Distributed Trusted Memory Exchange Method and System

Abstract

The invention relates to a distributed trusted memory exchange method and system. It solves the problems of unreasonable design of the prior art and the like. The method includes the following steps: the data exchange requesting party at the sending end sends a data request and performs trusted authentication, the data exchange server at the sending end and / or the receiving end respectively adopts the remote direct memory access (RDMA) method to read data from the database file server, and the data exchange at the sending end The remote direct memory access (RDMA) method is used for data exchange between the server and the data exchange server at the receiving end. The advantage is that the FAENIC card is organically combined with cluster and distributed data file servers, exchange servers, and trusted authentication registration management servers to form a distributed trusted memory exchange system. It takes full advantage of the high-speed, high-efficiency, and encrypted features of the FAENIC card, incorporates trusted authentication mechanisms and audit interfaces, increases the security of data exchange access, and combines the advantages of clustering and distribution.

Description

Technical field [0001] The present invention belongs to the technical field of network equipment, and more particularly to a distributed trusted memory switching method and system. Background technique [0002] With the improvement of the overall informationization of the state and the comprehensive advancement of e-government construction, the demand for information sharing in society and government departments is increasing. In order to protect the security of all units, departmental associated business interconnection, information resource sharing, the data exchange system has been widely applied in enterprises and institutions such as e-government. The data exchange system is mainly composed of servers on both sides of the data exchange, providing a secure exchange based on a database and file. The main functions are: 1. Safety certification, support registration certification for devices within the network, and refuse access requests for non-registered devices. 2. Support th...

AI Technical Summary

Problems solved by technology

[0005] The above-mentioned Ethernet data exchange system has the following disadvantages: 1. The conversion efficiency of the file format is low, and there is a phenomenon of multiple conversions

2. There are multiple uplink and downlink switching and memory copy operations in one data exchange. When the network traffic is high, the above shortcomings will be more obvious, because the more packets that need to be processed per unit time, the server system will be brought Extremely high CPU load, and reduce the processing speed of other tasks and the efficiency of data exchange and transmission

Similarly, if the server has many applications, it will consume a lot of CPU resources, which will reduce the processing speed of the server and restrict the efficiency of data exchange.

3. The development of complex network protocols is difficult, and the technology involves a wide range of areas, prolonging the product development cycle, and it is relatively more difficult to guarantee product functions, performance, and stability

4. The adjustment of the exchange format will lead to the redevelopment of the data exchange server application

This traditional authentication method has many security risks, and information is easily leaked

However, the identity authentication mechanism using the PKI / CA certificate system needs to apply for a certificate in advance. This is a cumbersome application process and complicated use for users, and it is difficult for application providers to develop, deploy, and promote.

Images