CN109190420B - Server encryption and decryption blade, system and encryption and decryption method - Google Patents

Server encryption and decryption blade, system and encryption and decryption method Download PDF

Info

Publication number
CN109190420B
CN109190420B CN201811057785.0A CN201811057785A CN109190420B CN 109190420 B CN109190420 B CN 109190420B CN 201811057785 A CN201811057785 A CN 201811057785A CN 109190420 B CN109190420 B CN 109190420B
Authority
CN
China
Prior art keywords
decryption
encryption
blade
hardware
module
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201811057785.0A
Other languages
Chinese (zh)
Other versions
CN109190420A (en
Inventor
罗禹铭
罗禹城
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Wangyu Safety Technology Shenzhen Co ltd
Original Assignee
Wangyu Safety Technology Shenzhen Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Wangyu Safety Technology Shenzhen Co ltd filed Critical Wangyu Safety Technology Shenzhen Co ltd
Priority to CN201811057785.0A priority Critical patent/CN109190420B/en
Publication of CN109190420A publication Critical patent/CN109190420A/en
Application granted granted Critical
Publication of CN109190420B publication Critical patent/CN109190420B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/82Protecting input, output or interconnection devices
    • G06F21/85Protecting input, output or interconnection devices interconnection devices, e.g. bus-connected or in-line devices

Abstract

The invention discloses a server encryption and decryption blade, a system and an encryption and decryption method, wherein the encryption and decryption blade comprises the following components: the hardware encryption and decryption modules are used for encrypting and decrypting data; the PCIe Switch chip is connected with the hardware encryption and decryption modules; the hardware encryption and decryption module supports an I/O virtualization standard SR-IOV and is connected with the PCIe Switch chip through a PCIe slot; the hardware encryption and decryption module comprises encryption and decryption resources used for data encryption and decryption. The encryption and decryption blade can provide encryption and decryption resources with higher capacity, full cross connection among the X86 calculation blade, the encryption and decryption blade and internal modules of the encryption and decryption blade can be realized, one physical encryption and decryption function of each hardware encryption and decryption module can be virtualized into hundreds of logical encryption and decryption functions, and flexible scheduling and sharing of the encryption and decryption resources are greatly facilitated.

Description

Server encryption and decryption blade, system and encryption and decryption method
Technical Field
The invention relates to the technical field of data encryption and decryption, in particular to an encryption and decryption blade, a system and an encryption and decryption method for a server.
Background
Currently, a cloud computing server generally completes an encryption and decryption function required by an application through pure software or a hardware encryption and decryption accelerator card inserted into a PCIe slot of the server. In the prior art, encryption and decryption are realized by pure software, which is mainly realized by executing an X86 instruction, as shown in FIG. 1. The encryption and decryption instruction and the data are stored in the DDR, the X86 core runs a software instruction to complete encryption and decryption of the data in the DDR, and the result is also stored in the DDR. By using the enhancement technology provided by Intel and adopting pure software to realize encryption and decryption, the encryption and decryption requirements with lower capacity can be met.
However, if the encryption and decryption traffic is higher, the encryption and decryption need to be implemented by hardware, i.e., using a hardware encryption and decryption accelerator card, as shown in fig. 1. However, this structure has the following problems: 1. although the parallelism of data processing is improved by Intel through technologies such as SIMD, hyper-threading, out-of-order execution, special instruction set extension and the like, the parallelism of finally obtained data processing is not high due to the nature of serial execution of software instructions, so that the encryption and decryption are realized with low efficiency. 2. Due to the fact that design methods such as operation component sharing, Cache sharing, branch prediction, hyper-threading and the like are adopted in a great number of micro-architecture designs, a great number of side channels with information leakage exist in a CPU and a whole processor system. In the cloud computing environment, multiple virtual machines share one set of physical execution resources, so that the utilization rate of computing resources is improved, and meanwhile, the encryption and decryption which are used as basic information security guarantees also face extremely serious security problems because side channel attacks cannot be avoided. 3. The PCIe expansion card needs to be inserted into a PCIe slot of the server, and can only be used by an application program on the server, and cannot be shared by multiple servers or blades, which is inconvenient for the cloud computing environment to flexibly schedule encryption and decryption resources.
Accordingly, the prior art is yet to be improved and developed.
Disclosure of Invention
The technical problem to be solved by the present invention is to provide a server encryption/decryption blade, a server encryption/decryption system, and an encryption/decryption method, aiming at solving the problems that the encryption/decryption blade in the prior art has low efficiency and faces security problems, and a hardware encryption/decryption accelerator card is inconvenient to expand and does not support sharing.
The technical scheme adopted by the invention for solving the technical problem is as follows:
a server encryption/decryption blade, wherein the encryption/decryption blade comprises: the hardware encryption and decryption modules are used for encrypting and decrypting data; the PCIe Switch chip is connected with the hardware encryption and decryption modules;
the hardware encryption and decryption module supports single-root I/O virtualization of an I/O virtualization standard and is connected with the PCIe Switch chip through a PCIe slot;
the hardware encryption and decryption module comprises encryption and decryption resources used for data encryption and decryption.
Preferably, the server encryption/decryption blade, wherein the PCIe Switch chip supports multi-root I/O virtualization of an I/O virtualization standard.
Preferably, the server encryption and decryption blade further includes a monitoring management module, and the monitoring management module is connected to the plurality of hardware encryption and decryption modules and is configured to monitor a module power supply and a module running state in the encryption and decryption blade.
Preferably, the server encrypts and decrypts the blade, wherein the blade supports hot plug.
A server encryption and decryption system, wherein the server encryption and decryption system comprises: encrypting and decrypting the blade; the blade server back plate is connected with the encryption and decryption blade through a PCIe slot; a number of X86 compute blades connected with the blade server backplane through PCIe slots.
Preferably, the server encryption and decryption system, wherein the encryption and decryption blade includes: the hardware encryption and decryption modules are used for encrypting and decrypting data; the PCIe Switch chip is connected with the hardware encryption and decryption modules; the monitoring management module is connected with the hardware encryption and decryption modules; the monitoring management module is used for monitoring a module power supply and a module running state in the encryption and decryption blade;
the hardware encryption and decryption module supports single-root I/O virtualization of an I/O virtualization standard and is connected with the PCIe Switch chip through a PCIe slot; the hardware encryption and decryption module comprises encryption and decryption resources for data encryption and decryption;
the PCIe Switch chip supports multi-root I/O virtualization of an I/O virtualization standard and is connected with the blade server backplane through a PCIe slot.
Preferably, the server encryption and decryption system, wherein the encryption and decryption blade supports hot plug.
A server encryption and decryption method, wherein the encryption and decryption method comprises:
step A, inserting an encryption and decryption blade configured with a plurality of hardware encryption and decryption modules into a server;
b, controlling a monitoring management module of the encryption and decryption blade to acquire the total capacity and specification of encryption and decryption resources on the encryption and decryption blade, and reporting to a cloud operating system through a server;
step C, the cloud operating system carries out unified scheduling according to requirements, schedules the virtual machine to a server inserted with an encryption and decryption blade, configures a blade server back plate and a PCIe Switch chip on the encryption and decryption blade, and obtains encryption and decryption resources on the encryption and decryption blade;
and step D, controlling the virtual machine to run, carrying out encryption and decryption operation through the encryption and decryption resources obtained from the encryption and decryption blade, and releasing the encryption and decryption resources after the encryption and decryption operation is finished.
Preferably, the server encryption and decryption method further includes:
the cloud operating system also allocates a plurality of X86 computing blades in the virtual machine to a few hardware encryption and decryption modules in a centralized manner, and closes the power supply of the idle hardware encryption and decryption modules;
when the encryption and decryption tasks are increased, the power of the idle hardware encryption and decryption module is turned on, and the X86 computing blade is deployed in real time.
Preferably, the server encryption and decryption method further includes:
the cloud operating system also adjusts the processing clock frequency of the single hardware encryption and decryption module in real time according to the load.
The invention has the beneficial effects that: according to the encryption and decryption blade, a plurality of hardware encryption and decryption modules are stacked, and all the hardware encryption and decryption modules are connected with the PCIe Switch chip, so that encryption and decryption resources with higher capacity can be provided; and the PCIeSlwitch chip supports I/O virtualization standard MR-IOV, can realize the full cross connection between the X86 calculation blade and the encryption and decryption blade and the internal modules thereof, and can virtualize one physical encryption and decryption function of each hardware encryption and decryption module into hundreds of logical encryption and decryption functions, thereby greatly facilitating the flexible scheduling and sharing of encryption and decryption resources.
Drawings
Fig. 1 is a schematic diagram of a prior art structure for implementing encryption and decryption by using a software and hardware encryption and decryption accelerator card.
Fig. 2 is a schematic structural diagram of a preferred embodiment of the server encryption and decryption system of the present invention.
Fig. 3 is a schematic structural diagram of an embodiment of the server encryption and decryption system according to the present invention.
Fig. 4 is a flowchart illustrating a server encryption/decryption method according to a preferred embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention clearer and clearer, the present invention is further described in detail below with reference to the accompanying drawings and examples. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.
In order to solve the problems in the prior art when encryption and decryption are realized through a software and hardware encryption and decryption accelerator card, the invention provides the server encryption and decryption blade. As can be seen from fig. 2, the encryption and decryption blade in fig. 2 includes: the hardware encryption and decryption modules are used for encrypting and decrypting data; and the PCIe Switch chip is connected with the hardware encryption and decryption modules.
In particular, due to the space limitation in a general server, the PCIe slots are limited, and 1 to 2 PCIe hardware encryption and decryption acceleration cards are inserted at most. In order to provide higher-capacity encryption and decryption services, a plurality of hardware encryption and decryption modules are stacked in the encryption and decryption blade. And a plurality of hardware encryption and decryption modules on the encryption and decryption blade are connected with the PCIeSchw chip through PCIe slots, can be completely increased and decreased according to needs, and have very good expandability.
In the present invention, the hardware encryption and decryption module supports a Single Root I/O Virtualization (Single I/O Virtualization) standard SR-IOV issued by PCI-SIG (PCI-Special Interest Group), and can virtualize one Physical encryption and decryption Function (PF) into hundreds of logical encryption and decryption functions (VF). The encryption and decryption resources are finely divided. The cloud operating system can very flexibly schedule such fine-grained encryption and decryption resources to the X86 computing blades in the server. And the hardware encryption and decryption module is connected with the PCIe Switch chip through a PCIe slot, and due to the high bandwidth and low delay of PCIe, the service provided by the encryption and decryption blade can be ensured.
In this embodiment, the PCIe Switch chip supports an I/O Virtualization standard MR-IOV (Multi-root I/O Virtualization), facilitating any X86 blade of the upstream port to share any encryption/decryption module accessing the downstream port.
Preferably, the encryption and decryption blade further comprises a monitoring management module, wherein the monitoring management module is connected with the hardware encryption and decryption modules and is used for monitoring module power supplies and module running states in the encryption and decryption blade. The encryption and decryption blade supports hot plug, and a PCIe card is additionally inserted without opening a computing blade in a server. The whole encryption and decryption blade is inserted into the server, and then the operation can be started immediately. When the encryption and decryption tasks are not carried out, the power of the whole encryption and decryption blade can be turned off, or the encryption and decryption blade can be directly pulled out, and the slot position is assigned to the X86 calculation blade.
Further, the present invention also provides a server encryption and decryption system having the above encryption and decryption blade, as shown in fig. 2. The encryption and decryption system comprises a blade server back plate which is connected with the encryption and decryption blade through a PCIe slot besides the encryption and decryption blade; a number of X86 compute blades connected with the blade server backplane through PCIe slots.
Specifically, the encryption/decryption blade includes: the hardware encryption and decryption modules are used for encrypting and decrypting data; the PCIe Switch chip is connected with the hardware encryption and decryption modules; the monitoring management module is connected with the hardware encryption and decryption modules; the monitoring management module is used for monitoring the module power supply and the module running state in the encryption and decryption blade. The hardware encryption and decryption module supports an I/O virtualization standard SR-IOV and is connected with the PCIeSwitch chip through a PCIe slot; the hardware encryption and decryption module comprises encryption and decryption resources for data encryption and decryption; the PCIe Switch chip supports an I/O virtualization standard MR-IOV and is connected with the blade server backplane through a PCIe slot.
In this embodiment, PCIe Switch chips supporting MR-I/OV are used between the multiple X86 compute blades and the multiple hardware encryption and decryption modules. One hardware encryption and decryption module can serve a plurality of X86 computing blades at the same time, and the encryption and decryption card can only be bound to a certain server where a mainboard is located, unlike a server card insertion mode in the prior art. In this embodiment, one X86 computing blade can also use multiple hardware encryption/decryption modules at the same time. And the X86 computing blades are fully connected with the hardware encryption and decryption modules in a cross way. The method can assemble a plurality of hardware encryption and decryption modules to provide high-capacity encryption and decryption services for a certain X86 computing blade; and a certain hardware encryption and decryption module can be distributed to a plurality of X86 calculation blades for shared use according to the fine granularity of virtual function segmentation.
In addition, when the encryption and decryption load is light, the cloud operating system can intensively schedule the encryption and decryption services required by the X86 computing blades to a few modules, and close the power supply of the idle hardware encryption and decryption modules, so that the power consumption of the whole encryption and decryption blade is reduced; when the encryption and decryption tasks become heavy, the power supply of the idle hardware encryption and decryption module in the encryption and decryption blade can be quickly turned on; the processing clock frequency of a single hardware encryption and decryption module can be adjusted according to the load, and the processing clock frequency is matched with the processing clock frequency, so that the power consumption of the hardware encryption and decryption module in operation is reduced.
The present invention provides an embodiment of a specific application, as shown in fig. 3. FIG. 3 is a schematic diagram of a server architecture holding 14 hot-pluggable blades. The server is configured with 12X 86 compute blades, 2 encryption and decryption blades, interconnected through a blade server backplane that supports a pci express chip. Each X86 compute blade has two X86 chips, scheduled by the cloud operating system, which can carry multiple virtual machines for sharing compute/storage/network resources on the blade.
Each encryption and decryption blade comprises a PCIe Switch chip supporting MR-IOV, four hardware encryption and decryption modules and a monitoring management module. The PCIe Switch chip on the encryption and decryption blade and the PCIeSwitch chip on the blade server backplane are configured by the cloud operating system according to a resource scheduling scheme, and logical connection is established between the multiple X86 computing blades and the multiple encryption and decryption blades. The encryption and decryption blade supports hot plug and supports full cross connection between the X86 blade and the encryption and decryption blade.
The hardware encryption and decryption module is provided with a PCIe interface, supports SR-IOV, virtualizes a single physical encryption and decryption resource into hundreds of logical encryption and decryption resources, and facilitates flexible scheduling of a cloud operating system. And the monitoring management module is used for providing auxiliary functions of reporting the resource capacity of the encryption and decryption blade, managing a module power supply, monitoring the running state of the module, carrying out power-on self-test on the encryption and decryption blade and the like.
Further, based on the above embodiments, the present invention further provides a server encryption and decryption method, as shown in fig. 4. The server encryption and decryption method comprises the following steps:
s100, inserting an encryption and decryption blade configured with a plurality of hardware encryption and decryption modules into a server;
s200, controlling a monitoring management module of the encryption and decryption blade to acquire the total capacity and specification of encryption and decryption resources on the encryption and decryption blade, and reporting to a cloud operating system through a server;
step S300, the cloud operating system carries out unified scheduling according to requirements (the requirements of the virtual machine on computing, storage, network and encryption and decryption resources), schedules the virtual machine to a server inserted with an encryption and decryption blade, configures a blade server back plate and a PCIe Switch chip on the encryption and decryption blade, and obtains the encryption and decryption resources on the encryption and decryption blade;
and S400, controlling the virtual machine to run, performing encryption and decryption operation through the encryption and decryption resources acquired by the encryption and decryption blade, and releasing the encryption and decryption resources after the encryption and decryption operation is completed.
Preferably, the step S300 further includes: the cloud operating system also allocates a plurality of X86 computing blades in the virtual machine to a few hardware encryption and decryption modules in a centralized manner, and closes the power supply of the idle hardware encryption and decryption modules; when the encryption and decryption tasks are increased, the power of the idle hardware encryption and decryption module is turned on, and the X86 computing blade is deployed in real time. In addition, the cloud operating system also adjusts the processing clock frequency of a single hardware encryption and decryption module in real time according to the load, and reduces the power consumption of the hardware encryption and decryption module in operation.
In summary, the present invention provides a server encryption/decryption blade, a server encryption/decryption system, and an encryption/decryption method, where the encryption/decryption blade includes: the hardware encryption and decryption modules are used for encrypting and decrypting data; the PCIe Switch chip is connected with the hardware encryption and decryption modules; the hardware encryption and decryption module supports an I/O virtualization standard SR-IOV and is connected with the PCIe Switch chip through a PCIe slot; the hardware encryption and decryption module comprises encryption and decryption resources used for data encryption and decryption.
According to the encryption and decryption blade, a plurality of hardware encryption and decryption modules are stacked, and all the hardware encryption and decryption modules are connected with the PCIe Switch chip, so that encryption and decryption resources with higher capacity can be provided; and the PCIe Switch chip supports I/O virtualization standard MR-IOV, can realize the full cross connection between the X86 computing blade and the encryption and decryption blade and the internal modules thereof, and one physical encryption and decryption function of each hardware encryption and decryption module can be virtualized into hundreds of logical encryption and decryption functions, thereby greatly facilitating the flexible scheduling and sharing of encryption and decryption resources.
It is to be understood that the invention is not limited to the examples described above, but that modifications and variations may be effected thereto by those of ordinary skill in the art in light of the foregoing description, and that all such modifications and variations are intended to be within the scope of the invention as defined by the appended claims.

Claims (5)

1. A server encryption/decryption blade, the encryption/decryption blade comprising: the hardware encryption and decryption modules are used for encrypting and decrypting data; the PCIe Switch chip is connected with the hardware encryption and decryption modules;
the hardware encryption and decryption module supports single-root I/O virtualization of an I/O virtualization standard and is connected with the PCIe Switch chip through a PCIe slot; the hardware encryption and decryption module is used for virtualizing a physical encryption function into a plurality of logical encryption and decryption functions, and one hardware encryption and decryption module serves a plurality of X86 computing blades simultaneously;
the hardware encryption and decryption module comprises encryption and decryption resources for data encryption and decryption;
the PCIe Switch chip supports multi-root I/O virtualization of an I/O virtualization standard;
the encryption and decryption blades also comprise monitoring management modules, and each encryption and decryption blade comprises one monitoring management module; the monitoring management module is connected with the hardware encryption and decryption modules and is used for monitoring module power supplies and module running states in the encryption and decryption blades;
the encryption and decryption blade is connected with the blade server back plate through a PCIe slot; the blade server backplane connects the X86 compute blade through the PCIe slot;
the X86 calculation blade is in full cross connection with the encryption and decryption blade and the hardware encryption and decryption module thereof;
the monitoring management module of the encryption and decryption blade acquires the total capacity and specification of encryption and decryption resources on the encryption and decryption blade and reports the total capacity and specification to the cloud operating system through the server; the cloud operating system carries out unified scheduling according to requirements, schedules the virtual machine to a server inserted with an encryption and decryption blade, configures a blade server back plate and a PCIe Switch chip on the encryption and decryption blade, and obtains encryption and decryption resources on the encryption and decryption blade; performing encryption and decryption operations through the encryption and decryption resources obtained from the encryption and decryption blade, and releasing the encryption and decryption resources after the encryption and decryption operations are completed;
the cloud operating system allocates a plurality of X86 computing blades to a few hardware encryption and decryption modules in a centralized manner, and closes the power supply of the idle hardware encryption and decryption modules; when the encryption and decryption tasks are increased, a power supply of an idle hardware encryption and decryption module is turned on, and the X86 calculation blade is allocated in real time; the cloud operating system also adjusts the processing clock frequency of the single hardware encryption and decryption module in real time according to the load.
2. The server encryption/decryption blade of claim 1, wherein the encryption/decryption blade supports hot-plugging.
3. A server encryption and decryption system, the server encryption and decryption system comprising: encrypting and decrypting the blade; the blade server back plate is connected with the encryption and decryption blade through a PCIe slot; a number of X86 compute blades connected with the blade server backplane through PCIe slots;
the encryption and decryption blade comprises: the hardware encryption and decryption modules are used for encrypting and decrypting data; the PCIe Switch chip is connected with the hardware encryption and decryption modules; the monitoring management module is connected with the hardware encryption and decryption modules; the monitoring management module is used for monitoring a module power supply and a module running state in the encryption and decryption blade;
the hardware encryption and decryption module supports single-root I/O virtualization of an I/O virtualization standard and is connected with the PCIeSwitch chip through a PCIe slot; the hardware encryption and decryption module is used for virtualizing a physical encryption function into a plurality of logical encryption and decryption functions, and one hardware encryption and decryption module serves a plurality of X86 computing blades simultaneously;
the hardware encryption and decryption module comprises encryption and decryption resources for data encryption and decryption;
the PCIe Switch chip supports multi-root I/O virtualization of an I/O virtualization standard and is connected with the blade server back plate through a PCIe slot;
the encryption and decryption blade is connected with the blade server back plate through a PCIe slot; the blade server backplane connects the X86 compute blade through the PCIe slot;
each encryption and decryption blade comprises a monitoring management module;
the X86 calculation blade is in full cross connection with the encryption and decryption blade and the hardware encryption and decryption module thereof;
the monitoring management module of the encryption and decryption blade acquires the total capacity and specification of encryption and decryption resources on the encryption and decryption blade and reports the total capacity and specification to the cloud operating system through the server; the cloud operating system carries out unified scheduling according to requirements, schedules the virtual machine to a server inserted with an encryption and decryption blade, configures a blade server back plate and a PCIe Switch chip on the encryption and decryption blade, and obtains encryption and decryption resources on the encryption and decryption blade; performing encryption and decryption operations through the encryption and decryption resources obtained from the encryption and decryption blade, and releasing the encryption and decryption resources after the encryption and decryption operations are completed;
the cloud operating system allocates a plurality of X86 computing blades to a few hardware encryption and decryption modules in a centralized manner, and closes the power supply of the idle hardware encryption and decryption modules; when the encryption and decryption tasks are increased, a power supply of an idle hardware encryption and decryption module is turned on, and the X86 calculation blade is allocated in real time; the cloud operating system also adjusts the processing clock frequency of the single hardware encryption and decryption module in real time according to the load.
4. The server encryption and decryption system of claim 3, wherein the encryption and decryption blade supports hot-plugging.
5. A server encryption and decryption method, characterized in that the encryption and decryption method comprises:
step A, inserting an encryption and decryption blade configured with a plurality of hardware encryption and decryption modules into a server;
b, controlling a monitoring management module of the encryption and decryption blade to acquire the total capacity and specification of encryption and decryption resources on the encryption and decryption blade, and reporting to a cloud operating system through a server;
step C, the cloud operating system carries out unified scheduling according to requirements, schedules the virtual machine to a server inserted with an encryption and decryption blade, configures a blade server back plate and a PCIe Switch chip on the encryption and decryption blade, and obtains encryption and decryption resources on the encryption and decryption blade;
step D, controlling the virtual machine to run, performing encryption and decryption operation through the encryption and decryption resources obtained from the encryption and decryption blade, and releasing the encryption and decryption resources after the encryption and decryption operation is completed;
the hardware encryption and decryption module is used for virtualizing a physical encryption function into a plurality of logical encryption and decryption functions, and one hardware encryption and decryption module serves a plurality of X86 computing blades simultaneously;
the encryption and decryption blade is connected with the blade server back plate through a PCIe slot; the blade server backplane connects the X86 compute blade through the PCIe slot;
each encryption and decryption blade comprises a monitoring management module;
the X86 calculation blade is in full cross connection with the encryption and decryption blade and the hardware encryption and decryption module thereof;
the cloud operating system also allocates a plurality of X86 computing blades in the virtual machine to a few hardware encryption and decryption modules in a centralized manner, and closes the power supply of the idle hardware encryption and decryption modules;
when the encryption and decryption tasks are increased, a power supply of an idle hardware encryption and decryption module is turned on, and the X86 calculation blade is allocated in real time;
the cloud operating system also adjusts the processing clock frequency of the single hardware encryption and decryption module in real time according to the load.
CN201811057785.0A 2018-09-11 2018-09-11 Server encryption and decryption blade, system and encryption and decryption method Active CN109190420B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201811057785.0A CN109190420B (en) 2018-09-11 2018-09-11 Server encryption and decryption blade, system and encryption and decryption method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201811057785.0A CN109190420B (en) 2018-09-11 2018-09-11 Server encryption and decryption blade, system and encryption and decryption method

Publications (2)

Publication Number Publication Date
CN109190420A CN109190420A (en) 2019-01-11
CN109190420B true CN109190420B (en) 2020-08-25

Family

ID=64910203

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201811057785.0A Active CN109190420B (en) 2018-09-11 2018-09-11 Server encryption and decryption blade, system and encryption and decryption method

Country Status (1)

Country Link
CN (1) CN109190420B (en)

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109960943A (en) * 2019-04-02 2019-07-02 山东渔翁信息技术股份有限公司 A kind of encryption device
CN109934020A (en) * 2019-04-02 2019-06-25 山东渔翁信息技术股份有限公司 A kind of encryption device
CN110866262A (en) * 2019-11-05 2020-03-06 郑州信大捷安信息技术股份有限公司 Asynchronous encryption and decryption system and method with cooperative work of software and hardware
CN111083425B (en) * 2019-11-25 2022-12-23 视联动力信息技术股份有限公司 Video stream processing method, device, server, electronic equipment and storage medium
CN114662162B (en) * 2022-05-25 2022-09-20 广州万协通信息技术有限公司 Multi-algorithm-core high-performance SR-IOV encryption and decryption system and method for realizing dynamic VF distribution

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104038444A (en) * 2013-03-05 2014-09-10 中国移动通信集团山西有限公司 Resource allocation method, equipment and system

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN2563638Y (en) * 2002-06-10 2003-07-30 王仲凯 Ciphered knife sheet server main board based on safety certificate
JPWO2010084529A1 (en) * 2009-01-23 2012-07-12 株式会社日立製作所 Information processing system
CN102063165A (en) * 2010-12-10 2011-05-18 曙光信息产业(北京)有限公司 IO (Input/Output) extending module of blade server, blade provided with same and server
CN102722414B (en) * 2012-05-22 2014-04-02 中国科学院计算技术研究所 Input/output (I/O) resource management method for multi-root I/O virtualization sharing system
US9304799B2 (en) * 2013-12-27 2016-04-05 International Business Machines Corporation Placement of input / output adapter cards in a server
CN108363461A (en) * 2018-01-03 2018-08-03 郑州云海信息技术有限公司 A method of it carrying out blade server IO using non-transparent bridge and shares and extend

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104038444A (en) * 2013-03-05 2014-09-10 中国移动通信集团山西有限公司 Resource allocation method, equipment and system

Also Published As

Publication number Publication date
CN109190420A (en) 2019-01-11

Similar Documents

Publication Publication Date Title
CN109190420B (en) Server encryption and decryption blade, system and encryption and decryption method
US9606838B2 (en) Dynamically configurable hardware queues for dispatching jobs to a plurality of hardware acceleration engines
Fahmy et al. Virtualized FPGA accelerators for efficient cloud computing
AU2014311463B2 (en) Virtual machine monitor configured to support latency sensitive virtual machines
US9135126B2 (en) Multi-core re-initialization failure control system
EP2908252B1 (en) Inter-core communication apparatus and method
US8484495B2 (en) Power management in a multi-processor computer system
US9804874B2 (en) Consolidation of idle virtual machines on idle logical processors
US20110296411A1 (en) Kernel Bus System to Build Virtual Machine Monitor and the Performance Service Framework and Method Therefor
US9990139B2 (en) Scalable and area optimized method to implement command queues in SRIOV based NVM devices
US20150169350A1 (en) Closed-Loop Feedback Mechanism for Achieving Optimum Performance in a Consolidated Workload Environment
CN104714846A (en) Resource processing method, operating system and equipment
US11734067B2 (en) Multi-core system and controlling operation of the same
CN106789337B (en) Network performance optimization method of KVM
US20210055958A1 (en) Technology For Dynamically Grouping Threads For Energy Efficiency
US20160117193A1 (en) Resource mapping in multi-threaded central processor units
Zeng et al. Raccoon: A novel network i/o allocation framework for workload-aware vm scheduling in virtual environments
US20140237017A1 (en) Extending distributed computing systems to legacy programs
US8447912B2 (en) Paging memory from random access memory to backing storage in a parallel computer
CN113568734A (en) Virtualization method and system based on multi-core processor, multi-core processor and electronic equipment
CN109302386B (en) Server compression and decompression blade, system and compression and decompression method
CN112673348A (en) Hybrid virtual GPU cooperative scheduling
US20180341614A1 (en) System and Method for I/O Aware Processor Configuration
US20210004276A1 (en) Application negotiable resource director technology for efficient platform resource management
US20110153901A1 (en) Virtual usb key for blade server

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant