Encryption and decryption method and apparatus in virtualization system, and system

A computer, comprising:

• a processor;
• and
• a memory coupled to the processor and having a plurality of instructions stored thereon, the processor executing instructions of a VMM program running on the computer to:
• acquire to-be-written data of a user virtual machine running on the computer;
• determine, according to a second association relationship between a hard disk image identifier and a hard disk image attribute, an attribute of a hard disk image that is of the user virtual machine and into which the data is to be written;
• the processor executing instructions of an encryption and decryption virtual machine program running on the computer to:
• acquire the identifier of the hard disk image into which the data is to be written and the to-be-written data;
• encrypt the to-be-written data by using the encryption key according to the acquired identifier and the first relationship;
• the processor executing instructions of the VMM program to perform operations further comprising:
• write the encrypted data into the hard disk image into which the data is to be written.