Design method and device of secure cloud platform, electronic equipment and program product

Abstract

The invention relates to the technical field of computers, in particular to a design method and device of a secure cloud platform, electronic equipment and a program product.The secure cloud platform comprises multiple sets of 2-vote-2 units, each set of 2-vote-2 unit comprises two sets of subunits, and each set of subunits comprises two virtual machines. If yes, the fault subunit is controlled to stop running, and a new subunit meeting a preset pairing condition is determined based on the topological information of the fault subunit; and obtaining virtual machine mirror image information of the fault subunit, and burning the virtual machine mirror image information of the fault subunit into the two virtual machines of the new subunit to replace the fault subunit for operation. Therefore, the problems that a safety hardware platform system of an existing train control system is high in maintenance requirement and large in maintenance difficulty, the performance of a hardware platform is difficult to improve, the performance of the system cannot be quickly adapted and upgraded according to application conditions, and the CPU operational capability of embedded equipment is poor are solved.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a design method, device, electronic device and program product for a secure cloud platform. Background Art

[0002] The safety hardware platform of the existing train control system is a proprietary device. Ground products and vehicle-mounted products use different embedded hardware platforms. Spare parts need to be prepared separately during engineering use, and the equipment boards cannot be used interchangeably.

[0003] First, different products require different maintenance personnel, which increases the ability requirements and maintenance intensity of maintenance personnel. Secondly, when the entire system is upgraded and renovated, if the existing hardware platform cannot meet the system requirements, the CPU and related supporting hardware need to be replaced. The development cycle is long, the project risk is high, and plug-and-play cannot be achieved. Thirdly, the first version of the embedded hardware platform adopts a 2x2-out-of-2 security architecture. When a system fails, the system is in a single-system working state, and maintenance personnel are required to replace related boards on site. During the replacement process, there is a risk of failure again. In this process, only the single system works normally. If a failure occurs, the entire system will be down and unusable.

[0004] In summary, the existing security hardware platform has the following shortcomings.

[0005] 1) System failure requires maintenance personnel to replace hardware equipment on site, which poses a safety risk;

[0006] 2) System performance cannot be quickly adapted and upgraded according to application conditions, which affects system upgrades and modifications;

[0007] 3) The first version of the embedded hardware platform CPU uses low-power products, which has a bottleneck in computing power and cannot meet the CPU computing power requirements of the current train control system intelligent algorithm;

[0008] 4) Dedicated hardware equipment requires professional maintenance personnel, and has high maintenance difficulty and intensity. Summary of the invention

[0009] The present application provides a design method, device, electronic device and program product for a secure cloud platform to solve the problems of the existing train control system's secure hardware platform system, high maintenance requirements and difficulty in maintenance, difficulty in improving hardware platform performance, inability to quickly adapt and upgrade system performance according to application conditions, and poor CPU computing power of embedded devices.

[0010] The first aspect of the present application provides a design method for a security cloud platform, wherein the security cloud platform includes multiple sets of 2-out-of-2 units, each set of 2-out-of-2 units includes two groups of sub-units, each group of sub-units is located in a different computing node, each group of sub-units includes two virtual machines, and the different computing nodes where the two virtual machines are located adopt different virtualization technologies, wherein the method includes the following steps: determining whether there is a faulty sub-unit in the two groups of sub-units; if there is a faulty sub-unit, controlling the faulty sub-unit to stop running, and determining a new sub-unit that meets a preset pairing condition based on the topological information of the faulty sub-unit; obtaining the virtual machine image information of the faulty sub-unit, and burning the virtual machine image information of the faulty sub-unit to the two virtual machines of the new sub-unit to replace the faulty sub-unit.

[0011] Optionally, after controlling the faulty sub-unit to stop running, it includes: detecting whether the faulty sub-unit meets a preset repair condition; if the faulty sub-unit meets the preset repair condition, repairing the faulty sub-unit and using it as a backup virtual machine; if the faulty sub-unit does not meet the preset repair condition, migrating all virtual machines on the faulty node where the faulty sub-unit is located and then repairing or replacing the faulty sub-unit offline.

[0012] Optionally, the above-mentioned design method of the secure cloud platform also includes: encrypting the data stored in the storage node using a preset encryption algorithm; calculating the historical hash value of the data stored in the storage node using a hash function according to a preset period, and when the data stored in the storage node is accessed or used, recalculating the current hash value of the data and comparing it with the historical hash value; if the current hash value is consistent with the historical hash value, it is determined that the data stored in the storage node has integrity.

[0013] Optionally, after determining that the faulty subunit exists, the method includes: generating a fault analysis report to a preset terminal based on the fault occurrence time, fault node, fault type and solution of the faulty subunit.

[0014] The second aspect of the present application provides a design device for a security cloud platform, wherein the security cloud platform includes multiple sets of 2-out-of-2 units, each set of 2-out-of-2 units includes two groups of sub-units, each group of sub-units is located in a different computing node, each group of sub-units includes two virtual machines, and the different computing nodes where the two virtual machines are located adopt different virtualization technologies, wherein the device includes: a judgment module, used to judge whether there is a faulty sub-unit in the two groups of sub-units; a determination module, used to control the faulty sub-unit to stop running if the faulty sub-unit exists, and determine a new sub-unit that meets the preset pairing conditions based on the topological information of the faulty sub-unit; a replacement module, used to obtain the virtual machine image information of the faulty sub-unit, and burn the virtual machine image information of the faulty sub-unit to the two virtual machines of the new sub-unit to replace the faulty sub-unit.

[0015] Optionally, after controlling the faulty sub-unit to stop running, the determination module is also used to: detect whether the faulty sub-unit meets the preset repair conditions; if the faulty sub-unit meets the preset repair conditions, the faulty sub-unit is repaired and used as a backup virtual machine; if the faulty sub-unit does not meet the preset repair conditions, all virtual machines on the faulty node where the faulty sub-unit is located are migrated and the faulty sub-unit is repaired or replaced offline.

[0016] Optionally, the design device of the above-mentioned security cloud platform also includes: an encryption module, which is used to encrypt the data stored in the storage node using a preset encryption algorithm; a verification module, which is used to calculate the historical hash value of the data stored in the storage node using a hash function according to a preset period, and when the data stored in the storage node is accessed or used, recalculate the current hash value of the data and compare it with the historical hash value; if the current hash value is consistent with the historical hash value, it is determined that the data stored in the storage node has integrity.

[0017] Optionally, after determining that the faulty subunit exists, the determination module is further used to: generate a fault analysis report to a preset terminal based on the fault occurrence time, fault node, fault type and solution of the faulty subunit.

[0018] The third aspect of the present application provides an electronic device, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the design method of the security cloud platform as described in the above embodiment.

[0019] The fourth aspect of the present application provides a computer program product on which a computer program is stored, and the program is executed by a processor to implement the design method of the security cloud platform as described in the above embodiment.

[0020] In the above implementation, if there is a faulty subunit in the two groups of subunits, the faulty subunit is controlled to stop running, and a new subunit that meets the preset pairing conditions is determined based on the topological information of the faulty subunit, the virtual machine image information of the faulty subunit is obtained, and the virtual machine image information of the faulty subunit is burned into the two virtual machines of the new subunit to replace the faulty subunit. In this way, the problems of the existing safety hardware platform system of the train control system, high maintenance requirements and difficulty in maintenance, difficulty in improving the performance of the hardware platform, inability to quickly adapt and upgrade the system performance according to the application situation, and poor CPU computing power of embedded devices are solved, the maintenance difficulty is reduced, the maintenance intensity is reduced, and when a single virtual machine fails, the system automatically allocates a new virtual machine. When a device fails, the system automatically migrates to other devices without the need to replace the equipment on site. The computing power of general-purpose computers can be dynamically improved, and the computing power is stronger.

[0021] Additional aspects and advantages of the present application will be given in part in the description below, and in part will become apparent from the description below, or will be learned through the practice of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] The above and / or additional aspects and advantages of the present application will become apparent and easily understood from the following description of the embodiments in conjunction with the accompanying drawings, in which:

[0023] Figure 1 A flowchart of a design method for a secure cloud platform provided according to an embodiment of the present application;

[0024] Figure 2 A schematic diagram of the design structure of a security cloud platform according to an embodiment of the present application;

[0025] Figure 3 An example diagram of a design device for a secure cloud platform according to an embodiment of the present application;

[0026] Figure 4 Schematic diagram of the structure of an electronic device according to an embodiment of the present application.

[0027] Description of the drawings: 10 - design device of security cloud platform; 100 - judgment module; 200 - determination module; 300 - replacement module; 401 - memory; 402 - processor; 403 - communication interface. DETAILED DESCRIPTION

[0028] Embodiments of the present application are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present application, and should not be construed as limiting the present application.

[0029] The following describes the design method, device, electronic device and program product of the security cloud platform of the embodiment of the present application with reference to the accompanying drawings. In view of the problems of the security hardware platform system of the existing train control system mentioned in the above background technology, the maintenance requirements are high, the maintenance difficulty is high, the hardware platform performance is difficult to improve, the system performance cannot be quickly adapted and upgraded according to the application situation, and the embedded device CPU computing power is poor, the present application provides a design method for a security cloud platform, in which if there is a faulty subunit in the two groups of subunits, the faulty subunit is controlled to stop running, and a new subunit that meets the preset pairing conditions is determined based on the topological information of the faulty subunit, the virtual machine image information of the faulty subunit is obtained, and the virtual machine image information of the faulty subunit is burned into the two virtual machines of the new subunit to replace the faulty subunit. In this way, the security hardware platform system of the existing train control system is solved, the maintenance requirements are high, the maintenance difficulty is high, the hardware platform performance is difficult to improve, the system performance cannot be adjusted according to the application situation, and the requirements of the intelligent algorithm in the current train control system are not met, the maintenance difficulty is reduced, the maintenance intensity is reduced, a single virtual machine fails, the system automatically allocates a new virtual machine, and the system automatically migrates to other devices when the equipment fails, without the need to replace the equipment on site, and the computing power of the general computer can be dynamically improved, and the computing power is stronger.

[0030] Specifically, Figure 1 A flowchart of a design method for a secure cloud platform provided in an embodiment of the present application.

[0031] like Figure 1 As shown, the design method of the secure cloud platform includes the following steps:

[0032] The security cloud platform includes multiple sets of 2-out-of-2 units, each set of 2-out-of-2 units includes two groups of sub-units, each group of sub-units is located in a different computing node, each group of sub-units includes two virtual machines, and the different computing nodes where the two virtual machines are located use different virtualization technologies.

[0033] Among them, the security cloud platform can achieve the SIL4 safety integrity level requirements, which needs to meet the following conditions:

[0034] 1) The virtualization technology of the computing nodes of the secure cloud platform needs to be developed in a heterogeneous manner or in accordance with the requirements of EN50128;

[0035] 2) The computing node communicates with other nodes using a secure communication protocol;

[0036] 3) Perform data security protection and verification on the data stored in the storage node;

[0037] 4) The virtual machine monitoring module and logic processing module in the control node meet certain safety integrity requirements;

[0038] 5) During the normal operation of the virtual machine of the computing node, the control node cannot perform related operations on the virtual machine, such as deleting, stopping, recycling and reallocating resources of the virtual machine;

[0039] 6) Virtualization technology method 1 for computing nodes: Use Type-I hypervisor and develop it according to the requirements of EN50128.

[0040] 7) Virtualization technology method 2 of computing nodes: Different computing nodes where the two virtual machines of unit 2 are located adopt different virtualization technologies to achieve virtualization heterogeneity.

[0041] In step S101, it is determined whether there is a faulty sub-unit in the two groups of sub-units.

[0042] In step S102, if there is a faulty sub-unit, the faulty sub-unit is controlled to stop running, and a new sub-unit that meets a preset pairing condition is determined based on the topology information of the faulty sub-unit.

[0043] In step S103, the virtual machine image information of the failed sub-unit is obtained, and the virtual machine image information of the failed sub-unit is burned into two virtual machines of a new sub-unit to replace the failed sub-unit for operation.

[0044] Among them, the computing node is a security-critical device, the virtual machine monitoring module and logic processing module of the control node undertake part of the security function, the storage node and the control node are non-security devices, and the computing node contains a separate management module and has the cloud platform management function. The storage node in the secure cloud platform stores the topological link information of each virtual machine in the computing node and all the image backup information. The image backup information should include: 2 times 2 take 2 system logic software, column control product software, related configuration data and other information.

[0045] In the embodiment of the present application, the architecture of the train control system is as follows: Figure 2 As shown, an N times 2 out of 2 secure cloud platform based on a general cloud architecture is implemented through multiple virtual machines in different computing nodes (i.e., different hardware servers), wherein VM-1 in computing node 1 and VM-1 in computing node 2 form a subunit "2 out of 2 unit-1", VM-1 in computing node 3 and VM-1 in computing node 4 form a subunit "2 out of 2 unit-2", "2 out of 2 unit-1" and "2 out of 2 unit-2" constitute a 2 times 2 out of 2 security structure, and the four virtual machines are in different servers, which solves the common mode failure of the hardware platform.

[0046] The virtualization of different computing nodes can be implemented using the same technology or different technologies. If the same technology is used, the development process of the virtualization technology must meet the requirements of EN50128. If different virtualization technologies are used, two virtual machines in a group of sub-units must use different virtualization technologies.

[0047] Among them, the storage node stores two types of information: 1) the topology information of each virtual machine in the computing node, for example, the computing node where each virtual machine in each 2x2x2 security architecture is located, the identity of each virtual machine in the 2x2x2 architecture, and the running image information; 2) the backup of all image information used by each virtual machine in the computing node.

[0048] In the 2x2-out-of-2 security architecture, if a virtual machine fails, the entire 2x2-out-of-2 unit where this virtual machine is located will stop working together. This function is implemented by the 2x2-out-of-2 system software in the virtual machine.

[0049] When a sub-unit quits working, the security cloud platform will automatically add a sub-unit to the sub-unit that is still working, forming a 2x2-take-2 security architecture. The specific implementation process is as follows:

[0050] 1) The virtual machine monitoring module of the cloud platform control node finds the faulty subunit (for example, 2 out of 2 unit-1 is the faulty subunit), and the logic processing module of the control node retrieves the topology information in the storage unit to determine the topology information of the faulty subunit, including the grouping information, the identity in 2 times 2 out of 2, and the original running virtual machine image information;

[0051] 2) According to the grouping and identity information, find two new subunits that meet the preset pairing conditions (the preset pairing conditions are: a. The two virtual machines of the new subunit should be in different computing nodes; b. The computing nodes where the two virtual machines of the new subunit are located should be different from the computing nodes of the matching 2-out-of-2 unit that is not faulty). The two virtual machines form a set of 2-out-of-2 units (for example, the new subunit is 2-out-of-2 unit-3) to replace the existing faulty subunit;

[0052] 3) According to the virtual machine image information originally running in the failed sub-unit, a virtual machine image is selected from the storage unit and burned into two virtual machines in the new sub-unit (e.g., 2 out of 2 unit-3);

[0053] 4) Restart the two virtual machines of the new 2-out-of-2 unit.

[0054] Optionally, in some embodiments, after controlling the faulty sub-unit to stop running, it includes: detecting whether the faulty sub-unit meets a preset repair condition; if the faulty sub-unit meets the preset repair condition, repairing the faulty sub-unit and using it as a backup virtual machine; if the faulty sub-unit does not meet the preset repair condition, migrating all virtual machines on the faulty node where the faulty sub-unit is located and then repairing or replacing the faulty sub-unit offline.

[0055] Optionally, in some embodiments, after determining that there is a faulty subunit, the method includes: generating a fault analysis report to a preset terminal based on the fault occurrence time, fault node, fault type and solution of the faulty subunit.

[0056] Specifically, after the failed sub-unit that has exited the working state (for example, 2 out of 2 unit-1) is repaired, it is recovered and tested by the control node and put into use again as a backup virtual machine. If the failed sub-unit has an irreparable fault after detection, the virtual machines of the corresponding computing nodes can be migrated and the failed sub-unit can be repaired or replaced offline.

[0057] Furthermore, a fault analysis report including the fault occurrence time, fault node, fault type and solution of the fault subunit is generated and sent to a preset terminal.

[0058] Optionally, in some embodiments, the design method of the above-mentioned secure cloud platform also includes: encrypting the data stored in the storage node using a preset encryption algorithm; calculating the historical hash value of the data stored in the storage node using a hash function according to a preset period, and when the data stored in the storage node is accessed or used, recalculating the current hash value of the data and comparing it with the historical hash value; if the current hash value is consistent with the historical hash value, it is determined that the data stored in the storage node has integrity.

[0059] For example, if the AES-256 encryption algorithm is selected as the preset encryption algorithm, the system will use the AES-256 algorithm to encrypt the data stored in the storage node, and the encrypted data will be stored on the storage node.

[0060] Set a preset cycle (such as every day). At the end of each cycle, the system will automatically use the SHA-256 hash function to calculate the hash value of all encrypted data blocks on the storage node. Whenever a user accesses or requests to use data stored on the node, the system first decrypts the data and then uses the SHA-256 hash function to recalculate the hash value of the decrypted data. The secure cloud platform compares the current hash value with the historical hash value of the corresponding data block. If the two are consistent, it means that the data has not been tampered with since the last hash value calculation, so the data can be judged to be complete. If the hash values ​​are inconsistent, the system will issue a warning indicating that the data may have been tampered with or damaged.

[0061] In summary, the security cloud platform proposed in the embodiment of the present application has the following characteristics:

[0062] 1) Based on the virtual machines on different computing nodes of the cloud platform, two virtual machines on different hardware servers form a group of 2 out of 2 units and a group of 2 out of 2 units that do not overlap with the hardware to build a 2x2 out of 2 security architecture;

[0063] 2) When a group of 2-out-of-2 units in the 2x2-out-of-2 safety architecture fails, a group of 2-out-of-2 units on other computing nodes immediately start working to re-form the 2x2-out-of-2 safety architecture;

[0064] 3) The cloud platform can set up multiple servers as computing nodes, and the number of virtual machines is scalable. The system has multiple sets of 2-out-of-2 units as backup devices. When a working 2-out-of-2 unit fails, the backup device immediately switches to working state, seamlessly connecting to achieve high availability.

[0065] Compared with the prior art, the advantages of the embodiments of the present application are as follows:

[0066] 1. Use general-purpose computers to build a secure cloud platform with consistent hardware platforms, which reduces maintenance difficulty and intensity;

[0067] 2. If a single virtual machine fails, the system automatically allocates a new virtual machine, which logically has unlimited availability;

[0068] 3. In case of equipment failure, the system automatically migrates to other equipment without the need to replace equipment on site;

[0069] 4. The computing power of general-purpose computers can be dynamically improved by simply upgrading them to computers with stronger computing power.

[0070] According to the design method of the security cloud platform proposed in the embodiment of the present application, if there is a faulty subunit in the two groups of subunits, the faulty subunit is controlled to stop running, and a new subunit that meets the preset pairing conditions is determined based on the topological information of the faulty subunit, the virtual machine image information of the faulty subunit is obtained, and the virtual machine image information of the faulty subunit is burned into the two virtual machines of the new subunit to replace the faulty subunit. In this way, the problem that when the security hardware platform system of the existing train control system fails, the maintenance personnel need to replace the hardware equipment on site, which poses a security risk, and the system performance cannot be quickly adapted and upgraded according to the application situation, which affects the upgrade and transformation of the system. The first version of the embedded hardware platform CPU adopts low-power products, and there is a bottleneck in computing power, which cannot meet the requirements of the current train control system intelligent algorithm for CPU computing power, and the maintenance difficulty and maintenance intensity are high. The maintenance difficulty is reduced, the maintenance intensity is reduced, and a single virtual machine fails. The system automatically allocates a new virtual machine. When the equipment fails, the system automatically migrates to other devices, without the need to replace the equipment on site. The computing power of general-purpose computers can be dynamically improved, and the computing power is stronger.

[0071] Next, a design device for a secure cloud platform according to an embodiment of the present application will be described with reference to the accompanying drawings.

[0072] Figure 3 It is a block diagram of a design device for a security cloud platform according to an embodiment of the present application.

[0073] Among them, the security cloud platform includes multiple sets of 2-out-of-2 units, each set of 2-out-of-2 units includes two groups of sub-units, each group of sub-units is located in a different computing node, each group of sub-units includes two virtual machines, and the different computing nodes where the two virtual machines are located adopt different virtualization technologies. The design device 10 of the security cloud platform includes: a judgment module 100, a determination module 200 and a replacement module 300.

[0074] Among them, the judgment module 100 is used to judge whether there is a faulty sub-unit in the two groups of sub-units; the determination module 200 is used to control the faulty sub-unit to stop running if there is a faulty sub-unit, and determine a new sub-unit that meets the preset pairing conditions based on the topological information of the faulty sub-unit; the replacement module 300 is used to obtain the virtual machine image information of the faulty sub-unit, and burn the virtual machine image information of the faulty sub-unit into the two virtual machines of the new sub-unit to replace the faulty sub-unit.

[0075] Optionally, in some embodiments, after controlling the faulty sub-unit to stop running, the determination module 200 is also used to: detect whether the faulty sub-unit meets the preset repair conditions; if the faulty sub-unit meets the preset repair conditions, the faulty sub-unit is repaired and used as a backup virtual machine; if the faulty sub-unit does not meet the preset repair conditions, all virtual machines on the faulty node where the faulty sub-unit is located are migrated and the faulty sub-unit is repaired or replaced offline.

[0076] Optionally, in some embodiments, the design device 10 of the above-mentioned security cloud platform further includes: an encryption module, used to encrypt the data stored in the storage node using a preset encryption algorithm; a verification module, used to calculate the historical hash value of the data stored in the storage node using a hash function according to a preset period, and when the data stored in the storage node is accessed or used, recalculate the current hash value of the data and compare it with the historical hash value. If the current hash value is consistent with the historical hash value, it is determined that the data stored in the storage node has integrity.

[0077] Optionally, in some embodiments, after determining that there is a faulty subunit, the determination module 200 is further used to: generate a fault analysis report to a preset terminal based on the fault occurrence time, fault node, fault type and solution of the faulty subunit.

[0078] It should be noted that the aforementioned explanation of the embodiment of the design method of the security cloud platform is also applicable to the design device of the security cloud platform of this embodiment, and will not be repeated here.

[0079] According to the design device of the security cloud platform proposed in the embodiment of the present application, if there is a faulty subunit in the two groups of subunits, the faulty subunit is controlled to stop running, and a new subunit that meets the preset pairing conditions is determined based on the topological information of the faulty subunit, the virtual machine image information of the faulty subunit is obtained, and the virtual machine image information of the faulty subunit is burned into the two virtual machines of the new subunit to replace the faulty subunit. In this way, the problem that when the security hardware platform system of the existing train control system fails, the maintenance personnel need to replace the hardware equipment on site, which poses a security risk, and the system performance cannot be quickly adapted and upgraded according to the application situation, which affects the upgrade and transformation of the system. The first version of the embedded hardware platform CPU adopts low-power products, and there is a bottleneck in computing power, which cannot meet the requirements of the current train control system intelligent algorithm for CPU computing power, and the maintenance difficulty and maintenance intensity are high. The maintenance difficulty is reduced, the maintenance intensity is reduced, and a single virtual machine fails. The system automatically allocates a new virtual machine. When the equipment fails, the system automatically migrates to other devices, without the need to replace the equipment on site. The computing power of general-purpose computers can be dynamically improved, and the computing power is stronger.

[0080] Figure 4 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. The electronic device may include:

[0081] Memory 401 , processor 402 , and a computer program stored in the memory 401 and executable on the processor 402 .

[0082] When the processor 402 executes the program, the design method of the secure cloud platform provided in the above embodiment is implemented.

[0083] Furthermore, the electronic device further comprises:

[0084] The communication interface 403 is used for communication between the memory 401 and the processor 402 .

[0085] The memory 401 is used to store computer programs that can be executed on the processor 402 .

[0086] The memory 401 may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory.

[0087] If the memory 401, the processor 402 and the communication interface 403 are implemented independently, the communication interface 403, the memory 401 and the processor 402 can be connected to each other through a bus and communicate with each other. The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 4 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0088] Optionally, in a specific implementation, if the memory 401, the processor 402 and the communication interface 403 are integrated on a chip, the memory 401, the processor 402 and the communication interface 403 can communicate with each other through an internal interface.

[0089] The processor 402 may be a central processing unit (CPU), or an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present application.

[0090] An embodiment of the present application also provides a computer program product, on which a computer program is stored, and when the program is executed by a processor, the design method of the security cloud platform as described above is implemented.

[0091] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or N embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, without contradiction.

[0092] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Therefore, a feature defined as "first" or "second" may explicitly or implicitly include at least one of the features. In the description of this application, "N" means at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0093] Any process or method description in a flowchart or otherwise described herein may be understood to represent a module, fragment or portion of code comprising one or more executable instructions for implementing the steps of a custom logical function or process, and the scope of the preferred embodiments of the present application includes alternative implementations in which functions may not be performed in the order shown or discussed, including performing functions in a substantially simultaneous manner or in reverse order depending on the functions involved, which should be understood by technicians in the technical field to which the embodiments of the present application belong.

[0094] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer program product for use with an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in combination with these instruction execution systems, devices or apparatuses. For the purposes of this specification, a "computer program product" can be any device that can contain, store, communicate, propagate or transmit a program for use with an instruction execution system, device or apparatus, or in combination with these instruction execution systems, devices or apparatuses. More specific examples of computer program products (a non-exhaustive list) include the following: an electrical connection with one or N wirings (electronic device), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), a fiber optic device, and a portable compact disk read-only memory (CDROM). Furthermore, the computer program product may even be paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example by optically scanning the paper or other medium and then editing, interpreting or, if necessary, processing in another suitable manner, and then storing it in a computer memory.

[0095] It should be understood that the various parts of the present application can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiment, the N steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0096] A person skilled in the art may understand that all or part of the steps in the method for implementing the above-mentioned embodiment may be completed by instructing related hardware through a program, and the program may be stored in a computer program product, which, when executed, includes one or a combination of the steps of the method embodiment.

[0097] In addition, each functional unit in each embodiment of the present application may be integrated into a processing module, or each unit may exist physically separately, or two or more units may be integrated into one module. The above-mentioned integrated module may be implemented in the form of hardware or in the form of a software functional module. If the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it may also be stored in a computer program product.

[0098] The computer program product mentioned above may be a read-only memory, a disk or an optical disk, etc. Although the embodiments of the present application have been shown and described above, it can be understood that the above embodiments are exemplary and cannot be understood as limiting the present application. A person of ordinary skill in the art may change, modify, replace and modify the above embodiments within the scope of the present application.

Claims

1. A design method for a secure cloud platform, characterized in that: The security cloud platform includes multiple sets of 2-out-of-2 units, each set of 2-out-of-2 units includes two groups of sub-units, each group of sub-units is located in a different computing node, each group of sub-units includes two virtual machines, and different computing nodes where the two virtual machines are located use different virtualization technologies, wherein the method includes the following steps: Determining whether there is a faulty subunit in the two groups of subunits; If the faulty subunit exists, control the faulty subunit to stop running, and determine a new subunit that meets a preset pairing condition based on the topological information of the faulty subunit; The virtual machine image information of the faulty sub-unit is obtained, and the virtual machine image information of the faulty sub-unit is burned into two virtual machines of a new sub-unit to replace the faulty sub-unit for operation.

2. The method according to claim 1, characterized in that After controlling the faulty subunit to stop running, the method includes: Detecting whether the faulty subunit meets a preset repair condition; If the faulty subunit meets the preset repair condition, the faulty subunit is repaired and used as a backup virtual machine; If the faulty subunit does not meet the preset repair condition, all virtual machines on the faulty node where the faulty subunit is located are migrated and then the faulty subunit is repaired or replaced offline.

3. The method according to claim 1, characterized in that Also includes: Encrypt the data stored in the storage node using a preset encryption algorithm; According to a preset period, a historical hash value is calculated for the data stored in the storage node using a hash function, and when the data stored in the storage node is accessed or used, the current hash value of the data is recalculated and compared with the historical hash value. If the current hash value is consistent with the historical hash value, it is determined that the data stored in the storage node has integrity.

4. The method according to claim 1, characterized in that: After determining that the faulty subunit exists, the method includes: A fault analysis report is generated based on the fault occurrence time, fault node, fault type and solution of the fault subunit to a preset terminal.

5. A design device for a secure cloud platform, characterized in that: The security cloud platform includes multiple sets of 2-out-of-2 units, each set of 2-out-of-2 units includes two groups of sub-units, each group of sub-units is located in different computing nodes, each group of sub-units includes two virtual machines, and different computing nodes where the two virtual machines are located use different virtualization technologies, wherein the device includes: A judging module, used for judging whether there is a faulty subunit in the two groups of subunits; A determination module, configured to control the faulty subunit to stop running if the faulty subunit exists, and determine a new subunit that meets a preset pairing condition based on the topological information of the faulty subunit; The replacement module is used to obtain the virtual machine image information of the failed sub-unit, and burn the virtual machine image information of the failed sub-unit into two virtual machines of a new sub-unit to replace the failed sub-unit for operation.

6. The device according to claim 5, characterized in that After controlling the faulty subunit to stop running, the determining module is further used to: Detecting whether the faulty subunit meets a preset repair condition; If the faulty subunit meets the preset repair condition, the faulty subunit is repaired and used as a backup virtual machine; If the faulty subunit does not meet the preset repair condition, all virtual machines on the faulty node where the faulty subunit is located are migrated and then the faulty subunit is repaired or replaced offline.

7. The device according to claim 5, characterized in that Also includes: An encryption module, used to encrypt the data stored in the storage node using a preset encryption algorithm; A verification module is used to calculate a historical hash value for the data stored in the storage node using a hash function according to a preset period, and when the data stored in the storage node is accessed or used, recalculate the current hash value of the data and compare it with the historical hash value. If the current hash value is consistent with the historical hash value, it is determined that the data stored in the storage node has integrity.

8. The device according to claim 5, characterized in that After determining that the faulty subunit exists, the determining module is further configured to: A fault analysis report is generated based on the fault occurrence time, fault node, fault type and solution of the fault subunit to a preset terminal.

9. An electronic device, characterized in that: It includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the design method of a secure cloud platform as described in any one of claims 1 to 4.

10. A computer program product, wherein the computer program product stores a computer program, characterized in that: When the program is executed by a processor, the design method of the secure cloud platform as described in any one of claims 1 to 4 is implemented.

Images