A data processing method based on cloud computing

Abstract

The present invention discloses a cloud computing-based data processing method, belonging to the field of data processing technology, comprising the following steps: S1, obtaining the virtual machine nodes where each data block of a data packet is located in a cloud platform; S2, determining the communication request between the data packet and each virtual machine node; S3, generating an encryption key for the data packet; and S4, encrypting the data packet in the cloud platform using the encryption key. The present invention determines the communication request based on the IP address of the virtual machine node and the TCP protocol of the data packet. The precise generation of the communication request helps prevent unauthorized access and data leakage. By generating a specific encryption key for the data packet and using the key for encryption, the present invention can adapt to the dynamic changes of virtual machine nodes in the cloud platform, significantly enhancing the security of data in the cloud platform.

Description

Technical Field

[0001] The present invention belongs to the technical field of data processing, and in particular relates to a data processing method based on cloud computing. Background Art

[0002] Driven by the development of internet technology, cloud computing and cloud management systems, along with other cloud platform applications, have rapidly evolved. Cloud storage offers a new storage model, with increasing amounts of data being stored in the cloud and transmitted over the network. However, cloud computing data transmission and storage processes face serious security threats, such as data leakage and data tampering. Furthermore, data security is a primary concern for users in cloud computing. However, once users upload data to the cloud, they lose control of their cloud data. Therefore, ensuring data security in cloud computing environments has become a pressing issue. Summary of the Invention

[0003] In order to solve the above problems, the present invention proposes a data processing method based on cloud computing.

[0004] The technical solution of the present invention is: a data processing method based on cloud computing includes the following steps:

[0005] S1. Obtain the virtual machine node where each data block of the data packet in the cloud platform is located;

[0006] S2. Determine the communication request between the data packet and each virtual machine node based on the IP address of the virtual machine node and the TCP protocol of the data packet;

[0007] S3. Generate an encryption key for the data packet based on the communication request between the data packet and each virtual machine node;

[0008] S4. Encrypt the data packets of the cloud platform using the encryption key.

[0009] Furthermore, S2 includes the following sub-steps:

[0010] S21. Obtain the IP address of the virtual machine node where each data block is located, and hash the IP address to obtain a fixed hash value for each virtual machine node;

[0011] S22. Generate a public commitment value for each virtual machine node using a random number and a fixed hash value of each virtual machine node;

[0012] S23. Obtain the TCP protocol of the data packet, and determine the communication request between the data packet and each virtual machine node according to the public commitment value of each virtual machine node.

[0013] The beneficial effects of the above further solution are as follows: In the present invention, the IP address is the unique identifier of the virtual machine node in the network and is used for network communication and data transmission. Hashing the IP address of the virtual machine node can generate a fixed hash value, which helps to hide the true IP address and prevent unauthorized access and attacks. The hash value and the public commitment value generated by the random number provide a secure verification mechanism for communication between the data packet and the virtual machine node, making it more difficult for the data packet to be tampered with or forged during transmission.

[0014] Furthermore, in S22, the public commitment value of the virtual machine node The calculation formula is:

[0015] ;

[0016] Where, represents a random number, Indicates the fixed hash value of the virtual machine node.

[0017] Furthermore, S23 includes the following sub-steps:

[0018] S231, obtaining the TCP protocol of the data packet, and generating a flag value based on the SYN flag and ACK flag generated in the handshake process of the TCP protocol;

[0019] S232: Combine the public commitment value and the flag value of each virtual machine node as a communication request between the data packet and each virtual machine node.

[0020] The beneficial effect of the above further solution is that, in the present invention, the TCP handshake process (SYN-SYN-ACK-ACK) is a key step in establishing a reliable connection. By detecting the SYN and ACK flags, it is possible to ensure that the data packet is sent on a valid TCP connection, thereby preventing unauthorized access and attacks. Combining the public commitment value of each virtual machine node with the flag generated during the TCP handshake as part of the communication request can further verify the authenticity and legitimacy of the data packet.

[0021] Furthermore, in S231, the flag value The calculation formula is:

[0022] ;

[0023] Where, Indicates a specific bit of the SYN flag. Indicates the specific bit of the ACK flag, Indicates the maximum segment length of the TCP protocol.

[0024] Setting a specific bit in a bit field to 1 activates or enables a function or state. The SYN and ACK flags play a key role in the handshake process. SYN initiates a connection request, and ACK confirms the receipt of a connection request or data packet. Setting the SYN bit to 1 initiates a new connection request; the ACK flag is often set to 1 (ACK = 1) to confirm the receipt of a data packet. The TCP protocol's Maximum Segment Size (MSS) refers to the maximum amount of data that can be sent in a single TCP connection.

[0025] Furthermore, in S232, the communication request between the data packet and the virtual machine node The expression is:

[0026] ;

[0027] Where, Indicates the sign quantity, Indicates the public commitment value of the virtual machine node, Represents a random number.

[0028] Furthermore, S3 includes the following sub-steps:

[0029] S31. Extract the maximum characteristic value of the communication request as the communication characteristic value of the virtual machine node;

[0030] S32. Calculate first encrypted data of the encryption key based on the communication characteristic values ​​of all virtual machine nodes;

[0031] S33. Determine the second encrypted data and generate an encryption key.

[0032] The beneficial effect of the above further solution is that, in the present invention, by extracting the maximum characteristic value of the communication request as the communication characteristic value of the virtual machine node, the communication pattern and behavior of each virtual machine node can be more effectively identified. The first encrypted data is calculated based on the communication characteristic values ​​of all virtual machine nodes, and the second encrypted data is determined to generate the encryption key, ensuring the dynamic and unique nature of the encryption key. The expression of the encryption key is: Where, represents the first encrypted data, Indicates the second encrypted data.

[0033] Furthermore, in S32, the first encrypted data The calculation formula is:

[0034] ;

[0035] Where, Indicates the The communication characteristic value of each virtual machine node, Indicates the number of virtual machine nodes. Indicates the The allocated memory size for each virtual machine node.

[0036] The allocated memory size refers to the memory size allocated to the virtual machine node, which affects the node's operating speed and data processing capabilities.

[0037] Furthermore, in S33, the TCP protocol checksum of the data packet is used as the second encrypted data.

[0038] The checksum is calculated as a 16-bit word over the entire TCP segment. This is a mandatory field. If necessary, the checksum can be encoded as a secondary encrypted data.

[0039] The beneficial effects of the present invention are as follows: the present invention determines the communication request based on the IP address of the virtual machine node and the TCP protocol of the data packet. The accurate generation of the communication request helps to prevent unauthorized access and data leakage; the present invention generates a specific encryption key for the data packet and uses the key for encryption, which can adapt to the dynamic changes of the virtual machine nodes in the cloud platform and significantly enhance the security of data in the cloud platform. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] Figure 1 The flowchart of the data processing method based on cloud computing is shown in FIG. DETAILED DESCRIPTION

[0041] The embodiments of the present invention will be further described below with reference to the accompanying drawings.

[0042] like Figure 1 As shown, the present invention provides a data processing method based on cloud computing, comprising the following steps:

[0043] S1. Obtain the virtual machine node where each data block of the data packet in the cloud platform is located;

[0044] S2. Determine the communication request between the data packet and each virtual machine node based on the IP address of the virtual machine node and the TCP protocol of the data packet;

[0045] S3. Generate an encryption key for the data packet based on the communication request between the data packet and each virtual machine node;

[0046] S4. Encrypt the data packets of the cloud platform using the encryption key.

[0047] In this embodiment of the present invention, S2 includes the following sub-steps:

[0048] S21. Obtain the IP address of the virtual machine node where each data block is located, and hash the IP address to obtain a fixed hash value for each virtual machine node;

[0049] S22. Generate a public commitment value for each virtual machine node using a random number and a fixed hash value of each virtual machine node;

[0050] S23. Obtain the TCP protocol of the data packet, and determine the communication request between the data packet and each virtual machine node according to the public commitment value of each virtual machine node.

[0051] The beneficial effects of the above further solution are as follows: In the present invention, the IP address is the unique identifier of the virtual machine node in the network and is used for network communication and data transmission. Hashing the IP address of the virtual machine node can generate a fixed hash value, which helps to hide the true IP address and prevent unauthorized access and attacks. The hash value and the public commitment value generated by the random number provide a secure verification mechanism for communication between the data packet and the virtual machine node, making it more difficult for the data packet to be tampered with or forged during transmission.

[0052] In the embodiment of the present invention, in S22, the public commitment value of the virtual machine node The calculation formula is:

[0053] ;

[0054] Where, represents a random number, Indicates the fixed hash value of the virtual machine node.

[0055] In this embodiment of the present invention, S23 includes the following sub-steps:

[0056] S231, obtaining the TCP protocol of the data packet, and generating a flag value based on the SYN flag and ACK flag generated in the handshake process of the TCP protocol;

[0057] S232: Combine the public commitment value and the flag value of each virtual machine node as a communication request between the data packet and each virtual machine node.

[0058] The beneficial effect of the above further solution is that, in the present invention, the TCP handshake process (SYN-SYN-ACK-ACK) is a key step in establishing a reliable connection. By detecting the SYN and ACK flags, it is possible to ensure that the data packet is sent on a valid TCP connection, thereby preventing unauthorized access and attacks. Combining the public commitment value of each virtual machine node with the flag generated during the TCP handshake as part of the communication request can further verify the authenticity and legitimacy of the data packet.

[0059] In the embodiment of the present invention, in S231, the flag value The calculation formula is:

[0060] ;

[0061] Where, Indicates a specific bit of the SYN flag. Indicates the specific bit of the ACK flag, Indicates the maximum segment length of the TCP protocol.

[0062] Setting a specific bit in a bit field to 1 activates or enables a function or state. The SYN and ACK flags play a key role in the handshake process. SYN initiates a connection request, and ACK confirms the receipt of a connection request or data packet. Setting the SYN bit to 1 initiates a new connection request; the ACK flag is often set to 1 (ACK = 1) to confirm the receipt of a data packet. The TCP protocol's Maximum Segment Size (MSS) refers to the maximum amount of data that can be sent in a single TCP connection.

[0063] In the embodiment of the present invention, in S232, the communication request between the data packet and the virtual machine node The expression is:

[0064] ;

[0065] Where, Indicates the sign quantity, Indicates the public commitment value of the virtual machine node, Represents a random number.

[0066] In this embodiment of the present invention, S3 includes the following sub-steps:

[0067] S31. Extract the maximum characteristic value of the communication request as the communication characteristic value of the virtual machine node;

[0068] S32. Calculate first encrypted data of the encryption key based on the communication characteristic values ​​of all virtual machine nodes;

[0069] S33. Determine the second encrypted data and generate an encryption key.

[0070] The beneficial effect of the above further solution is that, in the present invention, by extracting the maximum characteristic value of the communication request as the communication characteristic value of the virtual machine node, the communication pattern and behavior of each virtual machine node can be more effectively identified. The first encrypted data is calculated based on the communication characteristic values ​​of all virtual machine nodes, and the second encrypted data is determined to generate the encryption key, ensuring the dynamic and unique nature of the encryption key. The expression of the encryption key is: Where, represents the first encrypted data, Indicates the second encrypted data.

[0071] In the embodiment of the present invention, in S32, the first encrypted data The calculation formula is:

[0072] ;

[0073] Where, Indicates the The communication characteristic value of each virtual machine node, Indicates the number of virtual machine nodes. Indicates the The allocated memory size for each virtual machine node.

[0074] The allocated memory size refers to the memory size allocated to the virtual machine node, which affects the node's operating speed and data processing capabilities.

[0075] In the embodiment of the present invention, in S33, the TCP protocol checksum of the data packet is used as the second encrypted data.

[0076] The checksum is calculated as a 16-bit word over the entire TCP segment. This is a mandatory field. If necessary, the checksum can be encoded as a secondary encrypted data.

[0077] Those skilled in the art will appreciate that the embodiments described herein are intended to help readers understand the principles of the present invention, and it should be understood that the scope of protection of the present invention is not limited to such specific descriptions and embodiments. Those skilled in the art can make various other specific variations and combinations based on the technical teachings disclosed in the present invention without departing from the essence of the present invention, and such variations and combinations are still within the scope of protection of the present invention.

Claims

1. A data processing method based on cloud computing, characterized in that: The following steps are involved: S1. Obtain the virtual machine node where each data block of the data packet in the cloud platform is located; S2. Determine the communication request between the data packet and each virtual machine node based on the IP address of the virtual machine node and the TCP protocol of the data packet; S3. Generate an encryption key for the data packet based on the communication request between the data packet and each virtual machine node; S4. Encrypt the data packet of the cloud platform using the encryption key; The S2 includes the following sub-steps: S21. Obtain the IP address of the virtual machine node where each data block is located, and hash the IP address to obtain a fixed hash value for each virtual machine node; S22. Generate a public commitment value for each virtual machine node using a random number and a fixed hash value of each virtual machine node; S23, obtaining the TCP protocol of the data packet, and determining the communication request between the data packet and each virtual machine node according to the public commitment value of each virtual machine node; In S22, the public commitment value of the virtual machine node The calculation formula is: ； Where, represents a random number, A fixed hash value representing a virtual machine node; The S23 includes the following sub-steps: S231, obtaining the TCP protocol of the data packet, and generating a flag value based on the SYN flag and ACK flag generated in the handshake process of the TCP protocol; S232: combining the public commitment value and the flag value of each virtual machine node as a communication request between the data packet and each virtual machine node; In the step S232, the communication request between the data packet and the virtual machine node The expression is: ； Where, Indicates the sign quantity, Indicates the public commitment value of the virtual machine node, Represents a random number; The S3 includes the following sub-steps: S31. Extract the maximum characteristic value of the communication request as the communication characteristic value of the virtual machine node; S32. Calculate first encrypted data of the encryption key based on the communication characteristic values ​​of all virtual machine nodes; S33. Determine the second encrypted data and generate an encryption key; In the S32, the first encrypted data The calculation formula is: ； Where, Indicates the The communication characteristic value of each virtual machine node, Indicates the number of virtual machine nodes. Indicates the The allocated memory size of each virtual machine node; In the above S33, the TCP protocol checksum of the data packet is used as the second encrypted data.

2. The cloud computing-based data processing method according to claim 1, characterized in that: In the above S231, the flag value The calculation formula is: ； Where, Indicates a specific bit of the SYN flag. Indicates the specific bit of the ACK flag, Indicates the maximum segment length of the TCP protocol.

Images