Secure mounting method and system for network file system

Abstract

A secure mounting method for a network archive system, executed by a local device communicatively connected to a remote device, includes the following steps: (A) upon receiving a mounting request from the remote device, generating and transmitting a ticket with a verification code to the remote device; (B) upon receiving mounting data from the remote device having an authentication hash value, verifying the mounting data based on the authentication hash value of the mounting data, the verification code of the ticket, and a hash key; and (C) upon successful verification, mounting based on the mounting data. The present invention also provides a network archive system security system.

Claims

1. A method for securely mounting a network file system, executed by a local device communicatively connected to a remote device, the method comprising the following steps: (A) upon receiving a mounting request from the remote device, generating and transmitting a ticket with a verification code to the remote device; (B) upon receiving mounting data from the remote device having an authentication hash value, verifying the mounting data based on the authentication hash value of the mounting data, the verification code of the ticket, and a hash key, wherein... Step (B) includes the following sub-steps: (B-1) generating a verification hash value based on the verification code and hash key of the ticket; and (B-1) determining whether the authentication hash value of the mounted data matches the verification hash value to verify the mounted data, wherein, when it is determined that the authentication hash value of the mounted data matches the verification hash value, the verification is deemed successful; when it is determined that the authentication hash value of the mounted data does not match the verification hash value, the verification is deemed unsuccessful; and (C) when the verification is successful, mounting is performed based on the mounted data.

2. The secure mounting method for a network file system as described in claim 1, wherein the local device stores a local public key, a local private key corresponding to the local public key, and a remote public key from the remote device, and further includes the following step before step (A): (D) when a cryptographic hash key is received from the remote device, the local private key is used to decrypt the cryptographic hash key to obtain the hash key; wherein, In step (A), after decrypting the mount request using the local private key, the ticket is generated, and after encrypting the ticket using the remote public key, it is transmitted to the remote device. In step (B), after decrypting the mount data using the remote public key, the mount data is verified.

3. The secure mounting method for a network file system as described in claim 1, wherein, In step (C), the ticket is also destroyed.

4. The secure mounting method for a network file system as described in claim 1, wherein, In step (A), a timer is also started to generate a time record. After step (A), the following steps are included: (E) determining whether a mount has been performed for the mount request; (F) if it is determined that no mount has been performed for the mount request, determining whether the time record is greater than a time threshold; (G) if it is determined that the time record is greater than the time threshold, destroying the ticket; and (H) if it is determined that the time record is less than or equal to the time threshold, repeating step (E).

5. A secure mounting system for a network file system, comprising: a remote device; and a local device communicatively connected to the remote device; wherein, The remote device generates and transmits a mount request to the local device. After receiving the mount request, the local device generates and transmits a ticket with a verification code to the remote device. The remote device generates and transmits mount data with an authentication hash value to the local device based on the ticket. The local device verifies the mount data based on the authentication hash value of the mount data, the verification code of the ticket, and a hash key. The local device generates a verification hash value based on the verification code of the ticket and the hash key, and determines whether the authentication hash value of the mount data matches the verification hash value to verify the mount data. When the authentication hash value of the mount data matches the verification hash value, the verification is considered successful. When the authentication hash value of the mount data does not match the verification hash value, the verification is considered unsuccessful. When the verification is successful, the local device mounts the mount data.

6. The secure mounting system for a network archive system as described in claim 5, wherein, The remote device stores the hash key, a remote public key, a remote private key corresponding to the remote public key, and a local public key from the local device. The local device stores the local public key, a local private key corresponding to the local public key, and the remote public key. The remote device uses the local public key to encrypt the hash key to generate and transmit an encrypted hash key to the local device. The local device uses the local private key to decrypt the encrypted hash key to obtain the hash key. The remote device uses the local public key to mount... The request is encrypted and transmitted to the local device. The local device decrypts the mounting request using its local private key, generates the ticket, encrypts the ticket using the remote public key, and transmits it to the remote device. The remote device decrypts the ticket using its remote private key, generates an authentication hash value based on the hash key and the verification code of the ticket, generates the mounting data, encrypts the mounting data using the remote private key, and transmits it to the local device. The local device decrypts the mounting data using its local private key and verifies the mounting data.

7. The secure mounting system for a network archive system as described in claim 5, wherein, When verification is successful, the local device also destroys the ticket.

8. The secure mounting system for a network archive system as described in claim 5, wherein, After receiving the mounting request, the local device also starts timing to generate a timing record. The local device determines whether the mounting related to the mounting request has been performed. If it is determined that the mounting related to the mounting request has not been performed, it determines whether the timing record is greater than a time threshold. If it is determined that the timing record is greater than the time threshold, the ticket is destroyed. If it is determined that the timing record is less than or equal to the time threshold, the determination of whether the mounting related to the mounting request has been performed is repeated.

Images