A low-coupling general data encryption and decryption method and system

Abstract

The invention discloses a low-coupling general data encryption and decryption method and system. The invention mounts the pre-deployed underlying storage system through the data encryption and decryption client in advance and mounts the data encryption card as the data encryption and decryption server, blocking waiting users Read and write requests, if a write request from the user is received, the write request will be decomposed into data segments of a specified size and aligned, and then the data segments will be sent to the encryption and decryption server one by one, and the encryption and decryption server will encrypt the data segments Write to the underlying storage system; if a read request from the user is received, read the cached plaintext data or decrypt the encrypted data from the underlying storage system and return. The present invention can adapt to different underlying storage systems, has the advantages of low coupling architecture, high performance, high reliability, and good versatility, can maximize system availability, reduce encryption and decryption data delay, and meet high reliability requirements.

Description

technical field [0001] The invention relates to data storage security technology, in particular to a low-coupling general data encryption and decryption method and system. Background technique [0002] Data is the core asset in the storage system, and its security is of paramount importance. The initial storage system is a local direct connection method, and data security can be achieved through external network isolation. Nowadays, with the development of network storage and distributed storage, data is shared by many machines on the network, so it is more vulnerable to attacks. Fundamentally speaking, the safe storage of data is mainly to ensure that the data is complete, reliable and not leaked. [0003] At this stage, there are many commercial or open-source underlying storage systems, and most of these storage systems access the underlying data through plain text, which inevitably poses security risks. At the same time, due to the tightly coupled structure of some sto...

AI Technical Summary

Problems solved by technology

[0003] At this stage, there are many commercial or open source underlying storage systems. Most of these storage systems access the underlying data through plain text, which will inevitably pose security risks.

At the same time, due to the tightly coupled structure of some storage systems, that is, the internal modules of the storage system are closely related, and the dependencies between modules are strong; if developers need to insert encryption and decryption modules into these storage systems, it will take a long time to understand The system is decoupled, and the encryption and decryption modules inserted at the same time can easily make the system more fragile and more likely to crash, which undoubtedly increases the difficulty of technology development and prolongs the development cycle of the technology; for some storage systems with built-in encryption and decryption modules, the system There is no external encryption and decryption interface, and encryption and decryption can only be performed using CPU resources. Due to factors such as encryption and decryption calculation-intensive features and weak CPU concurrency performance, the performance of encryption and decryption is low, and the CPU resources occupied by encryption and decryption are large, resulting in users poor experience

Images