Multi-cloud management platform log data storage and query management method and device

Abstract

The invention discloses a multi-cloud management platform log data storage and query management method and device, and the storage management method comprises the following steps: responding to the generation of log data, locally storing the log data, calculating a hash value, and creating an operation ID with uniqueness, the log data comprises an operation executor, a log ID, operation details and an operation timestamp; the operation ID, the log data and the hash value are recorded on the block chain, an encryption algorithm is adopted to encrypt the log ID, the operation executor and the operation details to generate encrypted data, an unencrypted index record corresponding to the encrypted data is constructed, and the index record comprises the operation ID, the hash value and an operation timestamp. Through the block chain technology, sensitive data are encrypted, unique and insensitive data are not encrypted and stored, it is guaranteed that the data are not tampered, the credibility is high, data authenticity judgment is achieved, and responsibility investigation can be achieved.

Description

Technical Field

[0001] The present invention belongs to the technical field of multi-cloud management platforms, and in particular relates to a method and device for storing and querying log data of a multi-cloud management platform. Background Art

[0002] The multi-cloud management platform (Cloud Manager) manages the enterprise's multi-cloud / hybrid cloud resources from the overall perspective of the entire enterprise, breaking through information islands and interconnecting to achieve a unified portal, unified services, and unified management. The existing multi-cloud management platform has become an important part of the enterprise IT infrastructure. Through the multi-cloud management platform, enterprises can uniformly manage and schedule resources from different cloud service providers to achieve flexible and efficient resource utilization. The main functions of the multi-cloud management platform include resource allocation, data migration, load balancing, cost management, user access control, etc.

[0003] Although multi-cloud management platforms provide many conveniences in resource management, they still have the following problems and shortcomings:

[0004] (1) Insufficient operational transparency: The operation logs of multi-cloud platforms, such as resource allocation, data migration, and user access, are usually stored in centralized databases. The transparency and traceability of operations are poor, making it difficult to ensure the credibility of operations.

[0005] (2) Data tampering risk: Centralized operation logs are at risk of being tampered with, making it impossible to effectively track and audit operations.

[0006] (3) Accountability issues when operations are inconsistent with results: When the operations of the multi-cloud management platform are inconsistent with the actual implementation of the cloud service provider, it is difficult to determine who is responsible. Summary of the invention

[0007] In order to solve the problems of insufficient operational transparency, data tampering risk and difficulty in accountability of the existing multi-cloud management platform, the present invention proposes a multi-cloud management platform log data storage and query management method and device.

[0008] The objective of the present invention is achieved through the following technical solutions:

[0009] A first aspect of the present invention discloses a multi-cloud management platform operation log storage management method, comprising the following steps:

[0010] In response to generating log data, locally storing the log data, calculating a hash value and creating a unique operation ID, the log data including an operation performer, a log ID, operation details and an operation timestamp;

[0011] The operation ID, log data and hash value are recorded on the blockchain, and the log ID, operation executor and operation details are encrypted using an encryption algorithm to generate encrypted data and construct an unencrypted index record corresponding to the encrypted data, wherein the index record includes the operation ID, hash value and operation timestamp.

[0012] A second aspect of the present invention discloses a multi-cloud management platform log data query management method, comprising the following steps:

[0013] In response to receiving a query instruction, the query instruction includes at least one of an operation ID, a hash value, and an operation timestamp;

[0014] Search and determine the encrypted data on the corresponding blockchain according to the query instruction;

[0015] Decrypt the encrypted data to obtain the log ID, the operator of the operation and the operation details;

[0016] Searching for locally stored log data according to the log ID, and calculating a hash value of the locally stored log data;

[0017] Compare the hash value of the locally stored log data with the corresponding hash value on the blockchain;

[0018] In response to the hash value of the locally stored log data being the same as the corresponding hash value on the blockchain, the locally stored log data is true.

[0019] The third aspect of the present invention discloses a multi-cloud management platform log data management device, comprising a memory and a controller that are communicatively connected in sequence, wherein a computer program is stored on the memory, and the controller is used to read the computer program and execute the multi-cloud management platform operation log storage management method described in the first aspect, or execute the multi-cloud management platform log data query management method described in the second aspect.

[0020] The beneficial effects of the present invention are:

[0021] 1. The present invention uses blockchain technology and encrypts sensitive data, and stores unique and non-sensitive data without encryption, ensuring that the data is not tampered with and has high credibility.

[0022] 2. The present invention compares the hash value of the data on the blockchain with the hash value of the log data stored locally to determine the authenticity of the data and thus to hold the parties accountable. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0024] Figure 1 It is a flow chart of the multi-cloud management platform operation log storage management method of the present invention;

[0025] Figure 2 The present invention is a flowchart of a multi-cloud management platform log data query management method. DETAILED DESCRIPTION

[0026] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Generally, the components of the embodiments of the present invention described and shown in the drawings here can be arranged and designed in various different configurations.

[0027] Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the invention claimed for protection, but merely represents selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0028] It should be noted that, in the absence of conflict, the embodiments of the present invention and the features of the embodiments may be combined with each other.

[0029] It should be noted that similar reference numerals and letters denote similar items in the following drawings, and therefore, once an item is defined in one drawing, further definition and explanation thereof is not required in subsequent drawings.

[0030] In the description of the present invention, it should be noted that the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inside", "outside", etc. indicate positions or positional relationships based on the positions or positional relationships shown in the accompanying drawings, or the positions or positional relationships in which the product of the invention is usually placed when in use, or the positions or positional relationships commonly understood by those skilled in the art, which are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as limiting the present invention. In addition, the terms "first", "second", etc. are only used to distinguish the description, and cannot be understood as indicating or implying relative importance.

[0031] In the description of the present invention, it is also necessary to explain that, unless otherwise clearly specified and limited, the terms "set", "install", "connect", and "connect" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0032] The first aspect of the present invention discloses a multi-cloud management platform operation log storage management method, which is used when the multi-cloud management and control platform interacts with a cloud service provider. The method can be used not only on the multi-cloud management and control platform side, but also on the cloud service provider side. Specifically, Figure 1 As shown, the method includes steps S11 to S12.

[0033] Step S11, in response to generating log data, locally storing the log data, calculating a hash value and creating a unique operation ID, wherein the log data includes an operation performer, a log ID, operation details and an operation timestamp.

[0034] In this step, the generated log data is first stored locally. This part of the log is the original system log. The created operation ID is unique, which is convenient for subsequent queries to be found based on the operation ID.

[0035] Step S12: record the operation ID, log data and hash value on the blockchain, use an encryption algorithm to encrypt the log ID, operation executor and operation details to generate encrypted data and construct an unencrypted index record corresponding to the encrypted data, wherein the index record includes the operation ID, hash value and operation timestamp.

[0036] Blockchain technology is widely used in finance, supply chain management, digital identity and other fields due to its decentralization, transparency and immutability. Blockchain records transactions and operations through distributed ledgers to ensure the authenticity and reliability of data. Smart contract technology further enhances the application scenarios of blockchain, enabling it to automatically execute predefined operations.

[0037] This step ensures that the data cannot be tampered with by storing the operation ID, log data, and hash value on the blockchain. The unique operation ID, hash value, and operation timestamp are stored as unencrypted data to facilitate subsequent data queries.

[0038] The encryption in this step may be performed using the AES encryption algorithm. Specifically, a 128-bit or 256-bit AES key K is first generated, and then the AES key K is used to encrypt the log ID, the operator and the operation details to generate encrypted data E(D).

[0039] Where E(D) = AES Encrypt (D,K)

[0040] D is the log ID, the operator and the operation details, that is, the data to be encrypted.

[0041] Based on the multi-cloud management platform operation log storage management method of the first aspect, the second aspect of the present invention discloses a multi-cloud management platform log data query management method, such as Figure 2 As shown, it includes steps S21 to S24.

[0042] Step S21: In response to receiving a query instruction, the query instruction includes at least one of an operation ID, a hash value, and an operation timestamp, and the encrypted data on the corresponding blockchain is searched and determined according to the query instruction.

[0043] Since the operation ID, hash value and operation timestamp stored on the blockchain using the multi-cloud management platform operation log storage management method in the first aspect are unique, unique encrypted data can be queried according to the operation ID, hash value or operation timestamp in the query instruction.

[0044] Step S22: decrypt the encrypted data to obtain the log ID, the operator and the operation details.

[0045] Specifically, during the decryption process, the corresponding AES key K is first obtained; and then the AES key K is used to decrypt the encrypted data.

[0046] Where D = AES Decrypt (E(D),K)

[0047] Step S23: Search for locally stored log data according to the log ID, and calculate a hash value of the locally stored log data.

[0048] Specifically, the SHA-256 algorithm is used to calculate the hash value of the locally stored log data.

[0049] Step S24: compare the hash value of the locally stored log data with the corresponding hash value on the blockchain. In response to the hash value of the locally stored log data being the same as the corresponding hash value on the blockchain, the locally stored log data is true.

[0050] With the above solution, all operations and result records are tamper-proof, ensuring the transparency and credibility of the operation. Once the operation and result are inconsistent, the responsible party can be quickly located and the accountability can be clearly determined through blockchain records.

[0051] This solution uses blockchain technology to achieve transparency and immutability of multi-cloud management platform operations, effectively solving the problems of insufficient operational transparency, data tampering risks, and accountability for inconsistent operational results in existing technologies.

[0052] Example 1:

[0053] System: Multi-cloud management platform

[0054] Log ID: log202405010014

[0055] Details: The multi-cloud management platform requests allocation of virtual machine resources

[0056] Operation timestamp: 2024-05-01 10:00:00

[0057] Operation performed by: userA

[0058] Log data: {"Log ID":"log202405010014","Details":"The multi-cloud management platform requests a certain cloud platform to allocate virtual machine resources","Operation timestamp":"2024-05-01 10:00:00","Operation performer":"userA"}

[0059] Hash value (SHA-256) of multi-cloud management platform log data: HASH1

[0060] Multi-cloud management platform log data (encrypted): ENCRYPTED_LOG1

[0061] Generate operation ID (as index record): op202405010014

[0062] On-chain log data (integrated encrypted original system log and HASH value): {"operation ID":"op202405010014","original system log data":"ENCRYPTED_LOG1","operation timestamp":"2024-05-0110:00:00","HASH":"HASH1"}

[0063] Example 2:

[0064] System: XXXX cloud platform

[0065] Log ID: log202405010015

[0066] Detailed information: The cloud platform successfully allocated virtual machine resources

[0067] Operation timestamp: 2024-05-01 10:00:05

[0068] Operation performed by: userA

[0069] Log data of a certain cloud platform: {"Log ID":"log202405010015","Details":"Successful allocation of virtual machine resources by the certain cloud platform","Operation timestamp":"2024-05-01 10:00:05","Operation performer":"userA"}

[0070] Hash value (SHA-256) of the log data of a certain cloud platform: HASH2

[0071] Log data of a certain cloud platform (encrypted): ENCRYPTED_LOG2

[0072] The operation ID previously generated by the multi-cloud management platform (recorded as an index): op202405010014

[0073] On-chain data (integrated encrypted original system log and HASH value): {"operation ID":"op202405010014","original system log data":"ENCRYPTED_LOG2","operation timestamp":"2024-05-01 10:00:05","HASH":"HASH2"}

[0074] Data validation operations.

[0075] Disputed Operation ID: op202405010014

[0076] Log data corresponding to the operation ID: {"Operation ID":"op202405010014","Log data":"ENCRYPTED_LOG1","Operation timestamp":"2024-05-01 10:00:00","HASH":"HASH1"}

[0077] Hash value in log data: HASH1

[0078] Decrypted log data: {"Log ID":"log202405010014","Details":"The multi-cloud management platform requests a certain cloud platform to allocate virtual machine resources","Operation timestamp":"2024-05-0110:00:00","Operation performer":"userA"}

[0079] Original system log ID: log202405010014

[0080] Original system log (search by original system log ID): {"Log ID":"log202405010014","Details":"The multi-cloud management platform requests a certain cloud platform to allocate virtual machine resources","Operation timestamp":"2024-05-01 10:00:00","Operation performer":"userA"}

[0081] Original system log hash value (recalculated): HASH1_RAW

[0082] Compare HASH1 and HASH1_RAW for consistency.

[0083] The third aspect of the present invention discloses a multi-cloud management platform log data management device, including a memory and a controller connected in sequence, wherein a computer program is stored on the memory, and the controller is used to read the computer program, execute a multi-cloud management platform operation log storage management method described in the first aspect, or execute a multi-cloud management platform log data query management method described in the second aspect. Specifically, the memory may include, but is not limited to, a random access memory (Random-Access Memory, RAM), a read-only memory (Read-Only Memory, ROM), a flash memory (Flash Memory), a first-in-first-out memory (First Input First Output, FIFO) and or a first-in-last-out memory (First Input Last Output, FILO), etc.; the controller may not be limited to a microcontroller of the STM32F105 series. In addition, the computer device may also include, but is not limited to, a power supply unit, a display screen and other necessary components.

[0084] The operating principle of the device disclosed in the third aspect of the present invention is detailed in the first and second aspects and will not be elaborated here.

[0085] Those skilled in the art will appreciate that the embodiments described herein are intended to help readers understand the principles of the present invention, and should be understood that the protection scope of the present invention is not limited to such specific statements and embodiments. Those skilled in the art can make various other specific variations and combinations that do not deviate from the essence of the present invention based on the technical revelations disclosed by the present invention, and these variations and combinations are still within the protection scope of the present invention.

Claims

1. A multi-cloud management platform operation log storage management method, characterized in that: The following steps are involved: In response to generating log data, locally storing the log data, calculating a hash value and creating a unique operation ID, the log data including an operation performer, a log ID, operation details and an operation timestamp; The operation ID, log data and hash value are recorded on the blockchain, and the log ID, operation executor and operation details are encrypted using an encryption algorithm to generate encrypted data and construct an unencrypted index record corresponding to the encrypted data, wherein the index record includes the operation ID, hash value and operation timestamp.

2. A multi-cloud management platform operation log storage management method according to claim 1, characterized in that: The adopting of an encryption algorithm to encrypt the log ID, the operator and the operation details includes: generating a 128-bit or 256-bit AES key K; The AES key K is used to encrypt the log ID, operation performer and operation details to generate encrypted data.

3. A multi-cloud management platform log data query management method, characterized in that: The following steps are involved: In response to receiving a query instruction, searching and determining the encrypted data on the corresponding blockchain according to the query instruction, wherein the query instruction includes at least one of an operation ID, a hash value, and an operation timestamp; Decrypt the encrypted data to obtain the log ID, the operator of the operation and the operation details; Searching for locally stored log data according to the log ID, and calculating a hash value of the locally stored log data; Compare the hash value of the locally stored log data with the corresponding hash value on the blockchain; In response to the hash value of the locally stored log data being the same as the corresponding hash value on the blockchain, the locally stored log data is true.

4. A multi-cloud management platform log data query management method according to claim 3, characterized in that: The decrypting the encrypted data comprises: Get the corresponding AES key K; The encrypted data is decrypted using the AES key K.

5. A multi-cloud management platform log data query management method according to claim 3, characterized in that: Calculating the hash value of the locally stored log data includes: Use the SHA-256 algorithm to calculate the hash value of the locally stored log data.

6. A multi-cloud management platform log data management device, comprising a memory and a controller that are sequentially communicatively connected, wherein a computer program is stored in the memory, characterized in that: The controller is used to read the computer program and execute the multi-cloud management platform operation log storage management method described in any one of claims 1-2, or execute the multi-cloud management platform log data query management method described in any one of claims 3-5.

Images