A storage volume data encryption method and system in a K8s cloud-native environment

Abstract

The application relates to the technical field of data encryption, and provides a K8s cloud native environment storage volume data encryption method and system, which comprises the following steps: driving a storage volume interaction module on a processing unit to store an updated encapsulation key and updated data operation key encapsulation ciphertext after the updated encapsulation key and the updated data operation key encapsulation ciphertext are received, and meanwhile, historical version encapsulation keys and corresponding data operation key encapsulation ciphertexts are reserved; when an application component requests to access a storage volume, a corresponding data operation key is obtained according to a currently available encapsulation key in a storage library; the storage volume interaction module is driven to use the obtained data operation key to perform encryption and decryption operations on data in the storage volume, and during the switching process of the encapsulation key and the data operation key encapsulation ciphertext, the continuous access of the application component to the storage volume is maintained. The application has the effects of improving the flexibility and security of data encryption.

Images