Method and System for Improving the Data Security of Cloud Computing

摘要

A method and system for improving the data security of cloud computing comprising: users establishing an index information table for physical LUN devices available to cloud computing service instances, and setting mapping rules of virtual LBA address space for virtual LUN devices and physical LBA address space for data storage according to the index information table; according to the mapping rules, users establishing and saving a mapping relationship between virtual LBA address space and physical LBA address space for data storage; according to the mapping relationship, acquiring storage position information of actual data mapping to the virtual LBA address space pointed by read/write requests, and completing I/O redirection. The system includes an establishment module, setting module, establishment and saving module, and redirection module. The invention enables data owners to master metadata generation method, preservation method and position, and LUN devices of user data not to be illegally mounted, thus guaranteeing security of user data.

主权项

1. A method for improving data security of cloud computing comprising:
users establishing an index information table for physical LUN devices available to cloud computing service instances; users establishing a virtual LUN device, and according to the index information table, setting mapping rules of virtual LBA address space for the virtual LUN device and LBA address space for actual data storage; according to the mapping rules, users establishing and saving the mapping relationship between virtual LBA address space for data access to virtual LUN devices and LBA address space for actual data storage in a specified cloud computing data center; and according to the mapping relationship, acquiring the storage position information of actual data mapping to the virtual LBA address space pointed by external data read/write requests, and completing I/O redirection.