status information includes cluster node key updates, cluster node configuration updates, cluster node additions, and cluster node reductions.

2. A method for supporting overall drift of a cloud cryptographic machine cluster according to claim 1, characterized in that: The process of calculating the snapshot file signature value includes: Step 11: Calculate the summary value of cluster topology information, virtual machine name and IP comparison table, and cluster node snapshot as the snapshot file verification code, and set the snapshot file verification code attribute value; Step 12: Use the cloud cryptographic machine device key to sign the snapshot file verification code, use the signature result as the snapshot file signature value, and set the snapshot file signature attribute value.

3. A method for supporting overall drift of a cloud cryptographic machine cluster according to claim 1, characterized in that: The cloud cryptographic machine management platform collects cluster status information regularly and counts the number of faulty nodes in the cluster. If the number of faulty nodes is greater than or equal to the fault threshold, cluster drift is performed; The cluster drift process includes: Step 41: The idle standby cloud cryptographic machine host downloads the corresponding cluster snapshot file from the file server according to the cluster snapshot file name of the latest cluster snapshot; Step 42: The idle standby cloud cryptographic machine host verifies the snapshot file signature value and the snapshot file verification code in the cluster snapshot file; Step 43: The idle standby cloud cryptographic machine host uses the cluster node snapshot to create a new virtual machine, restores the cluster topology structure of the newly created virtual machine according to the cluster topology information and the virtual machine name IP comparison table, and obtains a new cluster.

4. A method for supporting overall drift of a cloud cryptographic machine cluster according to claim 1, characterized in that: The specific implementation process of step 42 includes: Step 421: Calculate the summary of cluster topology information, virtual machine name and IP comparison table, and cluster node snapshot in the cluster snapshot file to obtain a summary value; Step 422: Using the digest value and snapshot file verification signature value as parameters, use the device key of the idle standby cloud cryptographic machine host to verify the signature. If the verification passes, proceed to step 43; otherwise, generate an alarm message and wait for manual processing.

5. A device for supporting the overall drift of a cloud cryptographic machine cluster, characterized in that: A method for supporting overall drift of a cloud cryptographic machine cluster as described in any one of claims 1 to 4 is applied, comprising an original cloud cryptographic machine host, a plurality of backup cloud cryptographic machine hosts, a cloud cryptographic machine management platform, and a file server; The cloud cryptography machine management platform monitors the cluster of the original cloud cryptography machine host, obtains cluster status information and cluster snapshot information, builds cluster snapshot files and transmits them to the file server, and determines whether to perform cluster drift; when performing cluster drift, the cloud cryptography machine management platform queries the idle standby cloud cryptography machine hosts from all standby cloud cryptography machine hosts, and queries the latest cluster snapshot files at the same time; The idle standby cloud cryptography machine host downloads the latest cluster snapshot file from the file server, restores the new cluster according to the latest cluster snapshot file, and notifies the cloud cryptography machine management platform to control the original cloud cryptography machine host to isolate the cluster from the network; When the original cloud cryptographic machine host creates a new cluster, it deletes its own cluster and releases resources.

Images