A data security storage method and system for network security

Abstract

This invention discloses a data security storage method and system for network security, relating to the computer field. The method includes: uploading data to be stored to a data processing server; performing digital signature processing; determining whether the data to be stored requires real-time processing and dynamic updates; performing data preprocessing; performing initialization and encryption algorithm processing; distributing ciphertexts of the first and second data to be stored to a data storage server cluster for data storage; extracting metadata information from the data storage server cluster; inputting the metadata information into a metadata storage server group; and determining whether the running metadata storage server is operating normally. By setting up data classification, data processing, and data storage modules, various types of data can be stored more securely and reliably. Under the optimization of the dual-channel storage model, data storage efficiency is higher, and the cluster load is more balanced.

Description

Technical Field

[0001] The present invention relates to the field of computers, and in particular to a data security storage method and system oriented to network security. Background Art

[0002] Big data refers to a massive data set that cannot be captured, stored, and processed by conventional software tools within a certain time frame. It is characterized by large quantity, wide variety, and strong timeliness. How to effectively use large-scale data to discover useful knowledge and value has become an important topic of common concern at home and abroad. Research on big data generally includes: data collection, data storage, and data analysis. Among them, data storage is at the core of data processing. Data must be stored safely and efficiently before subsequent analysis and mining can be carried out.

[0003] In recent years, with the rapid development of the Internet of Things, cloud computing and sensor technology, a large amount of data characterized by huge quantity, wide variety and strong timeliness has emerged, and the concept of big data has emerged. Big data usually cannot be stored and calculated using conventional software within a certain time frame. Only by adopting new technical architecture can big data play a greater role. Summary of the invention

[0004] In order to solve the above technical problems, a data security storage method and system for network security is provided. This technical solution solves the problem that big data usually cannot be stored and calculated using conventional software within a certain time frame.

[0005] In order to achieve the above purpose, the technical solution adopted by the present invention is:

[0006] A data security storage method for network security, comprising:

[0007] Upload the data to be stored to the data processing server;

[0008] The user performs digital signature processing on the data to be stored to obtain the user's digital signature;

[0009] Determine whether the data to be stored needs real-time processing and dynamic update. If so, the data is output as streaming data; if not, the data is output as static data.

[0010] The static data and the user's digital signature are packaged and input into the space management server, and initialized and encrypted by the algorithm to obtain the first ciphertext of the data to be stored;

[0011] Input the streaming data into the interceptor, perform data preprocessing, and obtain merged streaming data;

[0012] The combined streaming data and the user digital signature are packaged and input into the space management server, and initialized and encrypted by an algorithm to obtain a second ciphertext of the data to be stored;

[0013] The space management server distributes the first encrypted data to be stored and the second encrypted data to be stored to the data storage server group for data storage;

[0014] Extract metadata information from the data storage server cluster;

[0015] Inputting the metadata information into a metadata storage server group, the metadata storage server group including a running server and a backup server;

[0016] Determine whether the running metadata storage server is running normally. If so, no output is made. If not, the running server state is converted to a backup server, and the backup server state is converted to a running server.

[0017] Preferably, the user performs digital signature processing on the data to be stored, and obtaining the user digital signature specifically includes:

[0018] The user obtains a set of public and private key pairs;

[0019] The data to be stored is encrypted using a private key to obtain an unverified digital signature;

[0020] Upload the public key to the data processing server;

[0021] The data processing server uses the public key to decrypt the unverified digital signature to obtain the digital signature to be verified;

[0022] Determine whether the digital signature to be verified is consistent with the data to be stored. If so, output the unverified digital signature as the user's digital signature; if not, output that the identity authentication is incorrect.

[0023] Preferably, the step of packaging the static data and the user digital signature and inputting them into the space management server, and performing initialization and encryption algorithm processing to obtain the first ciphertext of the data to be stored specifically includes:

[0024] Calculate the size of static data and user digital signature package files;

[0025] Get large file setting threshold;

[0026] Determine whether the size of the packaged file is greater than the large file setting threshold. If so, split the packaged file into at least one split file whose file size is the large file setting threshold, and output the remaining files as split files at the same time, and mark all the split files with serial numbers. If not, do not output them;

[0027] The space management server generates a set of public and private key pairs;

[0028] The segmented files or packaged files are encrypted using a public key to obtain at least one first data ciphertext to be stored.

[0029] Preferably, the step of inputting the streaming data into the interceptor and performing data preprocessing to obtain the merged streaming data specifically includes:

[0030] Feed streaming data into the interceptor;

[0031] Generate a time stamp of the streaming data based on the time when the streaming data is input into the interceptor;

[0032] The interceptor determines whether the streaming data is initial streaming data. If so, it generates a data identifier that uniquely identifies the streaming data, and merges the streaming data and its time mark and data identifier to obtain merged streaming data. If not, it obtains the data identifier of the stored data corresponding to the streaming data.

[0033] Querying the location of stored data based on the data identifier of the stored data;

[0034] Deleting the streaming data and its time stamp stored in the stored data location;

[0035] The newly input streaming data and its time mark are combined with the data identifier of the stored data to obtain combined streaming data.

[0036] Preferably, extracting metadata information from the data storage server group specifically includes:

[0037] Get at least one metadata type;

[0038] Determine the hierarchical system of metadata type evaluation indicators and determine the weight composition of factors that affect the metadata weight ranking;

[0039] The factors affecting metadata weight are divided into two sub-factors: the frequency of metadata matching and the frequency of manual correction;

[0040] According to the data storage requirements, two factors that affect the metadata weight are compared in pairs, and the comparison matrix is ​​Schmidt orthogonalized and normalized to obtain an orthogonal matrix and a normalized matrix;

[0041] The weight of each metadata type is calculated using the weight calculation formula based on the orthogonal matrix and the normalized matrix;

[0042] Determine whether the weight of each metadata type is greater than the set weight threshold. If so, output all metadata information under the metadata type. If not, do not output;

[0043] The matrix Schmidt orthogonalization is: In the formula, is the i-th orthogonal matrix, is the i-th comparison matrix;

[0044] The normalization is: In the formula, is the ith normalized matrix, is the norm of the i-th orthogonal matrix;

[0045] The norm is: In the formula, is the number of the mth row and nth column of the i-th orthogonal matrix, , are the number of rows and columns of the i-th orthogonal matrix respectively;

[0046] The weight calculation formula is: In the formula, is the weight of the i-th metadata type.

[0047] Preferably, the determining whether the metadata storage server is operating normally specifically includes:

[0048] The health detector periodically sends health check commands to the metadata storage server and always maintains the session state;

[0049] Determine whether the health detector receives health information feedback from the metadata storage server. If so, the server will be marked as healthy. If not, the metadata storage server on the node is faulty or in poor operating condition. The health detector will mark the server as unhealthy and terminate the session.

[0050] Determine whether the session status is terminated. If so, convert the running server status to the backup server, and the backup server status to the running server; if not, no output is made.

[0051] Furthermore, a data security storage system for network security is proposed, which is used to implement the data security storage method for network security as described above, including: a data classification module, the data classification module is used to upload the data to be stored to the data processing server, the user performs digital signature processing on the data to be stored, obtain the user digital signature, determine whether the data to be stored needs real-time processing and dynamic update, if so, output it as streaming data, if not, output it as static data;

[0052] A data processing module, the data processing module is used to package the static data and the user's digital signature and input them into the space management server, and perform initialization and encryption algorithm processing to obtain the first ciphertext of the data to be stored, input the streaming data into the interceptor, perform data preprocessing, obtain the merged streaming data, package the merged streaming data and the user's digital signature and input them into the space management server, and perform initialization and encryption algorithm processing to obtain the second ciphertext of the data to be stored;

[0053] The data storage module is used by the space management server to distribute the first ciphertext of data to be stored and the second ciphertext of data to be stored to the data storage server group for data storage, extract metadata information from the data storage server group, input the metadata information into the metadata storage server group, and determine whether the running metadata storage server is operating normally.

[0054] Optionally, the data classification module includes:

[0055] A data uploading unit, wherein the data uploading unit is used to upload the data to be stored to the data processing server;

[0056] A user signature unit, which is used for the user to digitally sign the data to be stored to obtain a user digital signature;

[0057] A data judgment unit is used to judge whether the data to be stored needs to be processed in real time and updated dynamically.

[0058] Optionally, the data processing module includes:

[0059] A first data encryption unit, which is used to package the static data and the user's digital signature and input them into the space management server, and perform initialization and encryption algorithm processing to obtain a first ciphertext of data to be stored;

[0060] A data preprocessing unit, the data preprocessing unit is used to input the streaming data into the interceptor, perform data preprocessing, and obtain merged streaming data;

[0061] The second data encryption unit is used to package the merged streaming data and the user's digital signature into a space management server, and perform initialization and encryption algorithm processing to obtain a second ciphertext of data to be stored.

[0062] Optionally, the data storage module includes:

[0063] A data ciphertext storage unit, wherein the data ciphertext storage unit is used for the space management server to distribute the first ciphertext of data to be stored and the second ciphertext of data to be stored to the data storage server group for data storage;

[0064] A metadata extraction unit, the metadata extraction unit is used to extract metadata information from the data storage server group;

[0065] A metadata storage unit, the metadata storage unit is used to input the metadata information into a metadata storage server group;

[0066] A health judgment unit is used to judge whether the metadata storage server in operation is operating normally.

[0067] Compared with the prior art, the present invention has the following beneficial effects:

[0068] By setting up data classification modules, data processing modules and data storage modules, streaming data that grows over time can be stored more safely and reliably. In the storage stage, a partitioned compression storage solution is designed, which can partition and store streaming data according to the time when the streaming data is transmitted, thereby facilitating the retrieval and use of streaming data. Under the optimization of the dual-channel storage model, data storage efficiency is higher and the cluster load is more balanced. BRIEF DESCRIPTION OF THE DRAWINGS

[0069] Figure 1 A flow chart of the data security storage method for network security proposed by the present invention;

[0070] Figure 2 A flow chart of the method for digital signature processing of the present invention;

[0071] Figure 3 A flow chart of the method for initialization and encryption algorithm processing of the present invention;

[0072] Figure 4 A flow chart of the data preprocessing method of the present invention;

[0073] Figure 5 A flowchart of a method for extracting metadata according to the present invention;

[0074] Figure 6 This is a flow chart of a method for determining whether a metadata storage server is operating normally according to the present invention. DETAILED DESCRIPTION

[0075] The following description is used to disclose the present invention so that those skilled in the art can implement the present invention. The preferred embodiments described below are only examples, and those skilled in the art may think of other obvious variations.

[0076] Reference Figure 1 A data security storage method for network security is shown, comprising:

[0077] Upload the data to be stored to the data processing server;

[0078] The user performs digital signature processing on the data to be stored to obtain the user's digital signature;

[0079] Determine whether the data to be stored needs real-time processing and dynamic update. If so, the data is output as streaming data; if not, the data is output as static data.

[0080] The static data and the user's digital signature are packaged and input into the space management server, and initialized and encrypted by the algorithm to obtain the first ciphertext of the data to be stored;

[0081] Input the streaming data into the interceptor, perform data preprocessing, and obtain merged streaming data;

[0082] The combined streaming data and the user digital signature are packaged and input into the space management server, and initialized and encrypted by an algorithm to obtain a second ciphertext of the data to be stored;

[0083] The space management server distributes the first encrypted data to be stored and the second encrypted data to be stored to the data storage server group for data storage;

[0084] Extract metadata information from the data storage server cluster;

[0085] Inputting the metadata information into a metadata storage server group, the metadata storage server group including a running server and a backup server;

[0086] Determine whether the running metadata storage server is running normally. If so, no output is made. If not, the running server state is converted to a backup server, and the backup server state is converted to a running server.

[0087] Reference Figure 2 As shown, the user performs digital signature processing on the data to be stored, and obtaining the user's digital signature specifically includes:

[0088] The user obtains a set of public and private key pairs;

[0089] The data to be stored is encrypted using a private key to obtain an unverified digital signature;

[0090] Upload the public key to the data processing server;

[0091] The data processing server uses the public key to decrypt the unverified digital signature to obtain the digital signature to be verified;

[0092] Determine whether the digital signature to be verified is consistent with the data to be stored. If so, output the unverified digital signature as the user's digital signature; if not, output that the identity authentication is incorrect.

[0093] A digital signature is some data attached to a data unit, or a cryptographic transformation made to a data unit. This data or transformation allows the recipient of the data unit to confirm the source and integrity of the data unit and protect the data to prevent it from being forged by others (such as the recipient). It is a method of signing electronic messages. A signed message can be transmitted in a communication network. Digital signatures can be obtained based on both public key cryptography and private key cryptography, including ordinary digital signatures and special digital signatures.

[0094] Reference Figure 3 As shown, the static data and the user's digital signature are packaged and input into the space management server, and then initialized and encrypted by an algorithm to obtain the first ciphertext of the data to be stored, which specifically includes:

[0095] Calculate the size of static data and user digital signature package files;

[0096] Get large file setting threshold;

[0097] Determine whether the size of the packaged file is greater than the large file setting threshold. If so, split the packaged file into at least one split file whose file size is the large file setting threshold, and output the remaining files as split files at the same time, and mark all the split files with serial numbers. If not, do not output them;

[0098] The space management server generates a set of public and private key pairs;

[0099] The segmented files or packaged files are encrypted using a public key to obtain at least one first data ciphertext to be stored.

[0100] In order to improve the encryption and decryption efficiency of a single file, the data is first segmented, and then the segmented data blocks are encrypted and stored separately. Since processing a large number of small files will significantly reduce performance, the more blocks the original file is segmented into, the more small files there are. In order to better integrate the encryption algorithm with the dual-channel storage mode, the file is segmented into at least one file whose size reaches the threshold before encryption. This not only ensures that the data is encrypted and stored at the same time, but also avoids the generation of more small files. In addition, before data segmentation, the file size is judged, and the segmentation operation is only implemented for files that reach the threshold.

[0101] Reference Figure 4 As shown, the streaming data is input into the interceptor for data preprocessing to obtain the merged streaming data, which specifically includes:

[0102] Feed streaming data into the interceptor;

[0103] Generate a time stamp of the streaming data based on the time when the streaming data is input into the interceptor;

[0104] The interceptor determines whether the streaming data is initial streaming data. If so, it generates a data identifier that uniquely identifies the streaming data, and merges the streaming data and its time mark and data identifier to obtain merged streaming data. If not, it obtains the data identifier of the stored data corresponding to the streaming data.

[0105] Querying the location of stored data based on the data identifier of the stored data;

[0106] Deleting the streaming data and its time stamp stored in the stored data location;

[0107] The newly input streaming data and its time mark are combined with the data identifier of the stored data to obtain combined streaming data.

[0108] Traditional static data storage methods will reduce the efficiency of data transmission and storage. The role of the interceptor is to filter the content of streaming data and complete preliminary cleaning. It can process the data content according to the specified filtering rules through stream processing.

[0109] Reference Figure 5 As shown, extracting metadata information from the data storage server group specifically includes:

[0110] Get at least one metadata type;

[0111] Determine the hierarchical system of metadata type evaluation indicators and determine the weight composition of factors that affect the metadata weight ranking;

[0112] The factors affecting metadata weight are divided into two sub-factors: the frequency of metadata matching and the frequency of manual correction;

[0113] According to the data storage requirements, two factors that affect the metadata weight are compared in pairs, and the comparison matrix is ​​Schmidt orthogonalized and normalized to obtain an orthogonal matrix and a normalized matrix;

[0114] The weight of each metadata type is calculated using the weight calculation formula based on the orthogonal matrix and the normalized matrix;

[0115] The matrix Schmidt orthogonalization is: In the formula, is the i-th orthogonal matrix, is the i-th comparison matrix;

[0116] The normalization is:

[0117] In the formula, is the ith normalized matrix, is the norm of the i-th orthogonal matrix;

[0118] The norm is:

[0119] In the formula, is the number of the mth row and nth column of the i-th orthogonal matrix, , are the number of rows and columns of the i-th orthogonal matrix respectively;

[0120] The weight calculation formula is:

[0121] In the formula, is the weight of the ith metadata type. Metadata, also known as intermediary data or relay data, is data that describes data, mainly information that describes data attributes, used to support information such as indicating storage locations, historical data, and resources.

[0122] Metadata is a kind of electronic catalog. In order to achieve the purpose of cataloging, it is necessary to describe and collect the content or characteristics of the data, so as to achieve the purpose of assisting data retrieval.

[0123] Reference Figure 6 As shown, judging whether the metadata storage server is running normally specifically includes:

[0124] The health detector periodically sends health check commands to the metadata storage server and always maintains the session state;

[0125] Determine whether the health detector receives health information feedback from the metadata storage server. If so, the server will be marked as healthy. If not, the metadata storage server on the node is faulty or in poor operating condition. The health detector will mark the server as unhealthy and terminate the session.

[0126] Determine whether the session status is terminated. If so, convert the running server status to the backup server, and the backup server status to the running server; if not, no output is made.

[0127] When the running server is in an unhealthy state, the health detector can promptly switch the unhealthy server to a standby state and switch the backup healthy server to a running server to ensure the stability and security of data upload.

[0128] Furthermore, the present solution also proposes a computer-readable storage medium on which a computer-readable program is stored. When the computer-readable program is called, the above-mentioned data security storage method for network security is executed.

[0129] It is understandable that the storage medium may be a magnetic medium, such as a floppy disk, a hard disk, or a magnetic tape; an optical medium, such as a DVD; or a semiconductor medium, such as a solid state drive (SSD).

[0130] To sum up, the advantages of the present invention are: by setting up a data classification module, a data processing module and a data storage module, it is possible to store streaming data that grows over time more safely and reliably. A partitioned compression storage scheme is designed in the storage stage, which can partition and store streaming data according to the time when the streaming data is transmitted, thereby facilitating the retrieval and use of streaming data. Under the optimization of the dual-channel storage model, the data storage efficiency is higher and the cluster load is more balanced.

[0131] The above shows and describes the basic principles, main features and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The above embodiments and descriptions only describe the principles of the present invention. The present invention may be subject to various changes and improvements without departing from the spirit and scope of the present invention. These changes and improvements fall within the scope of the present invention. The scope of protection claimed by the present invention is defined by the attached claims and their equivalents.

Claims

1. A data security storage method for network security, It is characterized in that include: Upload the data to be stored to the data processing server; The user performs digital signature processing on the data to be stored to obtain the user's digital signature; Determine whether the data to be stored needs real-time processing and dynamic update. If so, the data is output as streaming data; if not, the data is output as static data. The static data and the user's digital signature are packaged and input into the space management server, and initialized and encrypted by the algorithm to obtain the first ciphertext of the data to be stored; Input the streaming data into the interceptor, perform data preprocessing, and obtain merged streaming data; The combined streaming data and the user digital signature are packaged and input into the space management server, and initialized and encrypted by an algorithm to obtain a second ciphertext of the data to be stored; The space management server distributes the first encrypted data to be stored and the second encrypted data to be stored to the data storage server group for data storage; Extract metadata information from the data storage server cluster; Inputting the metadata information into a metadata storage server group, the metadata storage server group including a running server and a backup server; Determine whether the running metadata storage server is running normally. If yes, no output is made. If no, the running server status is converted to a backup server, and the backup server status is converted to a running server. The step of inputting the streaming data into the interceptor and performing data preprocessing to obtain the merged streaming data specifically includes: Feed streaming data into the interceptor; Generate a time stamp of the streaming data based on the time when the streaming data is input into the interceptor; The interceptor determines whether the streaming data is initial streaming data. If so, it generates a data identifier that uniquely identifies the streaming data, and merges the streaming data and its time mark and data identifier to obtain merged streaming data. If not, it obtains the data identifier of the stored data corresponding to the streaming data. Querying the location of stored data based on the data identifier of the stored data; Deleting the streaming data and its time stamp stored in the stored data location; Merging the newly input streaming data and its time stamp with the data identifier of the stored data to obtain merged streaming data; The step of extracting metadata information from the data storage server group specifically includes: Get at least one metadata type; Determine the hierarchical system of metadata type evaluation indicators and determine the weight composition of factors that affect the metadata weight ranking; The factors affecting metadata weight are divided into two sub-factors: the frequency of metadata matching and the frequency of manual correction; According to the data storage requirements, two factors that affect the metadata weight are compared in pairs, and the comparison matrix is ​​Schmidt orthogonalized and normalized to obtain an orthogonal matrix and a normalized matrix; The weight of each metadata type is calculated using the weight calculation formula based on the orthogonal matrix and the normalized matrix; Determine whether the weight of each metadata type is greater than the set weight threshold. If so, output all metadata information under the metadata type. If not, do not output; The matrix Schmidt orthogonalization is: In the formula, is the i-th orthogonal matrix, is the i-th comparison matrix; The normalization is: In the formula, is the ith normalized matrix, is the norm of the i-th orthogonal matrix; The norm is: In the formula, is the number of the mth row and nth column of the i-th orthogonal matrix, , are the number of rows and columns of the i-th orthogonal matrix respectively; The weight calculation formula is: In the formula, is the weight of the i-th metadata type.

2. A data security storage method for network security according to claim 1, It is characterized in that The user performs digital signature processing on the data to be stored, and obtaining the user digital signature specifically includes: The user obtains a set of public and private key pairs; The data to be stored is encrypted using a private key to obtain an unverified digital signature; Upload the public key to the data processing server; The data processing server uses the public key to decrypt the unverified digital signature to obtain the digital signature to be verified; Determine whether the digital signature to be verified is consistent with the data to be stored. If so, output the unverified digital signature as the user's digital signature; if not, output that the identity authentication is incorrect.

3. A data security storage method for network security according to claim 2, It is characterized in that The step of packaging the static data and the user digital signature and inputting them into the space management server, and performing initialization and encryption algorithm processing to obtain the first ciphertext of the data to be stored specifically includes: Calculate the size of static data and user digital signature package files; Get large file setting threshold; Determine whether the size of the packaged file is greater than the large file setting threshold. If so, split the packaged file into at least one split file whose file size is the large file setting threshold, and output the remaining files as split files at the same time, and mark all the split files with serial numbers. If not, do not output them; The space management server generates a set of public and private key pairs; The segmented files or packaged files are encrypted using a public key to obtain at least one first data ciphertext to be stored.

4. A data security storage method for network security according to claim 3, It is characterized in that The determining whether the metadata storage server is operating normally specifically includes: The health detector periodically sends health check commands to the metadata storage server and always maintains the session state; Determine whether the health detector receives health information feedback from the metadata storage server. If so, the metadata storage server is marked as healthy. If not, the metadata storage server is output to be faulty or in poor operating condition. The health detector marks the metadata storage server as unhealthy and the session is terminated. Determine whether the session status is terminated. If so, convert the running server status to the backup server, and the backup server status to the running server; if not, no output is made.

5. A data security storage system for network security, used to implement the data security storage method for network security as claimed in any one of claims 1 to 4, It is characterized in that include: A data classification module is used to upload the data to be stored to the data processing server, perform digital signature processing on the data to be stored by the user, obtain the user's digital signature, and determine whether the data to be stored needs real-time processing and dynamic update. If so, the data is output as streaming data, and if not, the data is output as static data; A data processing module, the data processing module is used to package the static data and the user's digital signature and input them into the space management server, and perform initialization and encryption algorithm processing to obtain the first ciphertext of the data to be stored, input the streaming data into the interceptor, perform data preprocessing, obtain the merged streaming data, package the merged streaming data and the user's digital signature and input them into the space management server, and perform initialization and encryption algorithm processing to obtain the second ciphertext of the data to be stored; The data storage module is used by the space management server to distribute the first ciphertext of data to be stored and the second ciphertext of data to be stored to the data storage server group for data storage, extract metadata information from the data storage server group, input the metadata information into the metadata storage server group, and determine whether the running metadata storage server is operating normally.

6. A data security storage system for network security according to claim 5, It is characterized in that The data classification module comprises: A data uploading unit, wherein the data uploading unit is used to upload the data to be stored to the data processing server; A user signature unit, which is used for the user to digitally sign the data to be stored to obtain a user digital signature; A data judgment unit is used to judge whether the data to be stored needs to be processed in real time and updated dynamically.

7. A data security storage system for network security according to claim 6, It is characterized in that The data processing module comprises: A first data encryption unit, which is used to package the static data and the user's digital signature and input them into the space management server, and perform initialization and encryption algorithm processing to obtain a first ciphertext of data to be stored; A data preprocessing unit, the data preprocessing unit is used to input the streaming data into the interceptor, perform data preprocessing, and obtain merged streaming data; The second data encryption unit is used to package the merged streaming data and the user's digital signature into a space management server, and perform initialization and encryption algorithm processing to obtain a second ciphertext of data to be stored.

8. A data security storage system for network security according to claim 7, It is characterized in that The data storage module comprises: A data ciphertext storage unit, wherein the data ciphertext storage unit is used for the space management server to distribute the first ciphertext of data to be stored and the second ciphertext of data to be stored to the data storage server group for data storage; A metadata extraction unit, the metadata extraction unit is used to extract metadata information from the data storage server group; A metadata storage unit, the metadata storage unit is used to input the metadata information into a metadata storage server group; A health judgment unit is used to judge whether the metadata storage server in operation is operating normally.

Images