CN103235905A

CN103235905A - DUDP real-time data protection method

Info

Publication number: CN103235905A
Application number: CN2013101510026A
Authority: CN
Inventors: 杜佳; 唐偕文; 王嘉琨; 何然; 匡扶; 苟良明; 王艺浩; 张登荣; 蒙小鹏
Original assignee: CHENGDU FAKE-PRODUCT DISAPPERANCE TECHNOLOGY Co Ltd
Current assignee: CHENGDU FAKE-PRODUCT DISAPPERANCE TECHNOLOGY Co Ltd
Priority date: 2013-04-27
Filing date: 2013-04-27
Publication date: 2013-08-07

Abstract

The invention relates to a DUDP real-time data protection method. By the aid of kernel virtual driving and cloud computing, a virtual file system is mounted on a computer, data are transmitted to a cloud end, data storage safety is ensured for a user, the data are protected in real time, the important data of the user are stored at the cloud end, and version management and disaster recovery of the important data are realized.

Description

The guard method of DUDP real time data

Technical field

The present invention relates to data protection, cloud computing field, particularly design data protection Kernel Technology.

Background technology

The computer user adopts usually data and directly uses symmetric cryptographic algorithm at present, to file encryption and disc driver encipherment protection and transparent encryption.These data protection means all are to be encrypted as the basis; their common feature is that speed is fast; with strong points; and information storage is flexible; but shortcoming is the file that is protected still might be stolen; by the dictionary means certain probability Brute Force is arranged, and under the situation of system crash and disk failure, cause loss of data.

Summary of the invention

Purpose of the present invention solves the storage of subscriber data safety problem exactly, and data are carried out real-time guard, and user's significant data is carried out the high in the clouds storage, and version management and disaster recovery.

The specific implementation method: a kind of data guard method of computing machine, it is characterized in that computer data is carried out real-time guard and has data version management and the high in the clouds disaster recovery capability, may further comprise the steps:

A loads inner nuclear layer and drives on subscriber computer, carry virtual unit system module is on the subscriber computer physical equipment, make all disk operating of user be caught by virtual unit, the process that only has lawful authority simultaneously can have access to the file of virtual unit.

B virtual unit system module does not use subscriber computer physical hard disk space, but directly the read-write requests of application program is sent to high in the clouds.

C high in the clouds is after the request that writes that receives subscriber computer, be optimized according to user place network node, it converts the request of data of server this locality of the nearest node of user to, write the physical storage medium of server again, read according to user's request of reading simultaneously, read respective data transfer reuse family local computer.

The D subscriber computer is under the situation that network interrupts, and file can temporarily write local physical storage medium, carries out real-time guard according to the process feature of current accessed file, it is characterized by the SHA1 cryptographic hash.

2, a kind of DUDP data guard method according to claim 1; it is characterized in that; in the described steps A: the process of user file and access file is protected; have only the data of the correct legal process of effect cryptographic hash in can accesses virtual equipment, and concrete bottom operation is sightless for consumer process.

3, a kind of DUDP data guard method according to claim 1; it is characterized in that; among the described step B: in the digitizing environment, virtual system uses network that the data that will write local disk in the internal memory and program are read data in real time, imports high in the clouds in real time into.

4, a kind of DUDP data guard method according to claim 1; it is characterized in that; among the described step C: distributed structure/architecture is adopted in high in the clouds; user machine system can be connected to fastest network node automatically; its disk writes actual the writing that request is converted into the server physical storage medium automatically, and writes according to time sequencing.Under the needs situation, retrace automatically, disaster recovery are to some states before.High in the clouds at one's leisure between can according to the user often the network node of visit carry out data-optimizedly, guarantee that all the time user's reading speed reaches best.

5, a kind of DUDP data guard method according to claim 1; it is characterized in that; among the described step D: subscriber computer is when running into long-time or accidental network interruption; for the continuity that guarantees that subscriber computer uses; data can be by temporary in the physical hard disk space of subscriber computer, and in the legitimacy of the strict checking data visit of inner nuclear layer process, implements protection and the process that prevents is injected; in case network connection is recovered, data are understood automatically and carry out synchronously in high in the clouds.

Beneficial effect of the present invention is:

Significant data leaves high in the clouds in, even subscriber computer is stolen or hacker attacks, all is difficult to steal data, gives the user real-time guard.

Description of drawings

Fig. 1 is DUDP real time data guard method synoptic diagram.A is high in the clouds comprehensive server cluster among the figure, and B is the storage server cluster, and C is subscriber computer among the figure, and D opens file for the user is current among the figure, and E is the virtual unit system module among the figure, and F is the subscriber computer storage medium.

Embodiment

Embodiment one: comprise following step:

A. build the cloud service platform.

B. subscriber computer carry virtual unit system module.

C. virtual device modules and cloud service platform are mutual.

In the present embodiment, steps A uses the server with independent IP as master server (as the A of Fig. 1), many platform independent IP department server is deployed on the each department network node, simultaneously every station server all the deployment-specific data storage server ((as the B of Fig. 1), the service-strong Transmission Control Protocol communicates between the server.

In the present embodiment, step B uses the virtual file Driving technique, catches All Files and writes read operation, and therefrom carry out data screening (as the E of Fig. 1).Screening rule is: the process of having only filename and SHA1 cryptographic hash all to meet is hunted down, and the request of all-access file is converted into network packet, is transferred to (as the A of Fig. 1) cloud service platform.

In the present embodiment, among the step C, the Cloud Server platform receives after the packet that operation is handled and filed to All Files, and its principle is: 1. create new file operation meeting server retain unique file ID sign as: 0x00000001 writes corresponding data simultaneously and reads corresponding data.2 when change takes place in file, can create new file again, and the file ID before storing, and so just version is before arrived in retrace arbitrarily.

Claims

1. the data guard method of a computing machine is characterized in that computer data is carried out real-time guard and has data version management and the high in the clouds disaster recovery capability, may further comprise the steps:

A loads inner nuclear layer and drives on subscriber computer, carry virtual unit system module is on the subscriber computer physical equipment, make all disk behaviour of user be caught by virtual unit earlier, the process that only has lawful authority simultaneously can have access to the file of virtual unit.

2. a kind of DUDP data guard method according to claim 1; it is characterized in that; in the described steps A: the process of user file and access file is protected; have only the data of the correct legal process of effect cryptographic hash in can accesses virtual equipment, and concrete bottom operation is sightless for consumer process.

3. a kind of DUDP data guard method according to claim 1; it is characterized in that; among the described step B: in the digitizing environment, virtual system uses network that the data that will write local disk in the internal memory and program are read data in real time, imports high in the clouds in real time into.

4. a kind of DUDP data guard method according to claim 1; it is characterized in that; among the described step C: distributed structure/architecture is adopted in high in the clouds; user machine system can be connected to fastest network node automatically; its disk writes actual the writing that request is converted into the server physical storage medium automatically, and writes according to time sequencing.Under the needs situation, retrace automatically, disaster recovery are to some states before.High in the clouds at one's leisure between can according to the user often the network node of visit carry out data-optimizedly, guarantee that all the time user's reading speed reaches best.

5. a kind of DUDP data guard method according to claim 1; it is characterized in that; among the described step D: subscriber computer is when running into long-time or accidental network interruption; for the continuity that guarantees that subscriber computer uses; data can be by temporary in the physical hard disk space of subscriber computer, and in the legitimacy of the strict checking data visit of inner nuclear layer process, implements protection and the process that prevents is injected; in case network connection is recovered, data are understood automatically and carry out synchronously in high in the clouds.