Safety authentication method of cloud storage system

Abstract

The invention relates to a safety authentication method of a cloud storage system, belonging to the field of storage technology and information security technology of computers. The method solves the problems that the existing safety authentication methods are complex in authentication process and great in authentication consumption, and aims at providing simple, flexible and efficient authentication with high expandability and high safety for service safety of a cloud storage system, so as to prevent invasion of external or internal attackers to the storage system. The method comprises a client process, an authentication end progress and a storage end progress; the client loads the user identifiers of all login users, and the authentication end loads an access control library. The method checks whether the operation authorization of the user is legal by calculating the verifying identifier, the storage end does not need to maintain the access control library any longer, and verification on the access request of the user can be completed with simple calculation, thereby greatly reducing expense of the storage system on access control, and providing flexible, safe, reliable and efficient file access for users having operation authorization in the large-scale cloud storage system.

Description

technical field [0001] The invention belongs to the field of computer storage technology and information security technology, and in particular relates to a security authentication method for a cloud storage system. Background technique [0002] Cloud storage system is a new concept extended and developed from the concept of cloud computing. For users, cloud storage system does not refer to a specific device, but a collection of many storage devices and servers. body. The fundamental goal of cloud storage system security is to ensure the security of stored and accessed data, so before authorizing users to access data, cloud storage systems should authenticate the user's identity. When a user accesses a data object, by querying the access control list of the data object on the authentication side, if the user's access control item can be found and has the permission to request the operation, the user will be granted access to the data, otherwise the user's access will be den...

AI Technical Summary

Problems solved by technology

[0016] The invention proposes a security authentication method for a cloud storage system, which solves the problems of complex authentication process and huge authentication consumption in the existing security authentication met

Images