A protection method for data storage server

Abstract

The present invention discloses a protection method for a data storage server, comprising the following steps: S1. dividing the storage space of a storage server into a first storage space and a second storage space; S2. normally storing useful data in the first storage space and filling the second storage space with random data; S3. the storage server dividing the useful data in the first storage space into different data files and setting corresponding access conditions for the different data files; S4. configuring account information for login verification for a user terminal, and the storage server sending the access conditions of the data files within the permission to the user terminal according to the permission of the user terminal; S5. when the user terminal accesses the data storage server, performing security protection on the data storage server based on the access conditions. The present invention can protect the data storage server by setting the access conditions, thereby effectively improving data security.

Description

Technical Field

[0001] The present invention relates to the field of data storage, and in particular to a protection method for a data storage server. Background Art

[0002] Data storage servers are widely used in the industrial field. However, if data storage servers are accessed by unauthorized devices, data leakage may occur. Password verification plays a certain role in the security protection of data storage servers. However, if the password is cracked, data leakage may still occur, thus posing a high data security risk. Summary of the Invention

[0003] The purpose of the present invention is to overcome the deficiencies of the prior art and provide a protection method for a data storage server, which can protect the data storage server by setting access conditions and effectively improve data security.

[0004] The object of the present invention is achieved through the following technical solution: A data storage server protection method comprising the following steps:

[0005] S1. The storage space of the storage server is divided into a first storage space and a second storage space;

[0006] S2. Useful data is normally stored in the first storage space and filled with random data in the second storage space;

[0007] S3. The storage server divides the useful data in the first storage space into different data files and sets corresponding access conditions for different data files; the access condition is to access the content of the fixed address in the second storage space for a specified time;

[0008] S4 configures the user terminal login verification account information, the storage server according to the user terminal permissions, the permissions within the data file access conditions are sent to the user terminal;

[0009] S5. When the user terminal accesses the data storage server, security protection is performed on the data storage server based on the access conditions.

[0010] The beneficial effect of the present invention is that the present invention can protect the data storage server by setting access conditions, thereby effectively improving data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] Figure 1 Flow chart of the method of the present invention. DETAILED DESCRIPTION

[0012] The technical solution of the present invention will be further described in detail below with reference to the accompanying drawings, but the protection scope of the present invention is not limited to the following.

[0013] like Figure 1 As shown, a protection method for a data storage server includes the following steps:

[0014] S1. The storage space of the storage server is divided into a first storage space and a second storage space;

[0015] The random data refers to data randomly extracted from the Internet or books or garbled data.

[0016] S2. Useful data is normally stored in the first storage space and filled with random data in the second storage space;

[0017] S3. The storage server divides the useful data in the first storage space into different data files and sets corresponding access conditions for different data files; the access condition is to access the content of the fixed address in the second storage space for a specified time;

[0018] In each of the access conditions, the fixed address is one address or a combination of multiple addresses;

[0019] When there are multiple combinations of addresses in the fixed address, the locations of the multiple addresses need to be performed in a preset order, and the content access time of each address needs to reach a specified time.

[0020] The higher the confidentiality level of the data file, the more addresses are included in the fixed address in the corresponding access condition.

[0021] S4 configures the user terminal login verification account information, the storage server according to the user terminal permissions, the permissions within the data file access conditions are sent to the user terminal;

[0022] The account information for login verification includes user account, user password and user terminal IP.

[0023] S5. When the user terminal accesses the data storage server, security protection is performed on the data storage server based on the access conditions.

[0024] The step S5 includes that after the user terminal successfully logs in and verifies the storage server according to the account information, the storage server opens a second storage space for the user terminal; when the user's access in the second storage space meets the access condition, the data storage server opens the data file corresponding to the access condition in the first storage space for the user.

[0025] The present invention adds a layer of protection on the basis of account password verification and user terminal IP verification. By dividing the storage space of the storage server into a first storage space and a second storage space, and only storing random data in the second storage space, even if an illegal terminal deciphers the account password and IP information, it will only enter the second storage space and check the random data stored in the second storage space, and cannot obtain the data in the first storage space. Generally, the access process will be terminated actively, and there will be no motivation to view these random data, thereby effectively realizing data security protection; and the user terminal that knows the access conditions can access the corresponding fixed address in the second storage space according to the access conditions. After the access conditions are met, the corresponding data file in the first storage space is opened, thereby enabling effective data access; generally, the present invention is mainly suitable for data storage servers with a high degree of confidentiality; and the present application can also set one or more addresses in the access conditions according to the confidentiality level of the data file. When there is a combination of multiple addresses in the fixed address in the access conditions, the orientation of the multiple addresses needs to be performed in a preset order, and the content access time of each address needs to reach a specified time, thereby greatly increasing the confidentiality performance.

[0026] The foregoing description shows and describes a preferred embodiment of the present invention. However, as previously stated, it should be understood that the present invention is not limited to the form disclosed herein and should not be construed as excluding other embodiments. Instead, the present invention is applicable to various other combinations, modifications, and environments and is capable of modification within the scope of the inventive concept described herein, through the teachings above, or through techniques or knowledge in the relevant art. Modifications and variations made by those skilled in the art that do not depart from the spirit and scope of the present invention are intended to be within the scope of the appended claims.

Claims

1. A data storage server protection method, characterized by: The following steps are involved: S1. The storage space of the storage server is divided into a first storage space and a second storage space; S2. Useful data is normally stored in the first storage space and filled with random data in the second storage space; S3. The storage server divides the useful data in the first storage space into different data files and sets corresponding access conditions for different data files; the access condition is to access the content of the fixed address in the second storage space for a specified time; S4 configures the user terminal login verification account information, the storage server according to the user terminal permissions, the permissions within the data file access conditions are sent to the user terminal; S5. When a user terminal accesses the data storage server, security protection is performed on the data storage server based on the access conditions: After the user terminal successfully logs in and authenticates the storage server based on the account information, the storage server opens a second storage space for the user terminal. When the user's access to the second storage space meets the access conditions, the data storage server opens the data file corresponding to the access conditions in the first storage space for the user.

2. A data storage server protection method according to claim 1, characterized in that: The random data refers to data randomly extracted from the Internet or books or garbled data.

3. The data storage server protection method according to claim 1, characterized in that: The account information for login verification includes user account, user password and user terminal IP.

4. The data storage server protection method according to claim 1, characterized in that: In each of the access conditions, the fixed address is one address or a combination of multiple addresses; When there are multiple combinations of addresses in the fixed address, the locations of the multiple addresses need to be performed in a preset order, and the content access time of each address needs to reach a specified time.

5. A data storage server protection method according to claim 4, characterized in that: The higher the confidentiality level of the data file, the more addresses are included in the fixed address in the corresponding access condition.

Images