Storage resource access method

Abstract

The invention discloses a storage resource access method, and belongs to the field of Internet. The method comprises the steps that a router receives a target access request used for accessing storage resources in a local area network where the router is located, the target access request carries target information, and the target information comprises user information of a target user; the router authenticates the target user based on the target information; under the condition that the target user is an authorized access user, the router allows the target user to access a storage resource; wherein the storage resource comprises a storage resource on the router or a storage resource on a storage device connected with the router.

Description

Technical Field

[0001] The present application belongs to the field of Internet, and specifically relates to a method for accessing storage resources. Background Art

[0002] Network Attached Storage (NAS) is a device with storage function connected to the network, also known as "network storage", and is a dedicated data storage server. Because NAS devices can centrally manage data and can achieve portable data management, they are usually used for home storage.

[0003] The related technology usually directly accesses the storage resources on the NAS device, and there is a problem of low security in the process of accessing the storage resources. Summary of the invention

[0004] The embodiment of the present application provides a method for accessing storage resources, which can solve the problem of low security in the process of accessing storage resources.

[0005] In a first aspect, an embodiment of the present application provides a method for accessing a storage resource, the method being executed by a router, comprising:

[0006] The router receives a target access request for accessing a storage resource in a local area network where the router is located, the target access request carrying target information, the target information including user information of a target user;

[0007] The router authenticates the target user based on the target information;

[0008] In the case where the target user is an authorized access user, the router allows the target user to access the storage resource;

[0009] The storage resources include storage resources on the router or storage resources on a storage device connected to the router.

[0010] In a second aspect, an embodiment of the present application provides a method for accessing a storage resource, the method being executed by a target terminal, comprising:

[0011] The target terminal sends a target access request for accessing storage resources in the local area network where the router is located, and the target access request carries user information of the target user; the user information of the target user is used to authenticate the target user;

[0012] In the case where the target user is an authorized access user, the target terminal accesses the storage resource;

[0013] The storage resources include storage resources on the router or storage resources on a storage device connected to the router.

[0014] In a third aspect, an embodiment of the present application provides a method for accessing a storage resource, the method being executed by a cloud server, comprising:

[0015] The cloud server receives a first access request for accessing a storage resource in a local area network where the router is located, wherein the first access request carries target information, and the target information includes user information of a target user;

[0016] The cloud server authenticates the target user based on the target information;

[0017] In the case where the target user is an authorized access user, the cloud server allows the target user to access storage resources;

[0018] The storage resources include storage resources on a router or storage resources on a storage device connected to the router.

[0019] At least one of the above technical solutions provided in the embodiments of the present application can achieve the following technical effects:

[0020] In an embodiment of the present application, a router receives a target access request for accessing a storage resource in a local area network where the router is located, the target access request carries target information, and the target information includes user information of a target user; the router authenticates the target user based on the target information; if the target user is an authorized access user, the router allows the target user to access the storage resource; wherein the storage resource includes a storage resource on the router or a storage resource on a storage device connected to the router. In this way, when the router receives a target access request for accessing a storage resource in a local area network where the router is located, the target user can be authenticated based on the user information of the target user carried in the target access request; if the target user is an authorized access user, the router allows the target user to access the storage resource, and authentication can be implemented in the scenario of accessing the storage resource in the local area network where the router is located, thereby improving the security of accessing the storage resource in the local area network where the router is located, and solving the problem of low security of storage resources existing in the related art. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the embodiments are briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present invention and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without creative work.

[0022] Figure 1 is a flow chart of a method for accessing storage resources provided in an embodiment of the present application;

[0023] Figure 2 It is a schematic diagram of an implementation environment of a method for accessing hard disk resources provided in an embodiment of the present application;

[0024] Figure 3 is a flowchart of another method for accessing storage resources provided in an embodiment of the present application;

[0025] Figure 4 is a flowchart of another method for accessing storage resources provided in an embodiment of the present application;

[0026] Figure 5 is a flowchart of another method for accessing storage resources provided in an embodiment of the present application;

[0027] Figure 6 It is a structural block diagram of a storage resource access system provided in an embodiment of the present application;

[0028] Figure 7 It is a specific flow chart of a method for accessing storage resources provided in an embodiment of the present application;

[0029] Figure 8 It is a structural block diagram of a router provided in an embodiment of the present application;

[0030] Fig. 9 It is a structural block diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0031] The following will be combined with the drawings in the embodiments of the present application to clearly describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0032] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable under appropriate circumstances, so that the embodiments of the present application can be implemented in an order other than those illustrated or described here, and the objects distinguished by "first", "second", etc. are generally of one type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally indicates that the objects associated with each other are in an "or" relationship.

[0033] Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the invention claimed for protection, but merely represents selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0034] The storage resource access method provided in the embodiment of the present application is applied to the access to hard disk resources. In particular, when a router receives a target user's target access request to storage resources within the local area network where the router is located, the target user can be authenticated based on the user information in the target information, and when the authentication is successful, the target user is allowed to access the storage resources.

[0035] The storage resource access method provided in the embodiment of the present application may be executed by a target device, wherein the target device may be a router or a gateway device.

[0036] The following describes in detail the storage resource access method provided by the embodiment of the present application through specific embodiments and application scenarios in conjunction with the accompanying drawings.

[0037] See also Figure 1 , Figure 1 FIG. 1 is a flow chart of a method for accessing storage resources provided by an embodiment of the present application. Figure 1 As shown, the method comprises the following steps:

[0038] Step 110: The router receives a target access request for accessing storage resources in the local area network where the router is located. The target access request carries target information, and the target information includes user information of a target user.

[0039] In the embodiment of the present application, when the target user initiates a target access request to the storage resource through the target terminal, the target access request may carry the user information of the target user (such as user name or user account information), and the router may receive the target access request and obtain the user information of the target user. In addition, the target information may also include the terminal identification of the target terminal, and the terminal identification may be used to uniquely identify the target terminal.

[0040] Please refer to Figure 2 , Figure 2 Schematic diagram of an implementation environment of a method for accessing hard disk resources provided in an embodiment of the present application. Figure 2 As shown, the method involves a target terminal, a cloud server and a router. The target terminal can access the cloud server, the cloud server can be connected to the router via a network, the router can be connected to a storage device, and the cloud server can store the cloud disk storage resources of the target user. The target user can access the cloud server through an application, web page or applet on the target terminal, and can read the resources stored by the target user on the cloud server, or write the storage resources to the cloud server.

[0041] The cloud server and the router can be connected via a fiber optic switch (eg Figure 2 The fiber optic switch 1 and the fiber optic switch 2 in the cloud server are connected by optical fiber, that is, the data transmission between the cloud server and the router can be transmitted through the optical network. At the same time, when the data is transmitted between the cloud server and the router, it can be encrypted through a private channel to further ensure the security of data transmission.

[0042] The storage device may be a device with storage function such as a mobile hard disk or a disk array, and the target terminal may be a host terminal or a mobile terminal. It should be noted that the storage device is not necessary. In fact, if the router itself has a storage unit, the storage unit on the router can be directly used to store hardware resources.

[0043] Step 120: The router authenticates the target user based on the target information.

[0044] In the embodiment of the present application, the router may store a whitelist associated with the target information, and the router may determine whether the target user has the authority to access the storage resource by performing a whitelist search on the target information.

[0045] Specifically, the target information may include a user code of a target user, and the user code is used to uniquely identify the target user. Meanwhile, the whitelist stored in the router may include user codes of users who have the right to access storage resources. The router may determine whether the user code carried in the target information exists in the whitelist. If the user code carried in the target information exists in the whitelist, it may be determined that the target user has the right to access storage resources; if the user code carried in the target information does not exist in the whitelist, it may be determined that the target user does not have the right to access storage resources, and the router may reject the target access request.

[0046] It should be noted that, in the process of authenticating the target user, the user code of the target user is only one kind of authentication information, and is not a limitation on the authentication information. The authentication information may also be the terminal identification of the target terminal of the target user, and the authentication may be performed by obtaining the terminal identification of the target terminal of the target user. Alternatively, the target user may be authenticated by combining the user code and the terminal identification.

[0047] Step 130: When the target user is an authorized access user, the router allows the target user to access storage resources; wherein the storage resources include storage resources on the router or storage resources on a storage device connected to the router.

[0048] In the embodiment of the present application, the router may be a router with a storage space, and the storage resource may be stored in the storage space in the router. Figure 2 The storage device 1 and the storage device 2 shown in the figure can store the storage resource in the storage device 1 or the storage device 2. It should be noted that Figure 2 The two storage devices are only examples. There is no limit on the number of storage devices. You can also connect a storage device through a router to implement storage resources.

[0049] In an embodiment of the present application, after determining that the target user has the authority to access the storage resource, the target user can perform normal access to the storage resource, such as reading, writing, deleting or copying operations.

[0050] In one embodiment of the present application, the method further includes: when the target user is an authorized access user, the router sends a first access notification to a control terminal, where the control terminal is a terminal used by a user to which the storage resource belongs.

[0051] In an embodiment of the present application, once the target user is determined to be an authorized access user, the router may send a first access notification to the control terminal (the terminal of the user to which the storage resource belongs), and the first access notification is used to prompt the user to which the storage resource belongs that the target terminal has obtained permission to access the storage resource.

[0052] In one embodiment of the present application, when the router continuously receives access requests from the same target terminal to access a storage resource for a number greater than a preset number, and the identifier of the target terminal does not exist in the preset whitelist, the router terminates access to the storage resource and sends a warning notification to the control terminal.

[0053] In an embodiment of the present application, if the router receives access requests from the same target terminal multiple times in succession, and the identifier of the target terminal does not exist in the preset whitelist, it can be considered that the storage resource may be maliciously accessed by an unknown terminal, and the router can terminate access to the storage resource. Specifically, if the storage resource is stored on a storage device connected to the router, the router can cut off the power supply of the storage device.

[0054] The target terminal may be a terminal in the same local area network as the router, that is, the router may receive an access request sent by the target terminal through the local area network, and the router may fail to authenticate the target terminal (the terminal identifier of the target terminal is not in the preset whitelist stored in the router). Alternatively, the target terminal may send an access request to the cloud server through an application, a mini-program, or a web page, and after the cloud server authenticates the target terminal (the terminal identifier of the target terminal is in the preset whitelist stored in the cloud server), the router may receive an access request sent by the cloud server, and the router may fail to authenticate the target terminal (the terminal identifier of the target terminal is not in the preset whitelist stored in the router).

[0055] At the same time, the router may notify the user of the storage resource of the malicious access, that is, the router may send a warning notification to the terminal of the user of the storage resource. Specifically, the router may first send a warning notification to the cloud server, and the cloud server forwards the warning notification to the terminal of the user of the storage resource to notify the user of the storage resource. In this way, when it is observed that the storage resource may be maliciously accessed, the access to the storage resource may be terminated in time, and the user of the storage resource may be notified in time, so as to further ensure the safe storage of the storage resource.

[0056] In one embodiment of the present application, when the target user is an authorized access user, after the router allows the target user to access the storage resource, the method further includes: when no access time of the target user to the storage resource is received after the target access request is greater than a preset time, the router sends an access confirmation request for the storage resource to a control terminal, where the control terminal is a terminal used by the user to which the storage resource belongs; the router receives an access instruction sent by the control terminal, where the access instruction indicates whether the target user is allowed or denied to access the storage resource; the router determines the target user's access rights to the storage resource based on the access instruction; or, when the storage resource is in an accessed state, the router periodically sends a second access notification to the control terminal, where the second access notification is used to indicate that the target user is accessing the storage resource.

[0057] In the embodiment of the present application, after determining that the target terminal has the permission to access the storage resource, the target terminal can perform access operations on the storage resource (such as reading data, writing data, deleting data or copying data). If the router does not receive a subsequent access request from the target terminal, and the duration of not receiving the request from the target terminal is greater than the preset duration, in order to avoid the situation where the storage resource is in an accessed state for a long time but is not accessed, the user to whom the storage resource belongs can decide whether the target terminal continues to have the permission to access the storage resource.

[0058] Specifically, the router may send an access confirmation instruction to the control terminal (the terminal of the user to which the storage resource belongs). After receiving the access confirmation instruction, the control terminal may determine that the target terminal continues to have access rights to the storage resource in response to the access confirmation instruction; or may revoke the target terminal's access rights to the storage resource, that is, deny the target terminal continued access to the storage resource.

[0059] In the embodiment of the present application, if the target terminal does not subsequently access the storage resource after having the access right to the storage resource, the storage resource is in an accessed state for a long time without being accessed, which may shorten the life of the hard disk storing the storage resource. By determining whether the target terminal continues to have the access right to the storage resource by the user to whom the storage resource belongs, it can not only improve the user experience of the user to whom the storage resource belongs, but also improve the life of the hard disk storing the storage resource to a certain extent.

[0060] In an embodiment of the present application, when the storage resource is in an accessed state (e.g., a read state or a written state), in order to ensure that the storage resource is in a normal access state, the storage device may be monitored in real time. Specifically, the router may send a second access notification of the storage resource to the control terminal at a preset time interval to prompt the user to whom the storage resource belongs that "a user is reading your hard disk." Moreover, when sending an access notification to the control terminal, the terminal identifier or user name of the target terminal may be carried. For example, the user to whom the storage resource belongs may receive an access notification that "user A is accessing your hard disk resource through device B."

[0061] In an embodiment of the present application, by periodically sending access notifications to the users of the storage resources, the router can dynamically monitor the storage resources, prevent malicious access to the storage resources by malicious terminals through active defense, and further improve the secure storage of the storage resources.

[0062] In one embodiment of the present application, the router receives a truncation instruction sent by the control terminal; and the router terminates the target terminal's access to the storage resource in response to the truncation instruction.

[0063] In the embodiment of the present application, when the storage resource is in an accessed state, the terminal of the user to which the storage resource belongs can periodically obtain the access state of the storage resource. If the user to which the storage resource belongs observes a certain access state and intends to deny the access, a truncation instruction can be sent to the router to timely truncate the access.

[0064] In an embodiment of the present application, a router receives a target access request for accessing a storage resource in a local area network where the router is located, the target access request carries target information, and the target information includes user information of a target user; the router authenticates the target user based on the target information; if the target user is an authorized access user, the router allows the target user to access the storage resource; wherein the storage resource includes a storage resource on the router or a storage resource on a storage device connected to the router. In this way, when the router receives a target access request for accessing a storage resource in a local area network where the router is located, the target user can be authenticated based on the user information of the target user carried in the target access request; if the target user is an authorized access user, the router allows the target user to access the storage resource, and authentication can be implemented in the scenario of accessing the storage resource in the local area network where the router is located, thereby improving the security of accessing the storage resource in the local area network where the router is located, and solving the problem of low security of storage resources existing in the related art.

[0065] See also Figure 3 , Figure 3 FIG. 1 is a flowchart of another method for accessing storage resources provided by an embodiment of the present application, and the method is executed by a router. Figure 3 As shown, the method comprises the following steps:

[0066] Step 310: The router receives a target access request for accessing storage resources in the local area network where the router is located. The target access request carries target information, and the target information includes user information of a target user and an initiation location of the target access request.

[0067] In the embodiment of the present application, when the target user initiates the target access request through the target terminal, the target user may be in the same local area network as the router, for example Figure 2 The target terminal 2 and the target terminal 3 are shown. When the target user initiates a target access request through a target terminal in the same local area network as the router, the target access request can be initiated by the target terminal using a dedicated channel for local area network communication.

[0068] In addition, if the target terminal and the router are in the same local area network, it can be considered that the target terminal is a trustworthy device with a high probability and is more likely to have the authority to access storage resources. Therefore, the initiation location of the target user's initiation of the target access request can be obtained, which can be used to subsequently authenticate the target user.

[0069] Step 320: The router determines whether the initiation location of the target access request is within the local area network where the router is located.

[0070] In the embodiment of the present application, after obtaining the target access request, the router may determine whether the initiation location of the target access request is in the local area network where the router is located.

[0071] Step 330: If the initiation location of the target access request is within the local area network where the router is located, the router authenticates the target user based on the user information of the target user.

[0072] In the embodiment of the present application, when the initiation location of the target access request is in the local area network where the router is located, the user code of the target user can be further obtained from the user information of the target user, and the target user is authenticated by the user code. The method of authenticating the target user by the user code here can refer to the above step 120, which is not repeated here.

[0073] Step 340: If the target user is an authorized access user, allow the target user to access storage resources; wherein the storage resources include storage resources on the router or storage resources on a storage device connected to the router.

[0074] In the embodiment of the present application, the target user can directly initiate a target access request to the storage resource in the local area network. In this way, the router can authenticate the target user based on the initiation location and user authority of the target access request of the target user. Only the router needs to perform authentication, which can improve the authentication efficiency on the basis of ensuring secure storage. In addition, the target access request initiated by the target user can be transmitted through the local area network, which can improve the security of user-related information to a certain extent.

[0075] In one embodiment of the present application, when the target terminal of the target user and the router are not in the same local area network, the target user can be authenticated in the following manner. The router receives a target access request for accessing storage resources in the local area network where the router is located, which may include: the router receives a target access request for accessing storage resources sent by a cloud server; wherein the target access request is issued by the cloud server after the target user is authenticated.

[0076] In the embodiment of the present application, the target user can use the target terminal (for example Figure 2 The application, web page or applet on the target terminal 1) shown in the figure initiates an access request to the storage resource to the cloud server, and the cloud server authenticates the access request. After the cloud server determines that the access request is authenticated, it sends a target access request for accessing the storage resource to the router in response to the access request. The target access request may carry relevant information of the sender of the target access request.

[0077] The cloud server may pre-set a whitelist, which may be stored on the cloud server in the form of a list, and may be set or modified by the user to whom the storage resource belongs. The user to whom the storage resource belongs may share the access rights (e.g., viewing, modifying, or deleting rights) of the storage resource with other users, for example, the viewing rights of the family storage resource may be shared with family member A, and the viewing and modifying rights of the family storage resource may be shared with family member B. In addition, the whitelist stored in the router may come from the cloud server, and the cloud server may periodically update the whitelist to the router.

[0078] In an embodiment of the present application, the process of the cloud server authenticating the target user may refer to the authentication process in the above step 120, which will not be described in detail here. In the process of the router authenticating the target access request, the target access request may carry relevant information of the sender of the target access request. The router may first authenticate the target access request to determine whether the sender of the target access request is legitimate, that is, to determine whether the target access request is sent by the cloud server. In the case where it is determined that the target access request is sent by the cloud server, the router authenticates the target user based on the user information carried in the target information.

[0079] In an embodiment of the present application, through the above method, both the cloud server and the router can be set as authentication parties. When the target user intends to access the storage resources, if the authentication of both the cloud server and the router is passed, the target user can obtain access rights to the storage resources, which ensures the privacy and authority of the target user to a certain extent, so as to achieve secure storage of storage resources.

[0080] See also Figure 4 , Figure 4 FIG. 1 is a flowchart of another method for accessing storage resources provided by an embodiment of the present application, and the method is executed by a target terminal. Figure 4 As shown, the method comprises the following steps:

[0081] Step 410: The target terminal sends a target access request for accessing storage resources in the local area network where the router is located. The target access request carries user information of a target user; the user information of the target user is used to authenticate the target user.

[0082] In the embodiment of the present application, the target user accesses the storage resource through the target terminal. Specifically, when the target terminal and the router are in the same local area network, a target access request can be sent to the router through a dedicated channel of the local area network, for example Figure 2 The target terminal 2 in the example can send a target access request to the router through a dedicated channel of the local area network, and the router will authenticate the target user.

[0083] Alternatively, when the target terminal and the router are not in the same local area network, a target access request can be sent to the router through the cloud server. In this process, the target terminal sends an access request to the cloud server to access the storage resource, and the cloud server authenticates the access request once. If the authentication is passed, the cloud server sends a target access request to the router in response to the access request, and the target access request can carry relevant information of the sender of the target access request.

[0084] After receiving the target access request, the router can determine whether the target access request is sent by the cloud server based on the relevant information of the sender of the target access request. If it is determined that the target access request is not sent by the cloud server, the router rejects the target access request and determines that the target user does not have the authority to access the storage resource. If it is determined that the target access request is sent by the cloud server, the target user is authenticated based on the target information carried by the target access request.

[0085] Step 420: When the target user is an authorized access user, the target terminal accesses storage resources; wherein the storage resources include storage resources on a router or storage resources on a storage device connected to the router.

[0086] In the embodiment of the present application, when the target terminal and the router are in the same local area network and the target user is an authorized access user, the target user can access the storage resource through the dedicated channel of the local area network. Specifically, the storage resource can be read, or the resource to be stored can be transmitted through the dedicated channel.

[0087] When the target terminal sends a target access request to the router through the cloud server, and the target user is an authorized access user, the target user can perform corresponding access operations according to the permissions obtained by the target user. For example, the target user has the permission to view and can read the storage resources. Alternatively, the target user has the permission to write and can select the storage resources of the cloud disk from the cloud server and transfer the storage resources to the storage space of the router or the storage device connected to the router.

[0088] In an embodiment of the present application, a target terminal sends a target access request for accessing storage resources in a local area network where a router is located, and the target access request carries user information of a target user; the user information of the target user is used to authenticate the target user; when the target user is an authorized access user, the target terminal accesses storage resources; wherein the storage resources include storage resources on the router or storage resources on a storage device connected to the router. In this way, after the target terminal sends a target access request for accessing storage resources in a local area network where a router is located, when the target user is an authorized access user, the target terminal has the authority to access storage resources, and authentication can be implemented in the scenario of accessing storage resources in a local area network where a router is located, thereby improving the security of accessing storage resources in a local area network where a router is located, and solving the problem of low security of storage resources existing in related technologies.

[0089] See also Figure 5 , Figure 5FIG. 1 is a flowchart of another method for accessing storage resources provided in an embodiment of the present application, and the method is executed by a cloud server. Figure 5 As shown, the method comprises the following steps:

[0090] Step 510: The cloud server receives a first access request for accessing storage resources in the local area network where the router is located. The first access request carries target information, and the target information includes user information of a target user.

[0091] In an embodiment of the present application, when a target user accesses a storage resource through a target terminal, the cloud server may receive a first access request sent by the target terminal for accessing the storage resource. The first access request may carry target information. The target information may include user information of the target user (such as a user code or user name, etc.). The target information may also include a terminal identifier of the target terminal.

[0092] Step 520: The cloud server authenticates the target user based on the target information.

[0093] In the embodiment of the present application, a whitelist may be pre-set on the cloud server, and the whitelist may be stored on the cloud server in the form of a list. The whitelist may be set or modified by the user to whom the storage resource belongs. The user to whom the storage resource belongs may share the access rights (such as viewing, modifying or deleting rights) of the storage resource with other users, for example, the viewing rights of the family storage resource may be shared with family member A, and the viewing and modifying rights of the family storage resource may be shared with family member B. In addition, the whitelist stored in the router may come from the cloud server, and the cloud server may periodically update the whitelist to the router.

[0094] In an embodiment of the present application, the target information may include a user code of the target user and a terminal identifier of the target terminal, and a search may be performed in the whitelist based on the user code and the terminal identifier to determine whether the target user has permission to access storage resources.

[0095] Step 530: When the target user is an authorized access user, the cloud server allows the target user to access storage resources; wherein the storage resources include storage resources on the router or storage resources on a storage device connected to the router.

[0096] In an embodiment of the present application, if the cloud server determines that the target user is an authorized access user, the cloud server may allow the target user to perform access operations (such as read, write or delete operations) on the storage resource.

[0097] In one embodiment of the present application, the method also includes: when the target user is an authorized access user, the cloud server sends a second access request to the router, and the second access request carries user information of the target user; the user information of the target user carried in the second access request is used to authenticate the target user.

[0098] In the embodiment of the present application, after the cloud server authenticates the first access request, the cloud server can send a second access request to the router in response to the first access request, and the router performs a second authentication on the second access request. By performing double authentication on the access request initiated by the target user by the cloud server and the router, the secure storage of storage resources can be guaranteed to a certain extent.

[0099] In one embodiment of the present application, the method further includes: when the target user is an authorized access user, the cloud server sends a first target access notification to a control terminal, and the control terminal is a terminal used by the user to which the storage resource belongs.

[0100] In the embodiment of the present application, when it is determined that the target user has access rights to the storage resource, a first target access notification can be sent to the terminal used by the user to which the storage resource belongs, so as to notify the user to which the storage resource belongs that the target terminal has the right to access the storage resource. In this way, once the storage resource is accessed, the user to which the storage resource belongs will be monitored, which can improve the user experience of the user to which the storage resource belongs.

[0101] In one embodiment of the present application, the method also includes: when the target user is authenticated by the router as an authorized access user, the cloud server receives a second target access notification sent by the router; the cloud server sends the second target access notification to the control terminal, and the control terminal is a terminal used by the user to whom the storage resource belongs.

[0102] In the embodiment of the present application, when the target user passes the secondary authentication via the cloud server and the router, the router can send a second target access notification to the control terminal via the cloud server to notify the user to whom the storage resource belongs that the target user has the right to access the storage resource. In this way, not only can the storage resource be securely stored through secondary authentication, but the access status of the storage resource can also be dynamically monitored by sending access notifications to the control terminal.

[0103] In an embodiment of the present application, a cloud server receives a first access request for accessing a storage resource in a local area network where a router is located, the first access request carries target information, and the target information includes user information of a target user; the cloud server authenticates the target user based on the target information; if the target user is an authorized access user, the cloud server allows the target user to access the storage resource; wherein the storage resource includes a storage resource on a router or a storage resource on a storage device connected to the router. Thus, when the cloud server receives a target access request for accessing a storage resource in a local area network where the router is located, the target user can be authenticated based on the user information of the target user carried in the target access request; if the target user is an authorized access user, the cloud server allows the target user to access the storage resource, and authentication can be implemented in the scenario of accessing the storage resource in the local area network where the router is located, thereby improving the security of accessing the storage resource in the local area network where the router is located, and solving the problem of low security of storage resources existing in the related art.

[0104] Please refer to the following specific embodiment, which is used to further describe the storage resource access method provided by the embodiment of the present application. Figure 6 The storage resource access method can be applied to a system, which includes a target terminal, a cloud server and a local area network end, the target terminal can access the cloud server, the cloud server is connected to the local area network end through an optical network, the local area network end includes a router and a storage device connected to the router, and the method may include the following steps:

[0105] Step 1: A first user may send a first access request to the hard disk array (i.e., the storage device mentioned above) to the cloud server through the target terminal;

[0106] It should be noted that the target terminal may be a host terminal (PC) or a mobile terminal. When a user wants to access a hard disk array in a local area network through the target terminal, a first access request will be sent to the cloud server.

[0107] Step 2: The cloud server determines whether the first user is within a preset authorization scope (i.e., the whitelist mentioned above). If so, an access notification is sent to the user to whom the hard disk array belongs, and the first user is allowed to access the hard disk array. Otherwise, the first access request of the first user to the hard disk array is rejected. The preset authorization scope is determined as follows: the user to whom the hard disk array belongs can share the permissions (view, modify, delete, etc.) of the home storage with family members through a target terminal (e.g., a PC, a mobile phone APP, a mini-program, etc.). The authorization is stored in the device in the form of a list, and the owner of the hard disk array can set and delete it.

[0108] It should be noted that the cloud server has a built-in permission mechanism, and there will be a preset authorization range. When the user is within the preset authorization range, the cloud server allows the user to access the hard disk array, otherwise it is not allowed.

[0109] Step three: the cloud server sends a second access request to the router based on the first access request, where the second access request carries the user information of the first user.

[0110] It should be noted that even if the cloud server allows the user to access the hard disk array, the cloud server still needs to send a second access request to the router in the local area network based on the user's first access request.

[0111] Step 4: The router determines whether the first user in the second access request is within a preset authorization range. If so, an access notification is sent to the user to which the hard disk array belongs, and the cloud server is allowed to access the hard disk array. Otherwise, the second access request of the cloud server to the hard disk array is rejected.

[0112] It should be noted that in order to avoid untimely updates of the preset authorization scope or other problems, the router in the LAN needs to further determine the user's authorization rights. Only when the router passes the determination can the user directly access the hard disk array through the cloud server.

[0113] Step 5: The second user in the local area network sends a third access request to the hard disk array to the router.

[0114] Step 6: The router determines whether the initiation location of the third access request is within the local area network.

[0115] Step 7: If yes, the router determines whether the second user is within the preset authorization range. If yes, the router sends an access notification to the user to which the hard disk array belongs, and allows the second user in the local area network to access the hard disk array. Otherwise, the router rejects the third access request of the second user in the local area network to the hard disk array.

[0116] In addition, during the implementation of the above method, storage resources can be further managed in the following ways:

[0117] If the cloud server or the router receives a fourth access request sent by a third user who is not within the preset authorization range repeatedly for a preset number of times, the router cuts off the power supply of the hard disk array and sends a warning notification to the user to whom the hard disk array belongs.

[0118] Optionally, if the cloud server or the router determines that the first user is within a preset authorization range, but has not received a first access request or a second access request sent by the first user for more than a preset time interval, a secondary confirmation notification is sent to the user to which the hard disk array belongs, and the first user's access request to the hard disk array is allowed or denied according to the secondary confirmation instruction returned by the user to which the hard disk array belongs.

[0119] Optionally, when the hard disk array is in a state of being read, the router sends an access notification to the user of the hard disk array at a preset interval. The access notification is used to notify the hard disk owner that someone is reading your disk, which is a dynamic monitoring of the hard disk and belongs to active defense; if the user of the hard disk array sends a truncation instruction to the router, the router truncates the user's access to the hard disk array.

[0120] In an embodiment of the present application, an authentication method and system based on cloud storage and hard disk storage are provided. By using a router and a hard disk array, the cloud server and the router are upgraded to authentication parties. When a user wants to access the hard disk array in the local area network through a target terminal, the user authority is judged based on the cloud server and the router, making it convenient for home users to upgrade existing devices to NAS. At the same time, the cloud embedded in the cloud disk can read, modify, insert, and delete the data content of the home user's storage device, and the privacy and authority of the user are ensured.

[0121] See also Figure 7 , Figure 7 1 is a specific flow chart of a method for accessing storage resources provided by an embodiment of the present application, which is executed by a router. Figure 7 As shown, the method comprises the following steps:

[0122] Step 710: The router receives a target access request for accessing storage resources in the local area network where the router is located. The target access request carries target information, and the target information includes user information of a target user.

[0123] Step 720: The router authenticates the target user based on the target information.

[0124] In an embodiment of the present application, one scenario is that the target terminal and the router are in the same local area network, and the target terminal initiates a target access request to the router in the local area network. In this way, the target information also includes the initiation location of the target access request; the router authenticates the target user based on the target information, including: the router determines whether the initiation location of the target access request is in the local area network where the router is located; if the initiation location of the target access request is in the local area network where the router is located, the router authenticates the target user based on the user information of the target user.

[0125] Another scenario is that the target terminal initiates a target access request to the router via the cloud server. In this way, the router receives the target access request for accessing storage resources, including: the router receives the target access request sent by the cloud server for accessing storage resources; wherein, the target access request is issued by the cloud server after the target user is authenticated.

[0126] Step 730: When the target user is an authorized access user, the router sends a first access notification to a control terminal, where the control terminal is a terminal used by the user to which the storage resource belongs.

[0127] Step 740: When the target user is an authorized access user, the router sends a first access notification to a control terminal, where the control terminal is a terminal used by the user to which the storage resource belongs.

[0128] Step 750: When the target user has not received access to the storage resource for a period longer than a preset period after the target access request, the router sends an access confirmation request for the storage resource to a control terminal, where the control terminal is a terminal used by the user to which the storage resource belongs; the router receives an access instruction sent by the control terminal, where the access instruction indicates whether the target user is allowed or denied access to the storage resource; the router determines the target user's access rights to the storage resource based on the access instruction.

[0129] Step 760: When the storage resource is in an accessed state, the router periodically sends a second access notification to the control terminal, where the second access notification is used to indicate that the target user is accessing the storage resource.

[0130] It should be noted that there is no particular order between the above steps 730 - 760 , for example, step 740 may be performed first, and then step 730 .

[0131] In an embodiment of the present application, a router receives a target access request for accessing a storage resource in a local area network where the router is located, the target access request carries target information, and the target information includes user information of a target user; the router authenticates the target user based on the target information; if the target user is an authorized access user, the router allows the target user to access the storage resource; wherein the storage resource includes a storage resource on the router or a storage resource on a storage device connected to the router. In this way, when the router receives a target access request for accessing a storage resource in a local area network where the router is located, the target user can be authenticated based on the user information of the target user carried in the target access request; if the target user is an authorized access user, the router allows the target user to access the storage resource, and authentication can be implemented in the scenario of accessing the storage resource in the local area network where the router is located, thereby improving the security of accessing the storage resource in the local area network where the router is located, and solving the problem of low security of storage resources existing in the related art.

[0132] It is important to understand that Figures 1 to 7 The explanations of the same or corresponding steps in the above may refer to each other. For example, Figure 1 The explanation of step 110 and step 130 in Figure 3 Step 310 and step 340 in .

[0133] At the same time, it should be understood that the storage resource access method provided by the embodiment of the present application can have the following beneficial effects: First, a cloud storage and hard disk storage authentication method in a home scenario is proposed, which can directly transfer the content stored on the cloud to the storage unit on the router in the home scenario, thereby improving the access rate of the cloud disk content by users within the home scope in the home scenario. Second, when a home user accesses a storage device in a local area network through a target terminal, the cloud server and the router respectively perform multiple authentications on the user's access request in turn, and only after the authentication is passed can the storage device in the local area network be accessed, thereby improving the security level of the content stored in the storage device in the local area network, and when authenticating in the home, the user's related information is transmitted through the local area network in the home, thereby improving the security level of the user's related information. Third, the home user can also directly initiate an access request to the storage device through the router in the home, and the router directly determines whether the user has access rights based on the location of the home user and the user's authority, thereby improving the authentication efficiency. Fourthly, appropriate time thresholds and access times thresholds will be set for access requests of users authenticated by the cloud server, so as to achieve the purpose of monitoring the access behavior of dangerous users. For the identified dangerous operation behavior, corresponding protection measures will be taken for the content stored in the home scene. Fifthly, the status of the storage device in the home scene is monitored, and the content stored in the storage device is actively defended, so as to further improve the security level of home storage. Sixthly, this solution involves multiple terminals, multiple authentications and mutual authentication, does not involve the authentication platform, belongs to distributed authentication and authentication, and the operation authority is set by the user. At the same time, because some authentication signals can be encrypted and transmitted through the optical network, they are not transmitted on the public network, so the security is relatively high. Seventhly, the user to whom the storage resource belongs can dynamically monitor the storage resource, that is, the user to whom the storage resource belongs can know the operation of the storage resource at any time, and dynamically monitor the operation of the storage resource. Eighthly, according to the dynamic monitoring of the user to whom the storage resource belongs, corresponding protection measures can be taken for dangerous operations, such as forced termination or disconnection.

[0134] See also Figure 8 , Figure 8 is a structural block diagram of a router provided in an embodiment of the present application. Figure 8 As shown, an embodiment of the present application provides a router 800 , and the router 800 includes: a receiving module 810 , an authentication module 820 and an access module 830 .

[0135] The receiving module 810 is used to receive a target access request for accessing a storage resource in a local area network where the router is located, wherein the target access request carries target information, and the target information includes user information of a target user;

[0136] The authentication module 820 is used to authenticate the target user based on the target information;

[0137] The access module 830 is used to allow the target user to access storage resources when the target user is an authorized access user; wherein the storage resources include storage resources on the router or storage resources on a storage device connected to the router.

[0138] In an embodiment of the present application, a target access request for accessing storage resources in the local area network where the router is located is received, the target access request carries target information, and the target information includes user information of a target user; based on the target information, the target user is authenticated; if the target user is an authorized access user, the target user is allowed to access storage resources; wherein the storage resources include storage resources on the router or storage resources on a storage device connected to the router. In this way, when a target access request for accessing storage resources in the local area network where the router is located is received, the target user can be authenticated based on the user information of the target user carried in the target access request, and if the target user is an authorized access user, the target user is allowed to access storage resources, which can achieve authentication in the scenario of accessing storage resources in the local area network where the router is located, improve the security of accessing storage resources in the local area network where the router is located, and solve the problem of low security of storage resources existing in related technologies.

[0139] The router provided in the embodiment of the present application can implement each process implemented in the above method embodiment, and will not be described again here to avoid repetition.

[0140] like Fig. 9As shown, an embodiment of the present application also provides an electronic device 900. The electronic device 900 includes: a processor 910 and a memory 920, the memory 920 stores a program or instruction, and the program or instruction implements the steps of any of the methods described above when executed by the processor 910. For example, when the program is executed by the processor 910, the following process is implemented: receiving a target access request for accessing storage resources in the local area network where the router is located, the target access request carries target information, and the target information includes user information of a target user; based on the target information, authenticating the target user; if the target user is an authorized access user, allowing the target user to access storage resources; wherein the storage resources include storage resources on the router or storage resources on a storage device connected to the router. In this way, when a target access request for accessing storage resources in the local area network where the router is located is received, the target user can be authenticated based on the user information of the target user carried in the target access request. If the target user is an authorized access user, the target user is allowed to access the storage resources. This can achieve authentication in the scenario of accessing storage resources in the local area network where the router is located, improve the security of accessing storage resources in the local area network where the router is located, and solve the problem of low security of storage resources existing in related technologies.

[0141] An embodiment of the present application also provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps of each embodiment of the method for accessing storage resources are implemented and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0142] The processor is the processor in the electronic device described in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory ROM, a random access memory RAM, a magnetic disk or an optical disk.

[0143] An embodiment of the present application further provides a chip, which includes a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run programs or instructions to implement the various processes of the above-mentioned method embodiment, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0144] An embodiment of the present application provides a computer program product, which is stored in a storage medium. The program product is executed by at least one processor to implement the various processes of the above-mentioned method embodiment and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0145] It should be noted that, in this article, the terms "comprise", "include" or any other variant thereof are intended to cover non-exclusive inclusion, so that the process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise one..." do not exclude the presence of other identical elements in the process, method, article or device including the element. In addition, it should be pointed out that the scope of the methods and devices in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in reverse order according to the functions involved, for example, the described method may be performed in an order different from that described, and various steps may also be added, omitted, or combined. In addition, the features described with reference to certain examples may be combined in other examples.

[0146] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a computer software product, which is stored in a storage medium (such as ROM / RAM, a disk, or an optical disk), and includes a number of instructions for a terminal (which can be a mobile phone, a computer, a server, or a network device, etc.) to execute the methods described in each embodiment of the present application.

[0147] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.

Claims

1. A method for accessing storage resources, characterized in that: include: The router receives a target access request for accessing a storage resource in a local area network where the router is located, the target access request carrying target information, and the target information includes user information of a target user; The router authenticates the target user based on the target information; In the case where the target user is an authorized access user, the router allows the target user to access the storage resource; The storage resources include storage resources on the router or storage resources on a storage device connected to the router.

2. The method according to claim 1, characterized in that The target information also includes the initiation location of the target access request; the router authenticates the target user based on the target information, including: The router determines whether the initiation location of the target access request is within the local area network where the router is located; If the initiation location of the target access request is within the local area network where the router is located, the router authenticates the target user based on the user information of the target user.

3. The method according to claim 1, characterized in that The router receives a target access request for accessing a storage resource, including: The router receives a target access request sent by the cloud server for accessing storage resources; The target access request is issued by the cloud server after the target user is authenticated.

4. The method according to claim 1, characterized in that: The method further comprises: In the case that the target user is an authorized access user, the router sends a first access notification to a control terminal, where the control terminal is a terminal used by a user to which the storage resource belongs.

5. The method according to any one of claims 1 to 4, characterized in that: In the case where the target user is an authorized access user, after the router allows the target user to access the storage resource, the method further includes: In the case that the target user has not received access to the storage resource for a time period greater than a preset time period after the target access request, the router sends an access confirmation request to the storage resource to a control terminal, where the control terminal is a terminal used by a user to which the storage resource belongs; the router receives an access instruction sent by the control terminal, where the access instruction indicates whether the target user is allowed or denied access to the storage resource; the router determines the target user's access rights to the storage resource based on the access instruction; or, When the storage resource is in an accessed state, the router periodically sends a second access notification to the control terminal, where the second access notification is used to indicate that the target user is accessing the storage resource.

6. A method for accessing storage resources, characterized in that: include: The target terminal sends a target access request for accessing storage resources in the local area network where the router is located, and the target access request carries user information of the target user; The user information of the target user is used to authenticate the target user; In the case where the target user is an authorized access user, the target terminal accesses the storage resource; The storage resources include storage resources on the router or storage resources on a storage device connected to the router.

7. A method for accessing storage resources, characterized in that: include: The cloud server receives a first access request for accessing a storage resource in a local area network where the router is located, the first access request carrying target information, the target information including user information of a target user; The cloud server authenticates the target user based on the target information; In the case where the target user is an authorized access user, the cloud server allows the target user to access the storage resources; The storage resources include storage resources on a router or storage resources on a storage device connected to the router.

8. The method according to claim 7, characterized in that The method further comprises: In the case where the target user is an authorized access user, the cloud server sends a second access request to the router, where the second access request carries user information of the target user; The user information of the target user carried in the second access request is used to authenticate the target user.

9. The method according to claim 7, characterized in that: The method further comprises: In the case that the target user is an authorized access user, the cloud server sends a first target access notification to a control terminal, where the control terminal is a terminal used by a user to which the storage resource belongs.

10. The method according to claim 8, characterized in that The method further comprises: When the target user is authenticated as an authorized access user by the router, the cloud server receives a second target access notification sent by the router; The cloud server sends a second target access notification to a control terminal, where the control terminal is a terminal used by a user to which the storage resource belongs.

Images