Virtual machine access control system and method based on cloud computing environment

Abstract

The invention discloses a virtual machine access control system and method based on cloud computing environment. The method comprises the steps of judging whether a mounting protocol of a virtual machine conforms to a mounting protocol of a physical resource server or not; judging whether a resource pool required by a command sent by the external virtual machine exists in a storage pool or not; if the resource pool exists, opening and decrypting the resource pool inside the storage pool; if the resource pool does not exist, creating and encrypting the required resource pool; creating the required resource pool and a corresponding safety sign, judging whether the safety sign of the resource pool conforms to the matching principle or not, and when the safety sign of the resource pool conforms to the matching principle, judging whether the attribute of the safety sign of the resource pool needs to be modified or not; opening and decrypting the existing resource pool; when decryption succeeds, judging whether the safety sign of an access process of the external virtual machine is matched with the decrypted safety sign or not, and calling a result output module. According to the virtual machine access control system and method based on the cloud computing environment, a host machine and the virtual machine can be isolated from each other according to the matching rate of the signs, the resource pool encryption method and the mounting protocol of the storage server.

Description

technical field [0001] The invention relates to the field of virtual machine access control in the computer field, in particular to a virtual machine access control system and a control method based on a cloud computing environment. Background technique [0002] Cloud computing is the product of the integration of traditional computer and network technologies such as distributed computing, parallel computing, utility computing, network storage, virtualization, and load balancing. Computer processes running in a cloud-based virtual environment are isolated from other virtual machines running on the same physical hardware. Each virtual machine can actually be stored on a physical hard drive, shut down and carried away for continued isolation and security. [0003] However, in practice, the above safety measures still cannot avoid the existence of some safety hazards. Generally, virtual machines share hardware on the machine, such as CPU, memory, disk, and network devices; on...

AI Technical Summary

Problems solved by technology

In addition, if the attacker breaks through the virtual machine and obtains all the control rights of the virtual machine, or there are loopholes in the system management program (Hypervisor), there will be many security problems.

Images