Kernel-level virtual polymerization and parallel encryption method for class-oriented Linux system

Abstract

The invention discloses a kernel-level virtual polymerization and parallel encryption method for a class-oriented Linux system, and solves the technical problem of implementing parallel encryption of files by a Linux kernel drive encryption card. According to the technical scheme, an original key management module and an original data encrypting-decrypting module in an eCryptfs (enterprise cryptographic filesystem) are modified, and a virtual polymerization module is designed and implemented; in the virtual polymerization module, a key port mapping table is responsible for storing key port states of all encryption cards, a task scheduling module dispatches the encryption modules and key ports, and a key loading module imports keys to the key ports; the modified key management module and the modified data encrypting-decrypting module call programming ports of the encryption cards by the encryption cards and key ports dispatched by the virtual polymerization module, and encryption and decryption of the parallel files is completed. Through the method, the files can be encrypted and decrypted by multiple encryption cards on any class-oriented Linux computers supporting the eCryptfs, operational pressure of a system CPU (computer processing unit) is relieved, and encrypting speed and safety are improved.

Description

technical field [0001] The invention relates to the technical field of data security, in particular to a kernel-level virtual aggregation parallel encryption method oriented to a Linux-like system. Background technique [0002] With the rapid development of computer technology and the Internet, data leakage incidents occur frequently, and the issue of data security and confidentiality is increasingly valued by people. Encryption technology is a very powerful way to ensure data security. By encrypting and protecting user data files, it can effectively prevent illegal intruders from stealing users' confidential data files. [0003] Encryption technology can be divided into software-based encryption and hardware-based encryption according to the implementation method: hardware encryption usually uses encryption devices such as hardware encryption cards, such as the SJY17 PCI encryption card developed by Chengdu Tianrongxin, and the SJY115 series encryption of Sichuan Weishitong...

AI Technical Summary

Problems solved by technology

The master's thesis "Fault-tolerant Real-time Parallel Scheduling System of Multi-Encryption Cards on Linux" in the academic collection of the University of Electronic Science and Technology of China proposed an encryption method for network data transmission, but this method cannot be applied to file encryption

There is no published literature related to technical research in this area

Images