WO2011050703A1

WO2011050703A1 - Cloud processing system, cloud processing method and cloud computing agent device

Info

Publication number: WO2011050703A1
Application number: PCT/CN2010/078050
Authority: WO
Inventors: 苏红宏; 张礼权
Original assignee: 华为终端有限公司
Priority date: 2009-11-02
Filing date: 2010-10-25
Publication date: 2011-05-05
Also published as: CN102055730B; CN102055730A

Abstract

A cloud processing system is disclosed. The cloud processing system comprises a client, a cloud server and a cloud agent device. The cloud agent device connects with the client and the cloud server. The cloud agent device is used for receiving a cloud processing request message sent from the client and replacing the cloud server to provide cloud services to the client. A cloud processing method, a cloud computing agent device, a cloud storage processing device and the client are also disclosed. With the method, the devices and the system provided by the solution, information security in cloud processing is improved.

Description

Cloud processing system, cloud processing method and cloud computing agent device

This application claims the priority of the Chinese Patent Application entitled "Cloud Processing System, Cloud Processing Method and Cloud Computing Agent Device" submitted by the Chinese Patent Office on November 2, 2009, and the application number is 200910207959. This is incorporated herein by reference. Technical field

The embodiments of the present invention relate to the field of computer technologies, and in particular, to a cloud processing system, a cloud processing method, and a cloud computing proxy device. Background technique

Cloud computing (C l oud Compu t ng) is an emerging business computing model. It distributes computing tasks across resource pools of large numbers of computers, enabling applications to acquire computing power, storage space, and various software services as needed.

This resource pool is called a "cloud." "Cloud" is a virtual computing resource that can be self-maintained and managed, usually a large server cluster, including computing servers, storage servers, broadband resources, and so on. Cloud computing centralizes all computing resources and is automatically managed by software without human intervention. This eliminates the need for application providers to worry about cumbersome details and to focus more on their own business, helping to innovate and reduce costs.

The basic principle of cloud computing is that enterprise data centers will operate more like the Internet by distributing the computation across a large number of distributed computers rather than local or remote servers. This allows companies to switch resources to the applications they need and access computers and storage systems as needed. This is like a shift from the old single generator mode to the centralized power supply mode of the power plant. It means that computing power can also be circulated as a commodity, just like gas and water, it is easy to use and low cost. The biggest difference is that it is transmitted over the Internet. With cloud computing technology, you only need one laptop or one mobile phone, you can use network services. Achieve everything we need, even tasks like supercomputing. From this perspective, the end user device is the true owner of cloud computing. The application of cloud computing involves the idea of uniting forces and using them for each of them. In the most fundamental sense, cloud computing is the ability to leverage software and data on the Internet. The above cloud computing is a generalized concept, including the concept of storage and computing.

In the process of implementing the present invention, the inventors have found that at least the following problems exist in the prior art: In the prior art, when using a public cloud, data needs to be directly uploaded to a public cloud server, which makes the security performance in the cloud computing process poor. . Summary of the invention

The embodiments of the present invention provide a cloud processing system, a cloud processing method, and a cloud computing proxy device, and a cloud storage proxy device and a client, which can improve the security of the cloud computing.

The embodiment of the present invention provides a cloud processing system, including a client and a cloud server, and a cloud proxy device, where the cloud proxy device is connected to the client and the cloud server, and the cloud proxy device is configured to receive the cloud sent by the client. The request message is processed, and the cloud server is provided to the client instead of the cloud server.

The embodiment of the invention further provides a cloud processing method, including:

Receiving, by the client, a cloud processing request message for requesting the cloud server to provide the cloud service, where the cloud processing request message includes a cloud computing request message or a cloud storage request message;

The cloud service is provided to the client according to the cloud processing request message instead of the cloud server.

The embodiment of the invention further provides another cloud processing method, including:

When it is determined that the request input by the user is a cloud processing request, the cloud processing request message is sent to the cloud proxy device according to the preset cloud proxy device address.

The embodiment of the invention further provides a cloud computing proxy device, comprising:

a first receiving module, configured to receive a cloud computing request message sent by the client, where the cloud computing request message includes the requested cloud computing application information;

An application obtaining module, configured to obtain, according to the cloud computing request message, a cloud computing server Using or calling a stored application obtained from a cloud computing server;

And a calculation processing module, configured to perform cloud computing processing according to the application acquired by the application obtaining module or the stored application.

The embodiment of the invention further provides a cloud storage proxy device, comprising:

a second receiving module, configured to receive a storage clearing message that is sent by the client, including pre-stored data information;

a storage module, configured to store the data information;

The second sending module is configured to send the stored data information to the cloud storage server for storage when the upload condition is met.

The embodiment of the invention further provides a client, including:

a determining module, configured to determine that the request input by the user is a cloud processing request;

And a third sending module, configured to send a cloud processing request message to the cloud proxy device according to the preset cloud proxy device address.

A cloud processing system, a cloud processing method, and a cloud computing proxy device according to an embodiment of the present invention, and a cloud storage processing device, the cloud proxy device capable of receiving a cloud of a client by setting a cloud proxy device between the client and the cloud server Processing the request message, and performing cloud computing or cloud storage processing according to the cloud processing request message, and setting up the cloud proxy device between the client and the cloud server instead of directly using the public cloud server, thereby improving information in the cloud computing process safety. DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, a brief description of the drawings used in the embodiments or the prior art description will be briefly described below. Obviously, the drawings in the following description It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any inventive labor.

1 is a schematic structural diagram of an embodiment of a cloud processing system according to the present invention;

2 is a schematic flowchart of Embodiment 1 of a cloud processing method according to the present invention; 3 is a schematic flowchart of Embodiment 2 of a cloud processing method according to the present invention;

4 is a schematic flowchart of Embodiment 3 of a cloud processing method according to the present invention;

FIG. 5 is a schematic flowchart diagram of Embodiment 4 of a cloud processing method according to the present invention;

6 is a schematic structural diagram of an embodiment of a cloud computing proxy device according to the present invention;

7 is a schematic structural diagram of an embodiment of a cloud storage proxy device according to the present invention;

8 is a schematic structural diagram of a client embodiment of the present invention;

9 is a system architecture diagram of a cloud computing system according to an embodiment of the present invention;

FIG. 10 is a schematic flowchart diagram of a cloud computing method according to an embodiment of the present invention; FIG.

1 is a schematic flowchart of an authentication process in a specific embodiment of the present invention;

FIG. 12 is a schematic flowchart diagram of a cloud storage method according to an embodiment of the present invention; FIG.

FIG. 13 is a schematic structural diagram of a cloud proxy device according to an embodiment of the present invention. detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is a partial embodiment of the invention, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention. FIG. 1 is a schematic structural diagram of an embodiment of a cloud processing system according to the present invention. As shown in FIG. 1, the client 1 includes a cloud server 2 and a cloud proxy device 3, wherein the cloud proxy device 3 is connected to the client. 1 and the cloud server 2, the cloud proxy device 3 is configured to receive a cloud processing request message sent by the client 1, and provide a cloud service for the client instead of the cloud server.

The cloud processing request message includes a cloud computing request message or a cloud storage request message. The cloud proxy device 3 is further configured to perform cloud computing or cloud storage processing according to the cloud processing request message.

The cloud processing system provided by the foregoing embodiment of the present invention, wherein between the client and the cloud server A cloud proxy device is provided, which can receive the cloud processing request message of the client, and provides a cloud service for the client instead of the cloud server, can avoid directly using the public cloud server, and can improve information security in the cloud computing process.

In an embodiment of the present invention, a cloud proxy device is provided instead of a cloud server to provide a cloud service, wherein the replacement is directed to providing a cloud service directly to the client by the cloud server in the prior art, and the embodiment of the present invention is provided by the cloud proxy device. Providing a cloud service directly to the client, specifically for the cloud computing, after receiving the cloud computing request message, the cloud proxy device acquires the application from the cloud computing server or invokes the stored application instead of the cloud computing server for cloud computing processing; receiving the cloud The request message is stored, and the cloud proxy device caches the data information and uploads it to the cloud storage server when the condition is met. For the client, in the above cloud computing and cloud storage processes, the cloud proxy device can provide the cloud service instead of the cloud server. The cloud processing described above may specifically include cloud computing and cloud storage, that is, the cloud processing request message may be a cloud computing request message or a cloud storage request message. The corresponding cloud server may be a cloud computing server, and the cloud proxy device may be a cloud computing proxy device, where the cloud computing proxy device is configured to receive a cloud computing request message sent by the client, where the cloud computing request message includes the requested cloud computing application information. And being used to acquire an application from the cloud computing server or invoke the stored application according to the cloud computing request message, where the stored application that is invoked is an application obtained from the cloud computing server; and finally performs cloud computing processing according to the requested application or the stored application. In addition, the cloud server may be a cloud storage server, and the cloud proxy device is a cloud storage proxy device, where the cloud storage proxy device is configured to receive a storage request message that is sent by the client, including pre-stored data information, and store the data information. When the upload condition is met, the stored data information is sent to the cloud storage server for storage.

The above-mentioned cloud proxy device can be further set in the local area network, so that the cloud proxy device and the client in the local area network can be connected through a high-speed local area network, and the speed of the cloud computing can be effectively provided while using the server provided by the public cloud. And security.

Corresponding to the cloud processing system, the embodiment of the present invention further provides a method for performing a cloud processing method on a client and a cloud proxy device, and FIG. 2 is a flow of the first embodiment of the cloud processing method according to the present invention. The schematic diagram of the process is performed by the cloud proxy device as an example. As shown in FIG. 2, the method includes the following steps:

Step 101: The cloud processing request message sent by the client for requesting the cloud server to provide the cloud service, where the cloud processing request message includes a cloud computing request message or a cloud storage request message; in this step, between the client and the cloud server A cloud proxy device is set, and the cloud proxy request message is received by the cloud proxy device.

Step 102: Provide a cloud service to the client according to the cloud processing request message instead of the cloud server. In this step, the cloud proxy device performs the corresponding processing according to the cloud processing request message, that is, performs cloud computing processing or performs cloud storage processing.

The cloud processing method provided by the foregoing embodiment of the present invention, wherein a cloud proxy device is disposed between the client and the cloud server, and the cloud proxy device is capable of receiving a cloud processing request message of the client, and performing cloud computing according to the cloud processing request message. Or cloud storage processing, the above establishment of a cloud proxy device between the client and the cloud server, rather than directly using a public cloud server, can improve information security in the cloud computing process.

3 is a schematic flowchart of a second embodiment of a cloud processing method according to the present invention. As shown in FIG. 3, when the received cloud processing request message is a cloud computing request message, the foregoing method includes:

Step 201: Receive a cloud computing request message sent by a client, where the cloud computing request message includes the requested cloud computing application information.

Step 202: Request and acquire an application from the cloud computing server according to the cloud computing request message, or invoke the stored application acquired from the cloud computing server;

Step 203: Perform cloud computing processing according to an application obtained from a cloud computing server or an stored application.

Specifically, after the step 201, the method may further include: determining whether the cloud computing application included in the cloud computing request message is stored; and using the cloud computing application when the cloud computing application is stored; In the cloud computing application, the cloud computing application is requested from the cloud computing server, and the steps of step 202 and step 203 are performed. When the cloud computing application is requested by the cloud computing server in the foregoing step 202, the application request message including the identifier and the requested cloud computing application information may be sent to the cloud computing server, and the cloud computing server returns the cloud computing according to the identity identifier. application.

In addition, when the cloud computing bagging device sends the application request message to the cloud computing server, the step of authenticating may also be set, that is, the application request message sent to the cloud computing server further includes the authentication information, and the receiving cloud computing server returns according to the identity identifier. The cloud computing application may be specifically: receiving a cloud computing application returned by the cloud computing server according to the identity identifier after the authentication according to the authentication information passes.

The cloud computing application returned by the receiving cloud computing server according to the identity identifier may be specifically: receiving the cloud computing application including the command line and/or the graphical interface returned by the cloud server according to the identity identifier.

4 is a schematic flowchart of a third embodiment of a cloud processing method according to the present invention. As shown in FIG. 4, when the received cloud processing request message is a cloud storage request message, the method includes:

Step 301: Receive a cloud storage request message that is sent by the client, including pre-stored data information, and store the data information. In this step, the cloud storage proxy device receives the pre-stored data, and caches the data.

Step 302: When the upload condition is met, send the stored data information to a cloud storage server for storage. The foregoing conditions may be that the network is idle, the server is idle, and the like, and the data information is uploaded after the conditions are met.

In the embodiment of the method, the cloud storage proxy device functions as a cache, and the data information pre-uploaded to the cloud storage server is cached first, and the data information is uploaded when the upload condition is met.

The embodiment of the present invention further provides a cloud processing method using a client as an example, including: when determining that the request input by the user is a cloud processing request, sending a cloud processing request message to the cloud proxy device according to the preset cloud proxy device address. The specific request for determining the user input as the cloud processing request may be: determining, according to the URL information or the port number of the request, that the request is a cloud processing request. FIG. 5 is a schematic flowchart of Embodiment 4 of a cloud processing method according to the present invention. As shown in FIG. 5, the method includes the following steps:

Step 401: Determine, according to the requested URL information or the destination port number, that the request is a cloud processing request.

Step 402: Send a cloud processing request message to the cloud proxy device according to the preset cloud proxy device address.

When the client in this embodiment determines that the service request input by the user is a cloud processing request, the cloud processing request message is sent to the cloud processing device instead of directly using the public cloud server, thereby improving information security in the cloud computing process.

In addition, the above cloud processing request may be a cloud computing request or a cloud storage request. And when the foregoing processing request is a cloud storage request, the sending the cloud processing request message to the cloud proxy device is specifically:

A cloud storage request message carrying an identifier of whether to perform data backup or data confidentiality level is sent to the cloud proxy device, the identifier being used to instruct the cloud storage proxy server to perform a backup or encryption operation. The embodiment of the present invention further provides a device corresponding to the foregoing method. FIG. 6 is a schematic structural diagram of Embodiment 1 of a cloud computing proxy device according to the present invention. As shown in FIG. 6, the cloud computing proxy device includes a first receiving module 11 and an application. The obtaining module 12 and the computing processing module 13 are configured to receive the cloud computing request message sent by the client, where the cloud computing request message includes the requested cloud computing application information; and the application obtaining module 12 is configured to use the cloud computing The request message is obtained from the cloud computing server to obtain an application or to invoke the stored from the cloud computing server; the computing processing module 13 is configured to perform cloud computing processing according to the application acquired or the called application obtained from the application obtaining module 12.

The cloud computing processing device provided by the foregoing embodiment of the present invention, after receiving the cloud computing request message sent by the client, uses the application stored by itself or requests the application from the cloud computing server, and then performs cloud computing processing, so that the cloud can be implemented locally. Calculation processing to improve the security and processing speed of data information. And further, the above cloud computing processing device can be set in the local area network Inside.

On the basis of the foregoing embodiment, the method may further include: a determining module, configured to determine whether the cloud computing application included in the cloud computing request message is stored, where the application acquiring module is configured to store the cloud The cloud computing application is used when computing an application; when the cloud computing application is not stored, the cloud computing application is requested from a cloud computing server.

The application obtaining unit may be further divided into a first processing unit, a first sending unit, and a first receiving unit, where the first processing unit is configured to use the cloud computing application when the cloud computing application is stored; An application request message for sending the cloud computing application information including the identity and the request to the cloud computing server; the first receiving unit is configured to receive the cloud computing application returned by the cloud computing server according to the identity identifier.

FIG. 7 is a schematic structural diagram of an embodiment of a cloud storage proxy device according to the present invention. As shown in FIG. 7, the cloud storage proxy device includes a second receiving module 21, a storage module 22, and a second sending module 23, where the second receiving module 21 is used. Receiving, by the client, a storage request message including pre-stored data information; the storage module 22 is configured to store the data information; and the second sending module 23 is configured to send the stored data information to the cloud when the upload condition is met The storage server is storing.

The cloud storage proxy device provided by the foregoing embodiment of the present invention first caches the received pre-stored data information, and sends the foregoing data information to the cloud storage server when the upload condition is met, and the specific upload condition may be that the network is idle. Conditions such as server idleness can increase the speed of cloud data storage by the above-described embodiments.

On the basis of the cloud storage proxy device provided by the foregoing embodiment, an encryption/decryption module may be further configured to encrypt data information to be uploaded to the cloud storage server, and perform data information downloaded from the cloud storage server. Decrypt.

In addition, the embodiment of the present invention further provides a client. FIG. 8 is a schematic structural diagram of a client embodiment of the present invention. As shown in FIG. 8, the client includes a determining module 31 and a third sending module 32, where the determining module 31 is used. The request for determining the user input is a cloud processing request; the third sending module 32 is configured to send a cloud processing request message to the cloud proxy device according to the preset cloud proxy device address. In this embodiment, the address of the cloud proxy device is stored in the client, and the processing request message is sent to the cloud proxy device for processing, instead of being directly sent to the cloud server, which can improve the information security in the cloud processing process.

On the basis of the foregoing embodiment, an identifier adding module may be further configured to add an identifier indicating whether to perform data backup or data confidentiality level to the cloud storage request message when requesting the cloud storage request to the cloud processing request; The third sending module is configured to send, to the cloud proxy device, a cloud storage request message carrying an identifier of whether to perform data backup or data confidentiality level. The data of the cloud storage request message with the high data confidentiality level of the identifier may be used to indicate that the cloud proxy device encrypts when uploading to the cloud storage server.

FIG. 9 is a system architecture diagram of a cloud computing system according to an embodiment of the present invention. As shown in FIG. 9, the technical solution of the present invention is to introduce a cloud computing proxy device between a cloud computing server and a client, and the cloud computing proxy device itself has Computing and/or storage capabilities, which can be used for computing and/or storage instead of cloud computing servers, and upload storage content to a cloud computing server (memory) as needed, since existing cloud computing technologies only transmit results to clients. The application (algorithm) itself is not transmitted, so it is necessary to transform all aspects of the cloud computing, including:

(1) Establish a common computing platform (running environment) between the cloud computing agent device and the cloud computing server, which can use Java, or C language, and can pre-build some basic public libraries; (2) define the cloud computing Requesting a cloud computing protocol SBC, the agent can identify the cloud computing request and the requested application/method according to the protocol;

(3) defining a method for acquiring an application/algorithm application between the cloud computing proxy device and the cloud computing server, and the cloud computing proxy device obtaining the cloud computing application/algorithm by using the method

For the stored agent, the protocol SBS that requests the cloud storage is defined, and after the cloud storage agent device recognizes the cloud storage request, the storage policy is automatically determined. In addition, the client can directly point the storage location to the CProxy, and the CProxy further caches to the cloud storage proxy device according to its storage resource usage.

In step (1), you can also not use a general-purpose computing platform, which requires the agent to The cloud computing server obtains an executable application suitable for its environment (processor, OS). In this case, it is generally required to store an application library consistent with the CProxy processor, OS, etc. on the cloud computing server. When different types of agents need to get applications from the same cloud computing server, the cloud computing server needs to be able to provide different application libraries.

On the basis of the above cloud computing system, Client A can be pre-set the cloud computing proxy device as CProxy (or discover the cloud computing proxy device through the automatic discovery protocol), H does not need Client A to perform matrix inversion calculation, to cloud Cloud A matrix calculation request is initiated, and the URL prefix SBC is defined to represent the cloud computing request. As shown in FIG. 10, the cloud computing may include the following steps: Step 501: ClientA accesses the URL "SBC: //CloudA/Matr ix" (where CloudA corresponds CloudA's address, Ma tr ix is the specific matrix computing application requested) to initiate a cloud computing request;

Step 502: The proxy server that is pre-set with the SBC on Clien is CProxy (the corresponding port number or the predefined default port number is also required when using the TCP/IP protocol), and the cloud computing client on the client A (can be a browser) The judgment is a cloud computing request, which will connect to the cloud computing agent CProxy, and send the cloud computing request to the cloud computing agent CProxy;

Step 503: The CProxy, according to the received request identifier (such as the SBC in this example), identifies that the cloud computing request is available, and the local application does not have a corresponding application, and then requests the application to obtain the application, for example, GetMethod: Matrix;

Step 504: After the CProxy authentication is passed, the CloudA sends the application Matrix to the CProxy (the application itself may include a command line or a graphical interface), and records the CProxy information (in order to automatically update the application);

Step 505: The CProxy executes the Matirx application to provide the Matrix service to Clen. The Matrix can directly output the interactive prompt of the command line or directly interact with the graphical interface. The presentation of the specific interactive interface can use the existing cloud computing method, through WEB, desktop transmission and other technologies. . Before running the application to provide services, CProxy may also need to perform pre-processing such as compiling and optimizing the obtained calculations.

In addition to the above mentioned by identifying a special URL prefix to identify cloud proxy requests, The cloud computing request is represented by a special protocol port number. For example, the TCP 90 port corresponds to cloud computing. At this time, the client automatically considers the TCP connection with the destination port number 90 as a cloud computing request, and automatically connects to the cloud proxy server. CProxy. In addition, the HUp can also be used to carry the cloud computing request directly, and the corresponding cloud proxy URL identification prefix of the client is HUp. In this case, the proxy server can be used to identify whether the cloud proxy request or the ordinary netizen browses, for example, the proxy can be based on The pre-configured URL identifies whether it is a cloud computing request. For example, if the user wants to edit the document through cloud computing, request an application for word document editing. The corresponding cloud computing URL is: http:〃docs.clouda.com, pre-configured on the proxy server.

Http: //docs, clouda.com is a cloud computing request. When you receive the clear request for the URL, you can know that this is a cloud computing request by matching the previous settings.

When the application has CloudA/Matrix on the CProxy, the client requests the same calculation (application), and the CProxy directly provides the corresponding application, and does not perform step 503 and step 504. In the above step 502, the CProxy can also authenticate the user, and the authentication allows the CProxy to execute the cloud computing request message.

The CSI authentication of the CProxy (corresponding to the main function of the authentication security module) can be implemented by using a simple shared key method. First, a CProxy that requires the proxy is assigned a username ID and a shared key SKey. When the CProxy requests to obtain an application, the corresponding The request message is signed. For example, the sent request message is M, and the MD5 hash algorithm is used for signature. The authentication process may be as follows:

Step 601: The CProxy sends a request application initialization message to the cloud computing server CloudA.

( GetMethodlnit ) ;

Step 602: The CloudA sends a response initialization message (GetMethodlnit) to the CProxy, and carries the parameter random number R, and saves the start time and R of the session;

Step 603: The CProxy sends a request GetMethod for acquiring the application to the CloudA, and the application name (Method), the identity identifier (ID), the time stamp (Timestamp), the random number R, and the signature of the corresponding parameter Signature, where the parameter needs to be acquired, where the signature is signed = MD5 (Method, ID, Times tamp, R, Skey), clear message GetMethod

For: Methodl ID I Times tamp I R I Signature , where Method is determined according to the application of the specific request, the ratio: ^ can be Matrix;

Step 604: After receiving the application request, the cloudA first performs authentication, determines whether the time is within the valid range, and checks whether the R is consistent with the saved one. If the two conditions are satisfied, further determining whether the parameter carried in the message and the signature are further determined. Consistently, specifically: Use the shared key SKey corresponding to the ID stored in CloudA to calculate the signature Signature' =

MD5 (Method, ID, Timestamp, R, Skey), and then compare Signature' with the Signature in the received message. If the time is valid, R is the same, and the signature is the same, the authentication is passed. Go to step 605. Otherwise, the authentication fails to directly reject the request. ;

Step 605: Send an application response message, and send the corresponding application to the CProxy. The MD5 algorithm may also select another hash algorithm, such as HMAC.

In addition, when the authentication is performed, the digital certificate can also be used for authentication to make it more secure. The digital certificate can be issued by the corresponding management entity of CloudA or by the trusted entity of the third party.

The CProxy can be regarded as a standard cloud storage server for the client. The cloud computing server can be regarded as a common client. As shown in Figure 12, the following steps are included:

Step 701: Client A transmits the data that needs to be stored to the CProxy.

Step 702: The CProxy stores the data in a storage resource of the CProxy.

Step 703: The CProxy feeds back the storage confirmation to the ClientA, and confirms that the storage is completed (if there is an abnormality, the storage failure may be fed back);

Step 704: When a certain condition is met (if the resource management module determines that the network is idle and the server is idle), the CProxy transmits the stored data to the cloud storage server (CloudB); Step 705, CloudB feedback storage confirmation, confirming that the storage is completed (if there is an abnormality) Feedback storage failure); Step 7 06. CProxy releases the data that has been successfully uploaded to C oudB from the local storage. For storage using backup mode, do not release, keep a backup on CProxy.

In step 7 04, CProxy can further encrypt the data uploaded to the cloud storage server. The encryption algorithm can use a symmetric key encryption algorithm such as DES/AES/RC4 or an asymmetric key encryption algorithm such as RSA. When the key is only saved in CProxy, the uploaded data is encrypted by CProxy, and the corresponding download data is also decrypted by CProxy, then the symmetric key encryption algorithm is more efficient and secure, when the data needs to be accessed by streaming to meet real-time. When the demand is equal, it is more appropriate to select a stream encryption algorithm such as RC4. Of course, CProxy can also specify a dynamic selection algorithm according to the type of data or the user. Whether the encryption and encryption strength can be automatically determined by the user setting or CProxy scanning the stored data, such as scanning a normal WORD text document, it is considered as general confidential data, and selecting AES 128-bit key for medium-intensity encryption. When further scanning to a file with the words "detailed design", it is determined to be a highly confidential document, and AES 256-bit key is used for high-intensity encryption. Since the encrypted key and algorithm may be different, and the security key may be replaced periodically or irregularly, the CProxy needs to be able to store multiple keys and identifiers corresponding to each key. The identifier of the key needs to be attached to the uploaded data, so that when the data is downloaded, the decryption algorithm is determined according to the identifier and the corresponding key is retrieved for decryption.

CProxy itself can correspond to multiple cloud storage servers, and can automatically switch between multiple servers, the client does not feel this change. In the above step 605, when the C oudB feedback storage fails, the CProxy may also select another cloud storage server to re-upload.

In the data downloading process, CProxy also functions as a data cache, which will not be described in this embodiment. In addition, if the uploaded data does not need to be stored in CProxy, the data information can be directly sent to C l oudB and returned to the storage confirmation. Message. When the download data is encrypted, the CProxy needs to perform decryption corresponding to the encryption, specifically determining the decryption algorithm according to the key identifier in the downloaded data and acquiring the corresponding decryption key, and performing decryption of the downloaded data.

In the above embodiment, the cloud computing and cloud storage agent can be implemented by a unified cloud proxy device. FIG. 13 is a schematic structural diagram of the cloud proxy device, including the module shown in FIG. 13. The SBX protocol processing module is configured to process a computing request SBC or a storage request SBS between the client and the cloud proxy device. Relevant protocol interactions, including protocol interaction processing such as associated local user authentication; The local user management module is used to manage users who need to use the proxy service locally, store user account and password, permissions and other information, authenticate the user, and control the permissions. The user interaction management module is used to process input, keys, and output of the user interaction process, generate interface presentations, and the like. The interface presentation can be presented to the user using a web page (browser mode), or can be directly presented to the user in a graphical/video manner. When using the graphic/video method, graphics/video should generally be compressed to reduce bandwidth consumption, user input and output. Can be carried by the SBX protocol. The client can pre-support the processing of the SBX protocol, or download and obtain the client software through a browser, etc.; the software resource management module is used to manage the cached software/application resources, and notify the application when there is no locally cached application resource. The request module requests the software resource from the cloud computing server, and is responsible for updating the cache resource, creating the copy, and the like, monitoring the access of the software resource, and performing necessary load balancing; the software execution environment module is used to provide an environment for executing the application resource, for example, When the application resource is a Ja va program, the Java runtime environment is provided. The execution environment may also be provided by the cloud computing server. When the software resource management module determines that the execution environment needs to be downloaded according to the interaction between the application request module and the cloud computing server, the execution environment is downloaded through the application request module, and is installed into the software execution environment module; The copyright management module is a DRM package required by the DRM client and the cloud computing server. For example, if the cloud computing server adopts the DMA of the 0MA standard, the digital rights management module corresponds to the OMA DRM client. By executing with the DRM server to obtain the right to execute on DRM-protected applications, it is executed in the execution environment. Through digital rights management, the cloud computing server can control the application to run only on the authorized CP roxy; the application requesting module is used to request the corresponding application from the cloud computing server according to the requirements of the software resource management, or request the execution environment. Receiving an application/execution environment update sent by the application server, and notifying the software resource management module; the storage resource management module is configured to manage the storage resource, and manage the user's authority, storage space, and the like. Determine the caching strategy, as needed (for example, the storage space reaches the preset threshold, When there is a small amount of traffic, there is a long-term unused data. The data that needs to be uploaded to the cloud computing server is synchronized to the cloud computing server, and the content downloaded from the cloud computing server is automatically released if it is not used for a long time. The storage resource management module may further include a sensitive data detection module, based on content detection, identifying confidential data, not uploading confidential data to the cloud storage server, or performing high-intensity confidentiality on the confidential data; the storage resource module provides internal access to the client Network storage, and acts as a two-way storage cache between the cloud storage server and the client to improve client access speed; the encryption/decryption module is used to perform encryption on data uploaded to the cloud storage, and to implement data downloaded from the cloud storage. Corresponding decryption, improve user data security; storage request module is used to upload data in the storage resource to the cloud computing (cloud storage) server, or download data from the cloud computing server to the storage resource, or not through the storage resource The module cache (for example, when the storage resource module is full), and directly stores the storage request between the client and the cloud computing server; the authentication security module is used to complete the corresponding authentication according to the requirements of the cloud computing server when accessing the cloud computing resource, Based on shared key, digital certificate Book and other methods.

The cloud processing system, the cloud processing method, the cloud computing proxy device, and the cloud storage processing device provided by the foregoing embodiments of the present invention, wherein a cloud proxy device is provided between the client and the cloud computing (cloud storage) server, the cloud proxy device has a calculation And the storage capability, when receiving the cloud computing request, first determining whether the application requested by the cloud computing request has been stored, if yes, performing cloud computing according to the stored application, and if not, requesting the application from the cloud computing server And after receiving the corresponding application, the cloud computing is performed. In addition, for the cloud storage processing process, the data information uploaded by the client to the cloud storage server may be cached first, and finally the data is uploaded to the cloud storage server when the upload condition is met. . The above technical solution provided by the foregoing embodiments of the present invention can be set locally in a local area network by using a cloud proxy device, so that the remaining clients have a high-speed network connection, and the public cloud enhanced service on the wide area network can be used in a large amount. , effectively provide the speed and security of cloud computing. And further through the security management of CProxy (such as encryption, content inspection), you can further improve the security of data.

One of ordinary skill in the art can understand that all or part of the steps of the above method embodiments are implemented. The foregoing program may be stored in a computer readable storage medium, and the program is executed to perform the steps including the foregoing method embodiments; and the foregoing storage medium includes: a ROM, A variety of media that can store program code, such as RAM, disk, or optical disk.

It should be noted that the cloud computing mentioned in the embodiments of the present invention includes various applications such as performing scientific calculations or executing programs through a server, such as performing mathematical operations through a cloud server, editing a document, and playing a game, all of which are in the scope of cloud computing. In order to facilitate technical presentation, the use of cloud storage means that the cloud server is used for data storage.

It should be noted that the above embodiments are only for explaining the technical solutions of the present invention, and are not intended to be limiting; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those skilled in the art that: The technical solutions described in the foregoing embodiments are modified, or some of the technical features are equivalently replaced. The modifications and substitutions do not depart from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

Rights request

A cloud processing system, comprising a client and a cloud server, further comprising a cloud proxy device, wherein the cloud proxy device is connected to a client and a cloud server, and the cloud proxy device is configured to receive a cloud sent by the client The request message is processed, and the cloud server is provided to the client instead of the cloud server.

2. The cloud processing system according to claim 1, wherein the cloud processing request message comprises a cloud computing request message or a cloud storage request message.

The cloud processing system according to claim 1, wherein the cloud server is a cloud computing server, the cloud proxy device is a cloud computing proxy device, and the cloud computing proxy device is configured to receive a a cloud computing request message, where the cloud computing request message includes the requested cloud computing application information; acquiring an application from the cloud computing server according to the cloud computing request message or calling the stored application; performing cloud according to the acquired application or the stored application Calculation processing.

The cloud processing system according to claim 1, wherein the cloud server is a cloud storage server, the cloud proxy device is a cloud storage proxy device, and the cloud storage proxy device is configured to receive a a storage request message including pre-stored data information, and storing the data information; when the upload condition is met, the stored data information is sent to a cloud storage server for storage.

The cloud processing system according to claim 1, wherein the cloud proxy device is disposed in a local area network.

6. A cloud processing method, comprising:

The cloud processing method according to claim 6, wherein when the cloud processing request message is received as a cloud computing request message, the method includes: Receiving a cloud computing request message sent by the client, where the cloud computing request message includes the requested cloud computing application information;

And requesting, by the cloud computing request message, an application to the cloud computing server or calling the stored application acquired from the cloud computing server;

Cloud computing processing is performed according to the requested application or the stored application.

The cloud processing method according to claim 7, wherein after receiving the cloud computing request message sent by the client, the method includes:

Determining whether a cloud computing application including the request included in the cloud computing request message is stored; using the cloud computing application when the cloud computing application is stored;

When the cloud computing application is not stored, the cloud computing application is requested from the cloud computing server.

The cloud processing method according to claim 8, wherein the requesting the cloud computing application to the cloud computing server further includes:

Sending an application request message including the identity identifier and the requested cloud computing application information to the cloud computing server, and receiving the cloud computing application returned by the cloud computing server according to the identity identifier.

The cloud processing method according to claim 9, wherein the cloud computing application returned by the receiving cloud computing server according to the identity identifier comprises:

Receives a cloud computing application that includes a command line and/or graphical interface returned by the cloud server based on the identity.

The cloud processing method according to claim 9, wherein the application request message sent to the cloud computing server further includes the authentication information, and the cloud computing application received by the receiving cloud computing server according to the identity identifier comprises:

Receiving, by the cloud computing server, the cloud computing application returned according to the identity identifier after the authentication is authenticated according to the authentication information.

The cloud processing method according to claim 11, wherein the cloud computing server performs authentication according to the authentication information, including: The cloud computing server calculates the signature information according to the shared key, and passes the authentication when the calculated signature information is consistent with the received authentication information.

The cloud processing method according to claim 7, wherein, when the received cloud processing request message is a cloud storage request message, the method includes:

Receiving a cloud storage request message that is sent by the client, including pre-stored data information, and storing the data information;

When the upload condition is met, the stored data information is sent to the cloud storage server for storage.

The cloud processing method according to claim 13, wherein the storing the stored data information to the cloud storage server for storage comprises:

The stored data information is encrypted and sent to a cloud storage server for storage.

15. A cloud processing method, comprising:

The cloud processing method according to claim 15, wherein the determining the user input request for the cloud processing request is specifically:

Determining that the request is a cloud processing request according to the requested URL information or the destination port number.

The cloud processing method according to claim 15, wherein the cloud processing request is a cloud computing request or a cloud storage request.

The cloud processing method according to claim 17, wherein when the cloud processing request is a cloud storage request, the sending the cloud processing request message to the cloud proxy device is: sending the carrying to the cloud proxy device A cloud storage request message for performing data backup or data confidentiality level identification, the identifier being used to instruct the cloud storage proxy server to perform a backup or encryption operation.

19. A cloud computing proxy device, comprising:

a first receiving module, configured to receive a cloud computing request message sent by the client, where the cloud computing The request message includes the requested cloud computing application information;

An application obtaining module, configured to acquire an application obtained from the cloud computing server according to the cloud computing request message or invoke the stored application acquired from the cloud computing server;

The calculation processing module is configured to perform cloud computing processing according to the application acquired or invoked by the application obtaining module.

The cloud computing proxy device according to claim 19, further comprising: a determining module, configured to determine whether the cloud computing application included in the cloud computing request message is stored;

The application obtaining module is configured to use the cloud computing application when the cloud computing application is stored; and when the cloud computing application is not stored, request the cloud computing application from a cloud computing server.

The cloud computing processing device according to claim 20, wherein the application obtaining module comprises:

a first processing unit, configured to use the cloud computing application when the cloud computing application is stored;

a first sending unit, configured to send, to the cloud computing server, an application request message that includes the identity identifier and the requested cloud computing application information;

The first receiving unit is configured to receive a cloud computing application returned by the cloud computing server according to the identity identifier.

22. A cloud storage agent device, comprising:

a storage module, configured to store the data information;

The cloud storage proxy device according to claim 22, further comprising: The encryption/decryption module is configured to encrypt data information to be uploaded to the cloud storage server, and decrypt the data information downloaded from the cloud storage server.

24. A client, characterized in that:

The client according to claim 24, further comprising: an identifier adding module, configured to add, when the cloud processing request is a cloud storage request, an indication of whether to perform data backup or data The classification of the confidentiality level;

The third sending module is configured to send, to the cloud proxy device, a cloud storage request message carrying an identifier of whether to perform data backup or data confidentiality level.