User mode encryption and decryption file system unloading system and method supporting in-line mode and medium

By integrating encryption and decryption modules into the FPGA and combining them with a custom protocol, deep integration of encryption/decryption and I/O paths is achieved. This solves the problems of data copying loss and performance bottlenecks in user-space file system offloading schemes, improves system throughput and data security, and is suitable for high-performance, high-security trusted data spaces and data center scenarios.

CN121996436AActive Publication Date: 2026-05-08TIANFU JIANGXI LAB
1 Cites 0 Cited by

Patent Information

Application Number
CN202610468435.1
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2026-04-10
Publication Date
2026-05-08
Estimated Expiration
2046-04-10

AI Technical Summary

Technical Problem

Existing user-space file system unloading schemes suffer from multiple data copying losses and performance bottlenecks caused by the separation of IO paths and encryption/decryption, failing to balance low latency, high throughput, and data security.

Method used

By integrating encryption and decryption modules into a Field Programmable Gate Array (FPGA), and combining host-side driver optimization with a custom data interaction protocol, encryption and decryption operations are deeply integrated with the I/O critical path. This eliminates the copying loss of data between the operating system and the side engine, and enables synchronous execution of encryption and decryption operations and data transmission.

Benefits of technology

It improves the overall throughput and data processing efficiency of the system, ensures data security, is compatible with existing applications and storage systems, has good scalability and stability, and reduces user migration costs.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The invention discloses a user mode encryption and decryption file system unloading system and method supporting an in-line mode and a medium, and relates to the technical field of data processing and storage. The system comprises a host end, an FPGA hardware module and a TIPU end. The host end is configured with an fs-Client driving module, intercepts a file operation request, packages the file operation request into an encryption request or a direct connection request according to a user-defined protocol, and sends the encryption request or the direct connection request to the FPGA hardware module; the FPGA hardware module integrates a data packet analysis and encryption and decryption module, extracts encryption and decryption parameters according to a direct connection request and performs in-line type real-time encryption and decryption on file data; and the TIPU end receives the processed data or the unvarnished transmission request through an SPDK framework and an fs-Server service module running in a user mode, manages the encrypted meta information and interacts with the rear-end storage to complete reading and writing. According to the method, deep fusion of encryption and decryption and an IO path is realized, loss caused by repeated copying of data is eliminated, the computing power of a host CPU is released, and the throughput and data security of the system are remarkably improved.
Need to check novelty before this filing date? Find Prior Art