Data access method, access verification device and data storage system

Abstract

The invention discloses a data access method, an access verification device and a data storage system. The data access method is applied to the access verification device, the access verification device has a preset license chain, permissions are respectively set for data and a user on the license chain, and the permissions are characterized by the type and number of tokens. The method comprises the following steps: querying the access permission of the user on the preset license chain in response to a data access request sent by the user through a client, wherein the access permission is characterized by the type and number of tokens; generating data access information based on the type and number of tokens in the access permission; and sending the data access information to the client, so that the client accesses the data in the data storage system based on the data access information.

Description

technical field

[0001] The present application relates to the field of communication technology, and in particular to a data access method, access verification equipment and a data storage system. Background technique

[0002] In existing data sharing services, a hierarchical authority management system is usually adopted. For example, after the upper layers that require hierarchical authorization are mutually authenticated, they are then sent down to the layer where the data requesting client is located to complete the authorization.

[0003] Therefore, in the above permission management, different levels of clients correspond to different data permissions, and different data have different visibility to different clients, resulting in the formation of a massive mapping relationship between data and clients, and then layer after layer of requests. Authorization, resulting in low efficiency of data access. Contents of the invention

[0004] In view of this, the purpose of...

Examples

Embodiment Construction

[0055] In order to realize data sharing, data is usually shared in a data storage system, and security is ensured by setting data access permissions. At present, the commonly used authority management scheme adopts the hierarchical authorization mechanism. The data sharing service between different entities needs to rely on the mutual authentication of the upper layer of the hierarchical authorization system, and then send it down to the level of the data requesting entity to complete the authorization. And because different levels of entities (user clients) correspond to different data permissions, different data have different visibility to different entities, resulting in the formation of massive mapping relationships between data and users (clients), and layer after layer requests. Issuing authorization leads to low data sharing efficiency, and it is difficult to flexibly support multi-level sharing rights management.

[0056] In order to solve the above problems, the perm...

technical field

[0001] The present application relates to the field of communication technology, and in particular to a data access method, access verification equipment and a data storage system. Background technique

[0002] In existing data sharing services, a hierarchical authority management system is usually adopted. For example, after the upper layers that require hierarchical authorization are mutually authenticated, they are then sent down to the layer where the data requesting client is located to complete the authorization.

[0003] Therefore, in the above permission management, different levels of clients correspond to different data permissions, and different data have different visibility to different clients, resulting in the formation of a massive mapping relationship between data and clients, and then layer after layer of requests. Authorization, resulting in low efficiency of data access. Contents of the invention

[0004] In view of this, the purpose of...

Examples

Embodiment Construction

[0055] In order to realize data sharing, data is usually shared in a data storage system, and security is ensured by setting data access permissions. At present, the commonly used authority management scheme adopts the hierarchical authorization mechanism. The data sharing service between different entities needs to rely on the mutual authentication of the upper layer of the hierarchical authorization system, and then send it down to the level of the data requesting entity to complete the authorization. And because different levels of entities (user clients) correspond to different data permissions, different data have different visibility to different entities, resulting in the formation of massive mapping relationships between data and users (clients), and layer after layer requests. Issuing authorization leads to low data sharing efficiency, and it is difficult to flexibly support multi-level sharing rights management.

[0056] In order to solve the above problems, the perm...

Images