Design and storage method for resource and its access control policy in high-performance access control system

Abstract

The present invention relates to a method of managing distributed file system with multi-duplicates, adopting a frequency-based duplicate management mechanism. According to information trends of the frequency of the files which are read, written, and visited as well as the source of visit, the status of the file duplicates is changed. Through the dynamic increase and decrease of the number of duplicates and the change of storage position, specifically including duplicate granularity management, duplicate creation strategy, duplicate selection and position, and duplicate consistency management. The method of creating duplicates of files comprises creation initiated by a user and creation initiated by nodes, adopting data grid and strategy based on motivation of profits. The duplicate position supply maps a logical file onto a proper duplicate and provides the user with a duplicate at the minimum cost and of the maximum visit efficiency. The present invention has the advantages that: services provided continue the favorable attributes of a distributed file system, including loose coupling, high availability, high reliability and high cost-effectiveness.

Description

technical field [0001] The invention relates to the field of computer information security, and mainly relates to a method for designing and storing resources and access control policies in a high-performance access control system. Background technique [0002] At present, many large enterprises have increasing requirements for the performance and concurrency of access control systems, which put forward higher requirements for the storage of resources and authorization policies in access control systems. The number of resources in modern enterprises is often massive, and resource authorization policies are complex. Therefore, how to manage and store distributed resources and their policies to ensure access performance suitable for enterprise-level applications is one of the important issues in access control systems; at the same time, access control The system should be able to adopt a unified strategy for unified management of distributed resources to ensure the reasonable ...

AI Technical Summary

Problems solved by technology

Some existing products store all authorization policies in a policy certificate, and read and write the same certificate every time access control or resource access policy is formulated, which affects system performance and concurrent access capabilities

Other products use the policy certificate issued by the authority and the use condition certificate issued by multiple managers to jointly perform access control; when performing access control, it needs to read all the use condition certificates, which also affects the performance of the system

Images