一种适用于云服务器密码机的集群自发现方法
By combining certificate management and key management modules, and employing UDP broadcast discovery and three-level authentication, the low configuration efficiency and security issues of traditional cryptographic machine clusters in cloud environments are resolved, achieving automated configuration and security assurance of cloud server cryptographic machines.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- 山东三未信安信息科技有限公司
- Filing Date
- 2025-09-30
- Publication Date
- 2026-07-17
AI Technical Summary
Traditional cryptographic machine clusters are inefficient to configure in cloud environments, prone to IP entry errors, and lack hierarchical identity isolation between physical and virtual devices. The plaintext transmission of the cluster master key is susceptible to eavesdropping, and security cannot be guaranteed.
The certificate management module generates device certificates and root CA certificates, and the key management service module generates virtual machine certificates. The cloud server cryptographic machine achieves hierarchical identity isolation and verification through UDP broadcast discovery and three-level authentication, and uses symmetric key encryption to transmit the cluster master key.
It enables automated configuration of cloud server cryptographic machines, improves configuration efficiency, ensures security during cluster self-discovery and authentication, and prevents key leakage.
Smart Images
Figure CN121283725B_ABST