KR102436673B1 - Backup encryption system for files and folders in a virtual environment built on the basis of cloud infrastructure - Google Patents

Abstract

The present invention relates to a backup encryption system for files and folders in a virtual environment built on the basis of a cloud infrastructure. To improve the complementarity of backup files, a backup encryption system for files and folders in a virtual environment built on the basis of a cloud infrastructure according to an embodiment of the present invention includes: a cloud server that creates a cluster and virtual machine (VM) in one or more hypervisors with different image format methods to provide a virtual environment according to a user's choice; and an operation server that encrypts folders and files stored in the VM and backs up the encrypted folders and files. The operation server includes: a management module that manages the operation account of the operation server and the account of the user using the VM, and encrypts the folder and file specified in the VM; and a backup module for creating a storage folder necessary for backing up to the database built in the operation server based on the folder and file information encrypted by the management module. The management module includes: an operation account unit which includes a master code unit configured to set and manage encryption codes to be assigned to the cloud server, and manages an administrator account for managing the operation server; a user management unit including a subcode unit for setting and managing encryption codes to be assigned to folders and files stored in the VM, and managing user accounts using the VM; and a final code unit for generating a final encryption code by combining an encryption code set in the master code unit and an encryption code set in the subcode unit, and assigning the generated final encryption code to files and folders to be backed up in the VM.

Description

Backup encryption system for files and folders in a virtual environment built on the basis of cloud infrastructure}

The present invention relates to a backup encryption system for files and folders in a virtual environment built on the basis of cloud infrastructure. It relates to a backup encryption system for files and folders in a virtual environment built based on cloud infrastructure to improve the complementarity of backup folders and files stored in a database.

Cloud service is a service that provides IT resources as a service using Internet technology. It is a service that borrows and uses IT resources as much as necessary, can expand and contract in real time according to the service load, and pay only for the amount used.

Specifically, cloud service can be defined as an on-demand outsourcing service of computing resources through information and communication networks such as the Internet. will provide the services they need.

In this case, the user does not directly install and use the necessary resources such as the operating system, storage, application, and security on the user's own terminal, but a virtual space created through virtualization technology. Since the guest machine on the virtual space (this is the concept of a logical device in the virtual space, which can be understood as a kind of virtual machine including the operating system and security) is selected and used at the desired time, the user can reduce the purchase cost of each computing resource. It is economical because it pays based on usage rather than payment.

In addition, users can access the cloud network through a terminal that performs network access and basic arithmetic functions at any location, performs tasks that require large-capacity storage devices and high-performance computing resources, and provides advanced services. , (Patent Document 1) will be described in detail as follows.

(Patent Document 1) relates to a cloud service security system and a method therefor. According to this, a cloud service comprising a cloud portal server and a cloud operation server and equipped with a web security solution corresponding to the Personal Information Protection Act is provided. By doing so, it is possible to control access to cloud services through the cloud VM (virtual environment), and by providing a cloud service equipped with a DB security solution in response to the Personal Information Protection Act, it includes a function to control access to the DB linked with the cloud VM. do.

However, in the aforementioned (Patent Document 1), even if the security solution operates when backing up folders and files stored in the VM, if an external (hacking, etc.) or internal (operating account sharing, etc.) issue occurs, the security reliability is lowered. There is a problem that the backed up folder and file can be leaked to the outside.

Republic of Korea Patent Publication No. 10-1219662 (2013.01.02)

An object of the present invention is to generate a final encryption code by combining a master code that can be set in an operating account and a sub code generated based on a user ID, and use the final encryption code to improve the complementarity of a backup file based on a cloud infrastructure It is to provide a backup encryption system for files and folders in a virtual environment built with

In order to solve the above problem,

The backup encryption system for files and folders in a virtual environment built based on cloud infrastructure according to an embodiment of the present invention creates a cluster and a VM (Virtual Machine) in one or more hypervisors with different image format methods to create a user Cloud server that provides a virtual environment according to the selection of; and

an operation server for encrypting the folders and files stored in the VM and backing up the encrypted folders and files; including,

The operating server is

a management module for managing an operating account of the operating server and an account of a user using the VM, and encrypting folders and files designated by the VM; and

a backup module for creating a storage folder necessary for backing up the database built in the operation server on the basis of the folder and file information encrypted by the management module; includes,

The management module,

an operating account unit including a master code unit for setting and managing an encryption code to be given to the cloud server, and managing an administrator account for managing the operating server;

a user management unit including a sub-code unit for setting and managing an encryption code to be given to folders and files stored in the VM, and managing a user account using the VM; and

A final code for generating a final encryption code by combining the encryption code set by the master code unit and the encryption code set by the sub-code unit, and giving the generated final encryption code to files and folders to be backed up in the VM wealth; may include.

In addition, in the backup encryption system for files and folders in a virtual environment built on the basis of cloud infrastructure according to an embodiment of the present invention, the cluster including the image format type of the hypervisor and the universal unique identifier (UUID) of the cluster cluster module to create and manage;

a VM module that is created in the cluster module and constructs a virtual environment;

a storage module for establishing resource resources to be provided to the VM and managing the resource resources; may include.

In addition, in the backup encryption system for files and folders in a virtual environment built on the basis of cloud infrastructure according to an embodiment of the present invention, the VM is an access management unit for an individual user to log in to the VM by inputting ID, PW, and OTP ;

a backup selection unit for selecting a folder to be backed up on the operating server and a file format to be backed up;

a backup setting unit for setting a schedule of folders and files to be backed up from the VM to the operation server; may include.

In addition, in the backup encryption system of files and folders in a virtual environment built on the basis of cloud infrastructure according to an embodiment of the present invention, the master code unit includes letters, numbers, and special characters from the operator account logged into the operating account unit. Input an unspecified code including at least one, and generate an encryption code based on the input unspecified code,

The encryption code generated by the master code unit may be collectively applied to one or more VMs built in the cloud server.

In addition, in the backup encryption system for files and folders in a virtual environment built based on cloud infrastructure according to an embodiment of the present invention, the sub-code unit generates an encryption code based on the ID of the user account logged into the VM. do,

The encryption code generated by the sub-code unit can be applied to specifying a VM logged in by the user.

In addition, in the backup encryption system for files and folders in a virtual environment built based on cloud infrastructure according to an embodiment of the present invention, the backup module comprises:

a folder creation unit that creates a folder connected to the VM in the database;

a code assigning unit for encrypting the folder generated by the folder generating unit by assigning the final encryption code generated by the final code unit to the folder generated by the folder generating unit; and

a file compression/decompression unit for compressing folders and files to be backed up by transmitting them from the VM to the operation server, or decompressing the folders and files backed up in a database when transmitting them to the VM; may include.

In addition, in the backup encryption system for files and folders in a virtual environment built based on cloud infrastructure according to an embodiment of the present invention, the code granting unit is configured to provide a globally unique identifier (GUID) to the folder created by the folder creation unit. can be given

These solutions will become more apparent from the following detailed description of the invention based on the accompanying drawings.

Prior to this, the terms or words used in the present specification and claims should not be construed in their ordinary and dictionary meanings, and the inventor may properly define the concept of the term in order to best describe his invention. It should be interpreted as meaning and concept consistent with the technical idea of the present invention based on the principle that it is possible.

That is, according to an embodiment of the present invention, the final encryption code is generated by combining the master code managed by the operator account and the sub-code generated based on the user ID, and supplementary reliability for each virtual environment (VM) can improve

In addition, according to an embodiment of the present invention, a different final encryption code can be given to each virtual environment, for example, even if the master code is exposed due to a hacker or a virus issue, the final encryption code cannot be inferred, so it is backed up to the operation server There is an effect that one file and folder can be supplemented.

In addition, according to one embodiment of the present invention, since a different final encryption code is given to each one or more backup folders stored in the operation server, for example, even if one backup folder is exposed to supplementation, the remaining backup folders can be continuously supplemented. have.

1 is a schematic diagram showing the structure of a backup encryption system for files and folders in a virtual environment built based on cloud infrastructure according to an embodiment of the present invention.
2 is a schematic diagram showing the structure of a cloud server of a backup encryption system for files and folders in a virtual environment built on the basis of cloud infrastructure according to an embodiment of the present invention.
3 is a block diagram showing the components of a VM module of a backup encryption system for files and folders in a virtual environment built based on cloud infrastructure according to an embodiment of the present invention.
4 is a block diagram showing the components of an operating server of a file and folder backup encryption system in a virtual environment built based on a cloud infrastructure according to an embodiment of the present invention.
5 is a block diagram showing the components of a management module of a file and folder backup encryption system in a virtual environment built based on a cloud infrastructure according to an embodiment of the present invention.
6 is a block diagram illustrating components of a backup module of a file and folder backup encryption system in a virtual environment built based on cloud infrastructure according to an embodiment of the present invention.

The specific aspects and specific technical features of the present invention will become more apparent from the following detailed description and embodiments in conjunction with the accompanying drawings. In the present specification, in adding reference numerals to components of each drawing, it should be noted that the same components are given the same reference numerals as possible even if they are indicated on different drawings. In addition, in describing an embodiment of the present invention, if it is determined that a detailed description of a related well-known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted.

In addition, in describing the components of the present invention, terms such as first, second, A, B, (a), (b), etc. may be used. These terms are only for distinguishing the elements from other elements, and the essence, order, or order of the elements are not limited by the terms. When a component is described as being “connected”, “coupled” or “connected” to another component, the component may be directly connected or connected to the other component, but another component is between each component. It should be understood that elements may be “connected,” “coupled,” or “connected.”

Hereinafter, an embodiment of the present invention will be described in detail based on the accompanying drawings.

As shown in FIG. 1 , the backup encryption system for files and folders in a virtual environment built based on cloud infrastructure according to an embodiment of the present invention includes a cluster 120 in one or more hypervisors 110 having different image format methods. ) and a VM (Virtual Machine) to create a virtual environment according to the user's selection, and the cloud server 100 and VM 130 to encrypt the stored folders and files, and back up the encrypted folders and files. It may be configured to include an operating server 200 that does.

The VM 130 provided by the cloud server 100 may have a structure that can be accessed using the user device P. Here, the user device P may include a personal PC, a tablet, a smart phone, a notebook computer, and an iPad.

As shown in FIG. 2 , the cloud server 100 includes the image format of the hypervisor 110 and the universally unique identifier (UUID) of the cluster, and a cluster module 120 for creating and managing the cluster and , a VM (Virtual Machine) module 130 that builds a virtual environment inside the cluster, and a storage module 140 that builds resource resources to be provided to the virtual environment (VM) and manages resource resources. have.

The cluster module 120 builds a cluster inside the hypervisor 110 that supports a logical platform capable of starting a VM environment, performs a function of controlling and managing the built cluster, and when creating a cluster, A cluster name, an image format type of the UUID hypervisor 110, and information on whether a cluster is used may be included.

The VM module 130 is a module that builds a virtual environment (VM) inside the cluster module 120, and one or more virtual environments (VMs) can be created inside the cluster, and include clusters, nodes, storage, operating systems, You can create a virtual environment by setting information on resource users, the number of virtual machines to be created, whether virtual machines are created, use start date, and expected use end date in advance.

The virtual environment (VM) built in the VM module 130 includes a connection management unit 131 that manages login by receiving ID, PW, and OTP sequentially from a user, and a folder and file format to be backed up to the operation server 200 . It may be configured to include a backup selection unit 132 that selects , and a backup setting unit 133 that sets a schedule of folders and files to be backed up in the operation server 200 .

That is, the virtual environment (VM) supports the user to log in through the access management unit 131 , sets the folder and file format to be backed up, and additionally sets when the backup is automatically performed.

The storage module 140 performs a function of providing and managing resource resources so that the cluster and virtual environment (VM) created in the cluster module 120 and the VM module 130 can be driven, where the resource resource is the CPU, It may include a memory, a network, an IP address, and a storage medium.

That is, when a user logs in by sequentially inputting an ID, PW, and OTP, the cloud server 100 may have a structure that provides a virtual environment (VM) corresponding to the ID.

As shown in FIG. 3 , the operation server 200 manages an operator account that operates and manages the operation server and a user account using a VM, and a management module 210 that encrypts folders and files designated by the user in the VM; , it may be configured to include a backup module 220 that creates and manages a storage folder required for backing up to the database 230 based on the folder and file information encrypted by the management module 210 .

The management module 210 includes an operating account unit 211 for controlling and managing an operator account, a user management unit 213 for controlling and managing a user account (or user account), and a final code unit 215 for generating an encryption code. can be configured.

The operation account unit 211 performs a function of integrated management of the operator account that operates and manages the operation server 200, and the operator sequentially inputs ID, PW, and OTP to the operation server 200 to access the operation account. It can proceed, and when the connection is completed, the operation server 200 and the cloud server 100 can be controlled and managed.

In addition, the operating account unit 211 may be configured to include a master code unit 212 for generating, setting, and managing an encryption code to be given to the cloud server 100 .

The master code unit 212 can give the operation server 200 a function to create, set, and manage the master code limited to the account that has logged in as the operator account, and can be generated by entering the password code in the operator account. However, the present invention is not limited thereto, and an encryption code may be randomly generated by requesting the operation server 200 .

The encryption code generated by the master code unit 212 may be an unspecified code including at least one of letters, numbers, and special characters, and the code is an encryption code applied to both the cluster and the VM created in the cloud server 100 . to be.

The user management unit 213 performs a function of integrated management of the ID of the user subscribed to the operation server 200 and the unique number of the virtual environment (VM) linked with the ID of the user, and allows the user to log in through the ID After finding the unique number linked to the ID entered when logging in, it can perform the function of providing a virtual environment corresponding to the unique number.

In addition, the user management unit 213 may further include a sub-code unit 214 for setting and managing encryption codes to be given to folders and files to be backed up in a virtual environment accessed by the user through ID.

The sub-code unit 214 may request a sub-code from the operation server 200 by limiting the virtual environment (VM) to which the user logs in as a user account and accesses and receive the sub-code. Here, the operation server 200 may generate a subcode based on the ID input when the user logs in, and transmit the generated subcode to the subcode unit 214 to interwork with the ID.

That is, the encryption code given through the sub-code unit 214 may be an unspecified code including at least one of letters, numbers, and special characters, and the code is applied only to one virtual environment (VM) linked to the ID. It is a password code.

The final code unit 215 generates a final encryption code by combining the encryption code (master code) set by the master code unit 212 and the encryption code (sub code) set by the sub-code unit 214, and generates The final encryption code may be transmitted to the backup module 220 and given to files and folders to be backed up in a virtual environment (VM).

For example, if it is assumed that the master code is “ABCD”, the subcode assigned to the first virtual environment is “efgh”, and the subcode assigned to the second virtual environment is “ijkl”, backup in the first virtual environment The final password given to the file and folder to be backed up may be “ABCDefgh”, and the final password given to the file and folder to be backed up in the second virtual environment may be “ABCDijkl”.

Here, the final encryption codes “ABCDefgh” and “ABCDijkl” are simple examples, and the final encryption codes may be combined and generated through an algorithm related to code combination.

As shown in FIG. 4 , the backup module 220 includes a folder creation unit 221 that creates a folder connected to a virtual environment (VM) in the database 230 , and a folder created in the folder creation unit 221 . It may be configured to include a code assignment unit 222 for encrypting the folder by giving an encryption code, and a file compression/decompression unit 223 for compressing or decompressing files and folders.

The folder creation unit 221 performs a function of creating a folder in the database 230, and in addition, the created folder is interlocked with one virtual environment, so that when a backup is performed inside the virtual environment, it is stored in the corresponding folder. can be made with

The code assigning unit 222 assigns the final encryption code generated by the final code unit 215 to the folder created by the folder creation unit 221 to encrypt the folder, and the folder to which the final encryption code is assigned is By giving a globally unique identifier (GUID), it is possible to prevent the final encryption code from being exposed.

That is, according to an embodiment of the present invention, the final encryption code is generated by combining the master code managed by the operator account and the sub-code generated based on the user ID, and supplementary reliability for each virtual environment (VM) can improve

In addition, according to an embodiment of the present invention, a different final encryption code can be given to each virtual environment, for example, even if the master code is exposed due to a hacker or a virus issue, the final encryption code cannot be inferred, so it is backed up to the operation server There is an effect that one file and folder can be supplemented.

In addition, according to one embodiment of the present invention, since a different final encryption code is given to each one or more backup folders stored in the operation server, for example, even if one backup folder is exposed to supplementation, the remaining backup folders can be continuously supplemented. have.

Although the present invention has been described in detail through one embodiment, this is for describing the present invention in detail, and the backup encryption system for files and folders in a virtual environment built based on cloud infrastructure according to the present invention is not limited thereto. And, terms such as "include", "compose", or "have" described above mean that the corresponding component may be embedded unless otherwise stated, so excluding other components is not recommended. It should be construed as being able to further include other components rather than other components, and all terms including technical or scientific terms are generally understood by those of ordinary skill in the art to which the present invention belongs, unless otherwise defined. has the same meaning as being

In addition, the above description is merely illustrative of the technical idea of the present invention, and those skilled in the art to which the present invention pertains can make various modifications and variations without departing from the essential characteristics of the present invention. Accordingly, the embodiments disclosed in the present invention are not intended to limit the technical spirit of the present invention, but to explain, and the scope of the technical spirit of the present invention is not limited by these embodiments. The protection scope of the present invention should be construed by the following claims, and all technical ideas within the equivalent range should be construed as being included in the scope of the present invention.

100 - Cloud Server 110 - Hypervisor Module
120 - cluster module 130 - VM module
131 - Connection management unit 132 - Backup selection unit
133 - backup setting unit 140 - storage module
200 - operation server 210 - management module
211 - Operating Account Department 212 - Master Code Department
213 - user management unit 214 - sub code unit
215 - Final code part 220 - Backup module
221 - folder creation unit 222 - code assignment unit
223 - file compression/decompression unit 230 - database

Claims (7)

a cloud server that provides a virtual environment according to a user's selection by creating a cluster and a VM (Virtual Machine) in one or more hypervisors having different image format methods; and
an operation server for encrypting the folders and files stored in the VM and backing up the encrypted folders and files; including,
The operating server is
a management module for managing an operating account of the operating server and an account of a user using the VM, and encrypting folders and files designated by the VM; and
a backup module for creating a storage folder necessary for backing up the database built in the operation server on the basis of the folder and file information encrypted by the management module; includes,
The management module,
an operating account unit including a master code unit for setting and managing an encryption code to be given to the cloud server, and managing an administrator account for managing the operating server;
a user management unit including a sub-code unit for setting and managing an encryption code to be given to folders and files stored in the VM, and managing a user account using the VM; and
A final code for generating a final encryption code by combining the encryption code set by the master code unit and the encryption code set by the sub-code unit, and giving the generated final encryption code to files and folders to be backed up in the VM wealth; includes,
The master code unit inputs an unspecified code including at least one of letters, numbers, and special characters from the operator account logged into the operation account unit, and generates an encryption code based on the input unspecified code, in the master code unit The generated encryption code is collectively applied to one or more VMs built in the cloud server,
The sub-code unit generates an encryption code based on the ID of a user account logged into the VM, and the encryption code generated in the sub-code unit specifies a VM logged in by the user and applies to it, a cloud infrastructure-based virtual The OS's backup encryption system.
The method according to claim 1,
The cloud server,
a cluster module for creating and managing a cluster including the image format type of the hypervisor and a universal unique identifier (UUID) of the cluster;
a VM module that is created in the cluster module and constructs a virtual environment;
a storage module for establishing resource resources to be provided to the VM and managing the resource resources; Including, cloud infrastructure-based virtual OS backup encryption system.
The method according to claim 1,
The VM includes: an access management unit for an individual user to log in to the VM by inputting ID, PW, and OTP;
a backup selection unit for selecting a folder to be backed up on the operating server and a file format to be backed up;
a backup setting unit for setting a schedule of folders and files to be backed up from the VM to the operation server; Including, cloud infrastructure-based virtual OS backup encryption system.
delete delete The method according to claim 1,
The backup module,
a folder creation unit that creates a folder connected to the VM in the database;
a code assigning unit for encrypting the folder generated by the folder generating unit by assigning the final encryption code generated by the final code unit to the folder generated by the folder generating unit; and
a file compression/decompression unit for compressing folders and files to be backed up by transmitting them from the VM to the operation server, or decompressing the folders and files backed up in a database when transmitting them to the VM; A backup encryption system for files and folders in a virtual environment built based on cloud infrastructure, including.
7. The method of claim 6,
The code granting unit is a backup encryption system for files and folders in a virtual environment built based on cloud infrastructure, which gives a globally unique identifier (GUID) to the folder created by the folder creation unit.

Images