Virtualized cloud password service system based on channel isolation and implementation method thereof

Abstract

The invention discloses a virtualized cloud password service system based on channel isolation and an implementation method thereof, and belongs to the field of password engineering. The system is used for solving the problem of use of common password equipment in a cloud computing environment. The system is characterized in that the DMA of the PCI-E physical password card is isolated into a plurality of independent channels, and each channel corresponds to one character device of a driving layer and is configured to a virtual cipher machine through a Linux device mounting technology. And the virtual cipher machine calls the cipher card through the character device to realize key access and cipher calculation, and provides a safely isolated cipher operation service for the tenant. The physical password card is virtualized on the basis of channel isolation, the password resources are pooled, the password resources are used more efficiently, an administrator can manage the password resources more easily, meanwhile, secret key safety isolation of tenants is guaranteed through an isolation mechanism with multiple measures simultaneously, and therefore it is guaranteed that password service calling obtains the highest safety.

Description

technical field [0001] The invention relates to the field of cryptographic engineering, in particular to a virtualized cloud cryptographic service system based on channel isolation and an implementation method thereof. Background technique [0002] With the development of cloud computing technology, more and more traditional applications are migrating to the cloud. Utilize the unique high reliability and high scalability of the cloud computing environment to realize centralized data management and efficient utilization of hardware resources. [0003] Traditional applications rely on cryptographic machines and other hardware devices to ensure the information security of applications. However, there are many problems in using common cryptographic devices in cloud computing environments. For example, the use of common cryptographic devices does not conform to the cloud environment, the security of tenant isolation cannot be ensured, and equipment operation and maintenance are d...

AI Technical Summary

Problems solved by technology

[0003] Traditional applications rely on cryptographic machines and other hardware devices to ensure the information security of applications. However, there are many problems in using common cryptographic devices in cloud computing environments. For example, the use of common cryptographic devices does not conform to the cloud environment, the security of tenant isolation cannot be ensured, and equipment operation and maintenance are difficult. Wait

Images