File access method and system

Abstract

The invention discloses a file access method and a file access system. The file access method comprises the following steps that: a client submits authentication information to an authentication server; the authentication server returns an access token, and stores corresponding user information; the client transmits a file acquisition request to a file server; after receiving the file acquisition request, the file server extracts an access token, and transmits the access token to the authentication server to apply for verification; if the access token is verified to be legal, the authentication server returns user information corresponding to the access token to the file server; the file server receives the user information, and transmits a file address and the user information to a right auditing server for right judgment; if determining that the client has right, the right auditing server returns request legality information to the file server; and the file server acquires a file from storage equipment according to the file address, and transmits the file to the client. Due to the adoption of the technical scheme, file access can be accurately controlled according to user identity at a server, and the detailed data statistics of the file access can be realized.

Description

technical field [0001] The invention relates to the technical field of Internet applications, in particular to a file access method and system. Background technique [0002] In Internet applications, the access addresses of files are often directly exposed in the form of URLs in clear text. For access to dynamic content, application developers can control access in the form of user names and passwords. When accessing static files, it is difficult to implement authentication control on user access. [0003] Static files (such as important audio-visual materials, document pictures, etc.) have high privacy and are important resources in the entire system platform. Each file of this type will be managed by the database and then assigned different permissions. Only authorized users can use these files correctly, and can make detailed statistics on the access and usage of each file. [0004] On websites that require permissions, users need to log in with a username and password ...

AI Technical Summary

Problems solved by technology

[0007] The existing published technical solutions aim at the anti-leeching of files by judging the user's local information to distinguish identities, such as http_referer (judgment of origin), IP judgment, User-Agent (user access agent, such as including local operating system, etc.) information), but these technical means can be artificially forged by attackers who have mastered high technology, and the protection mechanism is relatively low.

[0008] Moreover, in the existing way, the server completes the address encryption. The key is that the output address is encrypted by structure. The server only checks the legality of the address structure to judge whether the address request is forged, and does not perform real authority verification. Once the address is encrypted If the algorithm is cracked, the hacker understands the algorithm of constructing the address, and will be able to construct a legal address arbitrarily, which will bring security risks to the files on the server

[0009] In addition, because these encryption methods only prevent the construction of the address, and do not subdivide the permissions of the users who access the address, when the file server obtains the address access, it cannot grasp the specific information of the user corresponding to the request, and cannot complete relevant statistics and other information. All kinds of business logic around users

These restrictions determine that the current anti-leech means cannot meet the requirements for comprehensive and in-depth control of file access

Images