Distributed safety memory system

Abstract

The invention discloses a distributed security storage system, pertains to the technical filed of computer storage and aims at overcoming the problems of the heavy burden of a security manager and complex user authority management in the current security storage system based on a certificate. The storage system of the invention consists of an application client connected to a network, a storage device, a security and strategy manager and a metadata server; the security and strategy manager stores and manages the access control entry, access control strategy and rule of the whole system and carries out access strategy control and authority control over the storage device according to the access control entry, access control strategy and rule of the whole system, including the changes of the priority and inheritance rules of the access control entry and adding and deletion of the access control entry. The storage system of the invention distributes centralized authorization to storage nodes, avoids the performance bottle neck of the security manager, solves the problem of the complex user authority management, combines identification management and access control, eliminates access control redundancy and security holes and is applicable to establishing a large-scale security storage system with high performance.

Description

technical field [0001] The invention belongs to the technical field of computer storage, and in particular relates to a distributed safety storage system. Background technique [0002] Scientific computing, space exploration, e-commerce and multimedia applications require the establishment of high-performance mass information storage systems. The scale of future storage systems will reach PB level, and some important applications require storage system bandwidth to reach 1TB / S or more. PB-level high-performance storage systems have hundreds of storage devices, and provide concurrent and burst services to a large number of users. These factors and the existence of sensitive data pose challenges to the security of PB-level storage systems. [0003] In recent years, a lot of research has been done on the construction technology and security mechanism of PB-level storage systems. Most of the mass storage systems that have been built and are currently in use are composed of three...

AI Technical Summary

Problems solved by technology

[0007] The present invention proposes a distributed secure storage system, aiming at overcoming the problems of heavy load on the security manager and complicated management of user rights in the existing certificate-based secure storage system, and eliminating the redundancy and security of access control in the existing system Vulnerabilities, meeting the security requirements of a large-scale, high-performance information storage system with a large amount of information, complex data types, and many users

Images