A security protection access method and system for realizing object storage

Abstract

The invention provides a safety protection access method for realizing object storage. The method comprises the following steps that a client obtains an access certificate from an authentication server and sends the access certificate and an access request to at least three metadata servers together; after the metadata servers check the validity of the access certificate and the access request, the metadata servers process according to the access request type and return corresponding metadata information to the client; and the client requests data from an object storage device after receiving the metadata information, the object storage device verifies the client after receiving the request, and the object storage device sends the data to the client after successful verification. Correspondingly, the invention also provides a safety protection access system for realizing object storage. Through setting the metadata servers of different systems, the system diversity is realized while the system reliability and the safety for data storage access are enhanced, and furthermore, the client is authenticated through a set authentication server, so that the safety performance for data access is enhanced.

Description

technical field [0001] The invention relates to the field of computers, in particular to a method and system for realizing security protection access of object storage. Background technique [0002] With the popularization and rapid development of Internet and network applications, the number of users is increasing day by day, the geographical space of data distribution is wider, the amount of data storage is increasing explosively, the requirements for data reliability are getting higher and more types of equipment for accessing data are increasing, The data storage system and data security are tested. [0003] The great development of computer and network technology has promoted the continuous improvement and improvement of the file system. Using distributed storage (such as SAN and NAS) can effectively store the generated big data. In the face of massive data, there are also extremely high requirements for data processing capabilities, and an efficient file system will ...

AI Technical Summary

Problems solved by technology

[0006] The data and metadata of the object storage system are stored separately. Due to the centralized storage of metadata, although it is easy to manage, when the amount of data increases and the number of access requests increases, in order to meet the capacity and IO bandwidth, as a key part of the system, the pressure will suddenly increase. increase

The existing object storage device access technology has the following defects: (1) With the increase of access requests, the metadata server in the object storage system will go down, and the probability of system failure will increase accordingly; (2) due to the storage Devices with key data are more likely to become the main target of data theft. In general object storage systems, users obtain metadata directly from the metadata server, and the metadata server is directly exposed to the outside, which poses a greater risk

Images