External chain access management method and device, network disk and storage medium

Abstract

The application provides an external chain access management method and device, a network disk and a storage medium. The method comprises the following steps: generating a virtual storage space according to an actual storage space of a file to be shared and a preset access number; generating a candidate URL address for the virtual storage space, and generating a sharing external chain according to any candidate URL address; when an access request is received for the first time, allowing a user to access the corresponding virtual storage space through the candidate URL address; when an access request is received again, judging whether there is an unvisited virtual storage space; if there is an unvisited virtual storage space, jumping the access request to the unvisited virtual storage space; and if there is no unvisited virtual storage space, rejecting the access request of the sharing external chain. The external chain access management method and device, the network disk and the storage medium can conveniently manage and limit the access behavior of the external chain, and reduce the risk of leakage of the file to be shared.

Description

Technical Field

[0001] This invention belongs to the field of electronic information technology, and in particular relates to an external link access management method, device, cloud drive and storage medium. Background Technology

[0002] Cloud storage, also known as online USB drive or online hard drive, is an online storage service based on cloud computing technology. When using it, enterprise users can upload, preview, and download files, significantly improving the convenience and flexibility of data access.

[0003] When users need to share files stored in their cloud storage, they can generate a sharing link based on the file's location and send it to the recipient. The recipient can then access the file's storage page by clicking the link, making it easy to read or download the file.

[0004] However, existing external links cannot manage and restrict user access actions. When the file recipient spreads and forwards the external link, any user who receives the external link can directly access the storage page of the file to be shared. This will put the file to be shared at risk of leakage, thereby reducing the security of the file sharing process. Summary of the Invention

[0005] In view of this, the present invention aims to provide an external link access management method, device, cloud storage and storage medium, so as to facilitate the management and restriction of external link access behavior.

[0006] To achieve the above objectives, the technical solution created by this invention is implemented as follows: In a first aspect, embodiments of the present invention provide an external link access management method, including: Based on the actual storage space of the file to be shared and the preset number of accesses, multiple virtual storage spaces are generated, and the number of virtual storage spaces is the same as the preset number of accesses. Generate a candidate URL address for each virtual storage space, and generate a sharing external link based on any candidate URL address; Upon receiving an access request for sharing an external link for the first time, allow users to access the corresponding virtual storage space via a candidate URL address; When a request to share an external link is received again, determine whether there is any unaccessed virtual storage space. If there are unaccessed virtual storage spaces, the access request will be redirected to the candidate URL address corresponding to any unaccessed virtual storage space, so that the user can access the unaccessed virtual storage space. If no unaccessed virtual storage space exists, the request to share the external link will be rejected.

[0007] Furthermore, the external link access management method includes: Construct an access list, Based on the time sequence of the received access requests, the candidate URL addresses corresponding to the accessed virtual storage space are stored in each node of the access list. The pointer of each node in the access list points to the storage node of the candidate URL address corresponding to the virtual storage space actually accessed when the virtual storage space corresponding to the candidate URL address stored in the current node receives another access request.

[0008] Furthermore, after constructing the access list, the external link access management method further includes: Obtain the identity information of the user accessing the virtual storage space, the identity information including one or more of the cloud drive ID, IP address or device MAC address, generate a HASH identifier based on the identity information, and add the HASH identifier to the candidate URL address corresponding to the accessed virtual storage space; Accordingly, the step of storing the candidate URL address corresponding to the accessed virtual storage space in each node of the access list according to the time order of receiving access requests, wherein the pointer of each node in the access list points to the storage node of the candidate URL address corresponding to the virtual storage space actually accessed when the virtual storage space corresponding to the candidate URL address stored in the current node receives another access request, includes: Based on the time sequence of the access requests received, the candidate URL addresses with HASH identifiers for the virtual storage spaces to be accessed are stored in each node of the access list. The pointer of each node in the access list points to the storage node of the candidate URL address with HASH identifier corresponding to the virtual storage space that is actually accessed when the virtual storage space with HASH identifier stored in the current node receives another access request.

[0009] Furthermore, after allowing users to access the corresponding virtual storage space via candidate URL addresses, the external link access management method includes: Get the cloud drive ID of the user who has already accessed the cloud drive; Accordingly, when a request to share an external link is received again, determining whether there is unaccessed virtual storage space includes: When another access request for sharing an external link is received, obtain the cloud storage ID of the user who made the access request. If the cloud storage ID of the user who made the access request is different from the cloud storage ID of the user who has already accessed the link, determine whether there is any unaccessed virtual storage space.

[0010] Furthermore, after allowing users to access the corresponding virtual storage space via candidate URL addresses, the external link access management method includes: Obtain the characteristic information of the users who have been visited, and determine the access rules based on the characteristic information of the users who have been visited; Accordingly, when a request to share an external link is received again, determining whether there is unaccessed virtual storage space includes: When another access request for sharing an external link is received, the characteristic information of the user who made the access request is obtained. If the characteristic information of the user who made the access request matches the access rules, it is determined whether there is any unaccessed virtual storage space.

[0011] Furthermore, the step of obtaining the characteristic information of visited users and determining access rules based on the characteristic information of visited users includes: Obtain the IP address of the visited user and determine the regional access rules based on the IP address of the visited user; Accordingly, when another access request for sharing an external link is received, the feature information of the user who issued the access request is obtained. When the feature information of the user who issued the access request matches the access rules, it is determined whether there is unaccessed virtual storage space, including: When another access request for sharing an external link is received, obtain the IP address of the user who made the access request. If the IP address of the user who made the access request matches the regional access rules, determine whether there is any unaccessed virtual storage space.

[0012] Furthermore, the step of obtaining the characteristic information of visited users and determining access rules based on the characteristic information of visited users includes: Obtain the access time of visited users, and determine the time-based access rules based on the access time of visited users; Accordingly, when another access request for sharing an external link is received, the feature information of the user who issued the access request is obtained. When the feature information of the user who issued the access request matches the access rules, it is determined whether there is unaccessed virtual storage space, including: When another access request for sharing an external link is received, the access time of the user who made the access request is obtained. If the access time of the user who made the access request meets the time access rules, it is determined whether there is any unaccessed virtual storage space.

[0013] Secondly, embodiments of the present invention also provide an external link access management device, comprising: The first generation module is used to generate multiple virtual storage spaces based on the actual storage space of the file to be shared and the preset number of accesses, and the number of virtual storage spaces is the same as the preset number of accesses; The second generation module is used to generate a candidate URL address for each virtual storage space and generate a sharing external link based on any candidate URL address; The first access module is used to allow users to access the corresponding virtual storage space through candidate URL addresses when a request to share an external link is received for the first time. The judgment module is used to determine whether there is any unaccessed virtual storage space when a request to share an external link is received again. The redirection access module is used to redirect the access request to any candidate URL address corresponding to any unaccessed virtual storage space when there is an unaccessed virtual storage space, so that the user can access the unaccessed virtual storage space. The deny module is used to deny access requests for sharing external links when there is no unaccessed virtual storage space.

[0014] Thirdly, embodiments of the present invention also provide a cloud storage service, comprising: One or more processors; Storage device for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the external link access management method provided in the above embodiments.

[0015] Fourthly, embodiments of the present invention also provide a storage medium containing computer-executable instructions, which, when executed by a computer processor, are used to perform the external link access management method provided in the above embodiments.

[0016] Compared with existing technologies, the external link access management method, device, cloud drive, and storage medium described in this invention have the following advantages: (1) The external link access management method, device, cloud storage, and storage medium described in this invention can generate a number of virtual storage spaces equal to the preset number of accesses based on the actual storage space of the file to be shared and the preset number of accesses. It can also generate a candidate URL address for each virtual storage space. When file sharing is required, a sharing external link can be generated based on any candidate URL address. When a user sends a request to access a sharing external link, this invention can redirect the user's access action based on the number of access requests, thus ensuring that each access request accesses a different virtual storage space. If no unaccessed virtual storage space exists, the access request for the sharing external link will be rejected. This facilitates the management of access behavior for sharing external links, thereby preventing the risk of file leakage due to the spread and forwarding of external links.

[0017] (2) The external link access management method, device, cloud storage and storage medium created by the present invention can record the access request behavior of sharing external links through the access list, and can also store the identity information of users accessing the virtual storage space in the form of HASH identifiers in each node of the access list, thereby facilitating the traceability of the access behavior of sharing external links.

[0018] (3) The external link access management method, device, cloud drive and storage medium described in this invention can identify the behavior of the same user accessing and sharing external links multiple times in a row through the user's cloud drive ID, thereby avoiding the multiple access processes of the same user occupying multiple virtual storage spaces.

[0019] (4) The external link access management method, device, cloud drive and storage medium created by the present invention can determine access rules based on the characteristic information of the accessed users, thereby filtering users who subsequently send access requests and preventing users without access rights from accessing shared external links, so as to further improve the confidentiality of the files to be shared. Attached Figure Description

[0020] The accompanying drawings, which form part of this invention, are used to provide a further understanding of the invention. The illustrative embodiments and descriptions of the invention are used to explain the invention and do not constitute an undue limitation of the invention. In the drawings: Figure 1 A flowchart of the external link access management method described in Embodiment 1 of this invention is provided; Figure 2 A flowchart of the external link access management method described in Embodiment 2 of this invention is provided; Figure 3 A flowchart of the external link access management method described in Embodiment 3 of this invention is provided; Figure 4 A flowchart of the external link access management method described in Embodiment 4 of this invention is provided; Figure 5 This invention provides a schematic diagram of the external link access management device described in Embodiment 5 of the present invention. Figure 6 The structural diagram of the cloud storage described in Embodiment Six of the present invention is shown. Detailed Implementation

[0021] The present invention will now be described in further detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and not intended to limit it. Furthermore, it should be noted that, for ease of description, the accompanying drawings show only the parts relevant to the present invention, and not all of the structures.

[0022] Example 1 Figure 1 The flowchart of the external link access management method provided in Embodiment 1 of the present invention specifically includes the following steps: Step 110: Generate multiple virtual storage spaces based on the actual storage space of the file to be shared and the preset number of accesses. The number of virtual storage spaces is the same as the preset number of accesses.

[0023] In existing technologies, before sharing files, users need to move the file to be shared to a pre-defined storage space in a cloud drive and generate an external link based on the URL of the current storage space. This external link is then sent to the file recipient. The recipient can access the storage space of the file to be shared via the URL, facilitating previewing or downloading. However, when sharing files with high confidentiality requirements, existing technologies cannot limit the number of times the external link can be shared. When the recipient forwards the external link, any user can access the storage space of the file to be shared via the URL in the external link, posing a risk of file leakage. Therefore, this embodiment generates multiple virtual storage spaces equal to the pre-defined number of accesses, based on the actual storage space of the file to be shared and the pre-defined number of accesses. Each virtual storage space stores a copy of the file to be shared. When a recipient sends an access request based on the external link, different users' access requests will access different virtual storage spaces. This allows for management and restriction of the number of times the external link can be accessed by utilizing the number of virtual storage spaces, thereby reducing the risk of file leakage.

[0024] It should be noted that the preset access count described in this embodiment can be set by the file owner according to the actual situation. For example, when the file owner needs to share a project file with a relevant design team, the preset access count can be set according to the members of the relevant design team, thereby ensuring that each member of the relevant design team can access the external link normally after receiving it.

[0025] Step 120: Generate a candidate URL address for each virtual storage space, and generate a sharing backlink based on any candidate URL address.

[0026] To facilitate user location and access to virtual storage spaces, this embodiment generates a candidate URL address for each virtual storage space after creating multiple virtual storage spaces. This candidate URL address specifically indicates the location of the virtual storage space within the cloud drive. Since each virtual storage space contains a copy of the file to be shared, when file sharing is needed, a sharing link can be generated based on any candidate URL address, ensuring that the file recipient can access the corresponding virtual storage space through the sharing link.

[0027] Step 130: Upon receiving the first access request for sharing an external link, allow the user to access the corresponding virtual storage space via a candidate URL address.

[0028] When sharing files, the file owner directly sends the sharing link to the file recipient. The recipient, upon receiving the sharing link, will then send an access request to the cloud storage service based on that link. Therefore, upon receiving the first access request, it can be determined that the user sending the request is a legitimate file recipient recognized by the file owner. At this point, the user can be allowed to access the corresponding virtual storage space via the candidate URL address in the sharing link, facilitating common operations such as previewing, downloading, or modifying the shared file copy within the virtual storage space.

[0029] Step 140: When another access request for sharing an external link is received, determine whether there is any unaccessed virtual storage space.

[0030] Typically, users who receive a shared external link will forward it by copying and pasting. Therefore, when other users want to access the storage space of the shared file, they also need to send an access request to the cloud drive based on the shared external link. Since the number of virtual storage spaces in this embodiment is the same as the preset access count, when another access request for the shared external link is received, the access count of the shared external link can be counted by checking whether there are any unaccessed virtual storage spaces, thus facilitating the management and restriction of the access count of the shared external link.

[0031] Step 150: If there is an unaccessed virtual storage space, the access request will be redirected to the candidate URL address corresponding to any unaccessed virtual storage space, so that the user can access the unaccessed virtual storage space.

[0032] When unaccessed virtual storage spaces exist, it indicates that the current access count of the shared external link is less than the preset access count. In this case, the access request can be redirected to a candidate URL address corresponding to any unaccessed virtual storage space, thus allowing the user making the access request to access the unaccessed virtual storage space corresponding to that candidate URL address. In this way, different access requests will lead users to access different virtual storage spaces, thereby using the number of virtual storage spaces to record and constrain the access count of the shared external link.

[0033] Step 160: If there is no unaccessed virtual storage space, then the access request to share the external link is rejected.

[0034] When there is no unaccessed virtual storage space, it means that the actual number of accesses to the shared external link has reached the preset number of accesses. Subsequent access requests from users will pose a risk of leakage to the file to be shared. At this time, the access request to the shared external link will be rejected, and users will not be able to access any virtual storage space, thus enabling the file to be shared to achieve better confidentiality.

[0035] This embodiment generates a number of virtual storage spaces equal to the preset number of accesses based on the actual storage space of the file to be shared and the preset number of accesses. A candidate URL address is generated for each virtual storage space. When file sharing is needed, a sharing link can be generated based on any of these candidate URL addresses. When a user sends a request to access the sharing link, this invention can redirect the user's access action based on the number of access requests, ensuring that each access request accesses a different virtual storage space. If no unaccessed virtual storage space exists, the access request to the sharing link is rejected. This facilitates the management of access behavior to sharing links, thereby preventing the risk of file leakage due to the spread and forwarding of the sharing link.

[0036] Example 2 Figure 2 This is a flowchart of an external link access management method provided in Embodiment 2 of the present invention. This embodiment is an optimization based on the above embodiment. In this embodiment, after rejecting access requests to share external links, the following steps are added: An access list is constructed. Based on the time order in which access requests are received, the candidate URL addresses corresponding to the virtual storage space to be accessed are stored in each node of the access list. The pointer of each node in the access list points to the storage node of the candidate URL address corresponding to the virtual storage space that is actually accessed when the virtual storage space corresponding to the candidate URL address stored in the current node receives another access request.

[0037] Accordingly, the external link access management method provided in this embodiment specifically includes: Step 210: Generate multiple virtual storage spaces based on the actual storage space of the file to be shared and the preset number of accesses. The number of virtual storage spaces is the same as the preset number of accesses.

[0038] Step 220: Generate a candidate URL address for each virtual storage space, and generate a sharing backlink based on any candidate URL address.

[0039] Step 230: Upon receiving the first access request for sharing an external link, allow the user to access the corresponding virtual storage space via a candidate URL address.

[0040] Step 240: When another access request for sharing an external link is received, determine whether there is any unaccessed virtual storage space.

[0041] Step 250: If there is an unaccessed virtual storage space, the access request is redirected to the candidate URL address corresponding to any unaccessed virtual storage space, so that the user can access the unaccessed virtual storage space.

[0042] Step 260: If there is no unaccessed virtual storage space, then the access request to share the external link is rejected.

[0043] Step 270: Construct an access list. Based on the time order of receiving access requests, store the candidate URL addresses corresponding to the accessed virtual storage space in each node of the access list. The pointer of each node in the access list points to the storage node of the candidate URL address corresponding to the virtual storage space actually accessed when the virtual storage space corresponding to the candidate URL address stored in the current node receives another access request.

[0044] To facilitate the tracing of access behavior to shared external links, this embodiment uses an access list to record the distribution logic of shared external links and the virtual storage space actually accessed by each access request. It should be noted that the access list is a storage structure used to store candidate URLs for virtual storage spaces. After constructing the access list storage architecture, the candidate URL addresses corresponding to the accessed virtual storage spaces will be stored in each node of the access list according to the time order in which the access requests are received. Since the logical order between data elements in the list needs to be reflected through the linking order of pointers in the list, in this embodiment, the pointers in the access list will link the nodes according to the logical order between the access request and the actual accessed virtual storage space. Specifically, since the virtual storage space will redirect when it receives another access request, the virtual storage space accessed after the redirection is the virtual storage space actually accessed by the current access request. In this embodiment, each node in the access list stores a candidate URL address. The corresponding virtual storage space can be determined through the candidate URL address. Therefore, the pointer of each node in the access list will point to the storage node of the candidate URL address corresponding to the virtual storage space actually accessed when the virtual storage space corresponding to the candidate URL address stored in the current node receives another access request. This allows the access list to reflect the logical order between the access request and the actual accessed virtual storage space.

[0045] Correspondingly, cloud storage administrators and / or file owners can also understand the distribution logic of shared external links by accessing the linked list, thus facilitating the tracing of the spread and forwarding behavior of shared external links. Specifically, when a virtual storage space receives only two access requests, it can be proven that the user accessing the current virtual storage space forwarded the shared external link to another user. When a virtual storage space receives multiple access requests consecutively, it can be proven that the user accessing the current virtual storage space spread and forwarded the shared external link to multiple users.

[0046] As an optional implementation of this embodiment, to facilitate the identification of the access user for each virtual storage space, the following steps can be added after constructing the access list: Obtain the identity information of the user accessing the virtual storage space. The identity information includes one or more of the following: cloud drive ID, IP address, or device MAC address. Generate a HASH identifier based on the identity information and add the HASH identifier to the candidate URL address corresponding to the accessed virtual storage space.

[0047] Accordingly, the step of storing the candidate URL address corresponding to the accessed virtual storage space in each node of the access list according to the time order of receiving access requests, and the pointer of each node in the access list pointing to the storage node of the candidate URL address corresponding to the virtual storage space actually accessed when the virtual storage space corresponding to the candidate URL address stored in the current node receives another access request, can be specifically optimized as follows: Based on the time sequence of the access requests received, the candidate URL addresses with HASH identifiers for the virtual storage space to be accessed are stored in each node of the access list. The pointer of each node in the access list points to the storage node of the candidate URL address with HASH identifier corresponding to the virtual storage space that is actually accessed when the virtual storage space with HASH identifier stored in the current node receives another access request.

[0048] It should be noted that the HASH identifier described in this embodiment is a hash value generated by processing the user's identification information using a preset hash function. Therefore, once the user's identification information is determined, the corresponding HASH identifier will be a unique and fixed-length string. After the candidate URL addresses with HASH identifiers are stored in each node of the access chain, the cloud storage administrator and / or file owner can distinguish users who access and share external links based on the HASH identifiers, thereby facilitating the tracing of users with potential data leakage risks.

[0049] This embodiment adds the following steps after rejecting access requests for sharing external links: An access list is constructed. Based on the time sequence of received access requests, candidate URLs corresponding to the accessed virtual storage space are stored in each node of the access list. Each node in the access list has a pointer pointing to the storage node corresponding to the candidate URL of the virtual storage space actually accessed when the virtual storage space corresponding to the candidate URL stored in the current node receives another access request. This access list records access requests for sharing external links. Cloud storage administrators or file owners can use the access list to understand the candidate URLs corresponding to each access request and the distribution logic of the shared external links, thus facilitating the tracing of actions that pose a risk of data leakage.

[0050] Example 3 Figure 3 This is a flowchart of the external link access management method provided in Embodiment 3 of the present invention. This embodiment is an optimization based on the above embodiment. In this embodiment, after allowing the user to access the corresponding virtual storage space through a candidate URL address, the following step is added: Get the cloud drive ID of the user who has been accessed.

[0051] Accordingly, the step of determining whether there is unaccessed virtual storage space when a request to share an external link is received again is specifically optimized as follows: When another access request for sharing an external link is received, obtain the cloud storage ID of the user who made the access request. If the cloud storage ID of the user who made the access request is different from the cloud storage ID of the user who has already accessed the link, determine whether there is any unaccessed virtual storage space.

[0052] Specifically, the external link access management method provided in this embodiment includes: Step 310: Generate multiple virtual storage spaces based on the actual storage space of the file to be shared and the preset number of accesses. The number of virtual storage spaces is the same as the preset number of accesses.

[0053] Step 320: Generate a candidate URL address for each virtual storage space, and generate a sharing backlink based on any candidate URL address.

[0054] Step 330: Upon receiving the first access request for sharing an external link, allow the user to access the corresponding virtual storage space via a candidate URL address.

[0055] Step 340: Obtain the cloud drive ID of the accessed user.

[0056] In the prior art, in order to facilitate the management of cloud storage users, common cloud storage applications require users to log in to their cloud storage accounts for permission verification when accessing shared external links. Therefore, this embodiment can obtain the cloud storage ID of the accessed user after allowing the user to access the corresponding virtual storage space through the candidate URL address, and thus record the identity of the accessed user with the help of the cloud storage ID.

[0057] Step 350: When another access request for sharing an external link is received, obtain the cloud drive ID of the user who sent the access request. If the cloud drive ID of the user who sent the access request is different from the cloud drive ID of the user who has already accessed the link, determine whether there is any unaccessed virtual storage space.

[0058] In practical use, users who receive shared external links may need to access them multiple times. To prevent the same user from occupying multiple virtual storage spaces, this embodiment will verify the user's cloud drive ID when a new access request for the shared external link is received. If the cloud drive ID of the user making the access request is the same as that of the user who has already accessed the shared external link, it proves that the current user has successfully accessed a virtual storage space, and the user's access request will not be redirected, thus preventing the user from occupying multiple virtual storage spaces. When the cloud drive ID of the user making the access request is different from that of the user who has already accessed the shared external link, it proves that the current user has not accessed any virtual storage space. In this case, it can be determined whether there are unaccessed virtual storage spaces, and the user's access request will be redirected, thereby facilitating the limitation of the number of times different users can access the shared external link by the number of virtual storage spaces.

[0059] Step 360: If there is an unaccessed virtual storage space, the access request will be redirected to the candidate URL address corresponding to any unaccessed virtual storage space, so that the user can access the unaccessed virtual storage space.

[0060] Step 370: If there is no unaccessed virtual storage space, then the request to share the external link is rejected.

[0061] This embodiment adds the following step after allowing users to access the corresponding virtual storage space via candidate URL addresses: obtaining the cloud drive ID of the already accessed user. When a new access request for a shared external link is received, it determines whether there is any unaccessed virtual storage space. Specifically, when a new access request for a shared external link is received, the cloud drive ID of the user issuing the access request is obtained. If the cloud drive ID of the user issuing the access request is different from the cloud drive ID of the already accessed user, it determines whether there is any unaccessed virtual storage space. This allows for the identification of multiple consecutive accesses to shared external links by the same user using the user's cloud drive ID, thereby preventing multiple accesses by the same user from occupying multiple virtual storage spaces, and thus improving the accuracy and reliability of managing the number of shared external link accesses.

[0062] Example 4 Figure 4 This is a flowchart of the external link access management method provided in Embodiment 4 of the present invention. This embodiment is an optimization based on the above embodiment. In this embodiment, after allowing the user to access the corresponding virtual storage space through a candidate URL address, the following step is added: Obtain the characteristic information of the users who have been visited, and determine the access rules based on the characteristic information of the users who have been visited.

[0063] Accordingly, the step of determining whether there is unaccessed virtual storage space when a request to share an external link is received again is specifically optimized as follows: When another access request for sharing an external link is received, the characteristic information of the user who made the access request is obtained. If the characteristic information of the user who made the access request matches the access rules, it is determined whether there is any unaccessed virtual storage space.

[0064] Specifically, the external link access management method provided in this embodiment includes: Step 410: Generate multiple virtual storage spaces based on the actual storage space of the file to be shared and the preset number of accesses. The number of virtual storage spaces is the same as the preset number of accesses.

[0065] Step 420: Generate a candidate URL address for each virtual storage space, and generate a sharing backlink based on any candidate URL address.

[0066] Step 430: Upon receiving the first access request for sharing an external link, allow the user to access the corresponding virtual storage space via a candidate URL address.

[0067] Step 440: Obtain the characteristic information of the accessed users and determine the access rules based on the characteristic information of the accessed users.

[0068] In practical applications, the first user to receive a shared external link may need to forward it within a specific scope to facilitate other users within that scope accessing the shared file. In this scenario, the first user to receive the shared external link typically shares one or more similar characteristic information with other users. For example, after receiving a shared external link, a company manager needs to forward it to other members within the company so they can quickly access the shared file. Since the company manager and other company members share the same office location, their IP addresses are located in the same place. Therefore, the access rules for the shared external link can be determined based on the characteristic information of the first user, thus determining whether subsequent users making access requests are legitimate. In view of this, this embodiment can obtain the characteristic information of users who have already accessed the virtual storage space after allowing them to do so via candidate URL addresses, and then use the access rules determined based on this characteristic information to facilitate the filtering of users making subsequent access requests.

[0069] Step 450: When another access request for sharing an external link is received, obtain the characteristic information of the user who issued the access request. If the characteristic information of the user who issued the access request matches the access rules, determine whether there is any unaccessed virtual storage space.

[0070] When a request to share an external link is received again, the user's characteristics should be obtained to facilitate user screening. If the user's characteristics do not match the access rules, it proves that the user is unauthorized, and the access request should be rejected to prevent the file to be shared from being leaked. If the user's characteristics match the access rules, it proves that the user is legitimate. In this case, it should be determined whether there is an unaccessed virtual storage space, so that the access request can be redirected to a specific virtual storage space, allowing the legitimate user to access the file to be shared.

[0071] Optionally, in this embodiment, the user's characteristic information may include the user's IP address and / or the user's access time.

[0072] When the user's characteristic information is the user's IP address, the process of obtaining the characteristic information of the accessed user and determining the access rules based on the characteristic information of the accessed user can be specifically optimized as follows: Obtain the IP address of the visited user and determine the regional access rules based on the IP address of the visited user.

[0073] Accordingly, when another access request for sharing an external link is received, the feature information of the user who issued the access request is obtained. When the feature information of the user who issued the access request matches the access rules, it is determined whether there is unaccessed virtual storage space. This can be specifically optimized as follows: When another access request for sharing an external link is received, obtain the IP address of the user who made the access request. If the IP address of the user who made the access request matches the regional access rules, determine whether there is any unaccessed virtual storage space.

[0074] An IP address is a standardized address format provided by the IP protocol. It assigns a logical address to every network and every host on the Internet, facilitating the differentiation of different users. After obtaining the IP address of a visited user, the actual geographic location of the visited user can be determined through an address database. The rule that the user's actual geographic location matches the visited user's actual geographic location is then set as the geographic access rule for sharing external links. This allows for the determination of whether a user has legitimate access rights to share external links based on their geographic location.

[0075] After obtaining the IP address of the user who made the access request, the actual address of the IP address can be queried from the address database. If the actual address of the user who made the access request is the same as the actual address of the user who has already been accessed, it can be determined that the user's characteristics meet the access rules. At this time, the user who made the request is a legitimate user and has the right to access the virtual storage space.

[0076] When the user's characteristic information is the user's access time, the process of obtaining the characteristic information of the accessed users and determining the access rules based on the characteristic information of the accessed users can be specifically optimized as follows: Obtain the access time of visited users, and determine the time-based access rules based on the access time of visited users.

[0077] Accordingly, when another access request for sharing an external link is received, the feature information of the user who issued the access request is obtained. When the feature information of the user who issued the access request matches the access rules, it is determined whether there is unaccessed virtual storage space. This can be specifically optimized as follows: When another access request for sharing an external link is received, the access time of the user who made the access request is obtained. If the access time of the user who made the access request meets the time access rules, it is determined whether there is any unaccessed virtual storage space.

[0078] In some application scenarios, file owners may limit the sharing duration of files. After a preset sharing duration is exceeded, all users will be unable to access the shared external link. To meet this requirement, this embodiment can obtain the access time of the accessed users, use the access time of the accessed users as the starting point of the timer, and calculate the timer end point according to the preset sharing duration. At this time, whether the user's access time falls between the timer start point and the timer end point constitutes the time access rule for sharing the external link. The time access rule can be used to determine whether a user has legitimate access rights to share the external link based on the access time.

[0079] After obtaining the access time of the user who made the access request, if the access time of the user who made the access request is between the start and end of the timer, it can be determined that the characteristic information of the user who made the access request conforms to the access rules. At this time, the user who made the request is a legitimate user and has the right to access the virtual storage space.

[0080] Step 460: If there is an unaccessed virtual storage space, the access request will be redirected to the candidate URL address corresponding to any unaccessed virtual storage space, so that the user can access the unaccessed virtual storage space.

[0081] Step 470: If there is no unaccessed virtual storage space, then the access request to share the external link is rejected.

[0082] This embodiment adds the following steps after allowing users to access the corresponding virtual storage space via candidate URLs: obtaining the characteristic information of users who have already accessed the space, and determining access rules based on the characteristic information. Furthermore, when a request to share an external link is received again, it determines whether there is any unaccessed virtual storage space. Specifically, when a request to share an external link is received again, the characteristic information of the user issuing the access request is obtained. If the characteristic information of the user issuing the access request matches the access rules, it determines whether there is any unaccessed virtual storage space. This allows for the filtering of users who subsequently issue access requests, thereby preventing users without access rights from accessing shared external links, and further improving the confidentiality of the files to be shared.

[0083] Example 5 Figure 5 A schematic diagram of the external link access management device provided in Embodiment 5 of the present invention is shown below. Figure 5 As shown, the device includes: The first generation module 510 is used to generate multiple virtual storage spaces based on the actual storage space of the file to be shared and the preset number of accesses, and the number of virtual storage spaces is the same as the preset number of accesses; The second generation module 520 is used to generate a candidate URL address for each virtual storage space and generate a sharing external link based on any candidate URL address; The first access module 530 is used to allow users to access the corresponding virtual storage space through a candidate URL address when a request for access to a shared external link is received for the first time. The judgment module 540 is used to determine whether there is any unaccessed virtual storage space when a request to share an external link is received again. The redirection access module 550 is used to redirect the access request to any candidate URL address corresponding to any unaccessed virtual storage space when there is an unaccessed virtual storage space, so that the user can access the unaccessed virtual storage space. Module 560 is used to deny access requests for sharing external links when there is no unaccessed virtual storage space.

[0084] The external link access management device provided in this embodiment can generate a number of virtual storage spaces equal to the preset number of accesses through a first generation module and a second generation module, and can generate shareable external links based on candidate URL addresses corresponding to the virtual storage spaces. Secondly, when the device receives a shareable external link access request for the first time through the initial access module, it allows the user to access the corresponding virtual storage space through the candidate URL address, facilitating the user's access to the file to be shared. Furthermore, when the device receives a shareable external link access request again, it can determine whether there are any unaccessed virtual storage spaces. If unaccessed virtual storage spaces exist, the access request is redirected through the redirection access module; otherwise, the access request is rejected through the rejection module. Compared with existing technologies, this device, through the cooperation of various functional modules, improves the convenience of managing and restricting external link access behavior, preventing the risk of leakage of files to be shared due to the spread and forwarding of external links.

[0085] Based on the above embodiments, the device includes: The linked list construction module is used to construct an access linked list and, according to the time order of the access requests received, store the candidate URL addresses corresponding to the accessed virtual storage space in each node of the access linked list. Moreover, the pointer of each node in the access linked list points to the storage node of the candidate URL address corresponding to the virtual storage space actually accessed when the virtual storage space corresponding to the candidate URL address stored in the current node receives another access request.

[0086] Based on the above embodiments, the linked list construction module includes: The identifier generation unit is used to obtain the identity information of the user accessing the virtual storage space. The identity information includes one or more of the following: cloud drive ID, IP address, or device MAC address. The unit generates a HASH identifier based on the identity information and adds the HASH identifier to the candidate URL address corresponding to the accessed virtual storage space.

[0087] Based on the above embodiments, the device includes: The cloud drive ID retrieval module is used to retrieve the cloud drive ID of users who have already accessed the cloud drive.

[0088] Accordingly, the determination module includes: The cloud storage ID determination unit is used to obtain the cloud storage ID of the user who made the access request when a request to share an external link is received again, and to determine whether there is an unaccessed virtual storage space if the cloud storage ID of the user who made the access request is different from the cloud storage ID of the user who has already accessed the link.

[0089] Based on the above embodiments, the device further includes: The feature acquisition module is used to acquire the feature information of the accessed users and determine the access rules based on the feature information of the accessed users.

[0090] Accordingly, the determination module includes: The feature judgment unit is used to obtain the feature information of the user who made the access request when a request to share an external link is received again, and to determine whether there is an unaccessed virtual storage space when the feature information of the user who made the access request matches the access rules.

[0091] Based on the above embodiments, the feature acquisition module includes: The region acquisition unit is used to obtain the IP address of the accessed user and determine the region access rules based on the IP address of the accessed user.

[0092] Accordingly, the feature determination unit includes: The region determination subunit is used to obtain the IP address of the user who made the access request when another access request for sharing external links is received. If the IP address of the user who made the access request matches the region access rules, it determines whether there is an unaccessed virtual storage space.

[0093] Based on the above embodiments, the feature acquisition module includes: The time acquisition unit is used to acquire the access time of visited users and determine the time access rules based on the access time of visited users.

[0094] Accordingly, the feature determination unit further includes: The time-based judgment subunit is used to obtain the access time of the user who issued the access request when another access request for sharing an external link is received. If the access time of the user who issued the access request meets the time access rules, it determines whether there is any unaccessed virtual storage space.

[0095] The external link access management device provided in this embodiment of the invention can execute the external link access management method provided in any embodiment of the invention, and has the corresponding functional modules and beneficial effects of executing the method.

[0096] Example 6 Figure 6 This is a schematic diagram of the structure of a cloud storage device provided in Embodiment Six of the present invention. Figure 6 A block diagram is shown of an exemplary cloud storage 12 suitable for implementing embodiments of the present invention. Figure 6 The cloud drive 12 shown is merely an example and should not impose any limitations on the functionality and scope of use of the embodiments of the present invention.

[0097] like Figure 6 As shown, the cloud storage 12 is presented in the form of a general-purpose computing device. The components of the cloud storage 12 may include, but are not limited to: one or more processors or processing units 16, system memory 28, and a bus 18 connecting different system components (including system memory 28 and processing unit 16).

[0098] Bus 18 represents one or more of several bus architectures, including a memory bus or memory controller, a peripheral bus, a graphics acceleration port, a processor, or a local bus using any of the various bus architectures. For example, these architectures include, but are not limited to, the Industry Standard Architecture (ISA) bus, the Micro Channel Architecture (MAC) bus, the Enhanced ISA bus, the Video Electronics Standards Association (VESA) local bus, and the Peripheral Component Interconnect (PCI) bus.

[0099] Cloud storage 12 typically includes a variety of computer system readable media. These media can be any available media that can be accessed by cloud storage 12, including volatile and non-volatile media, removable and non-removable media.

[0100] System memory 28 may include computer system readable media in the form of volatile memory, such as random access memory (RAM) 30 and / or cache 32. Cloud drive 12 may further include other removable / non-removable, volatile / non-volatile computer system storage media. By way of example only, storage system 34 may be used to read and write non-removable, non-volatile magnetic media (… Figure 6 Not shown; usually referred to as a "hard drive"). Although Figure 6As not shown, disk drives for reading and writing to removable non-volatile disks (e.g., "floppy disks") and optical disc drives for reading and writing to removable non-volatile optical discs (e.g., CD-ROMs, DVD-ROMs, or other optical media) may be provided. In these cases, each drive may be connected to bus 18 via one or more data media interfaces. System memory 28 may include at least one program product having a set (e.g., at least one) of program modules configured to perform the functions of the embodiments of the present invention.

[0101] A program / utility 40 having a set (at least one) of program modules 42 may be stored, for example, in system memory 28. Such program modules 42 include, but are not limited to, an operating system, one or more application programs, other program modules, and program data. Each or some combination of these examples may include an implementation of a network environment. Program modules 42 typically perform the functions and / or methods described in the embodiments of the present invention.

[0102] The cloud drive 12 can also communicate with one or more external devices 14 (e.g., keyboard, pointing device, display 24, etc.), and with one or more devices that enable users to interact with the cloud drive 12, and / or with any device that enables the cloud drive 12 to communicate with one or more other computing devices (e.g., network card, modem, etc.). This communication can be performed via input / output (I / O) interface 22. Furthermore, the cloud drive 12 can also communicate with one or more networks (e.g., local area network (LAN), wide area network (WAN), and / or public networks, such as the Internet) via network adapter 20. As shown, network adapter 20 communicates with other modules of the cloud drive 12 via bus 18. It should be understood that, although not shown in the figure, other hardware and / or software modules can be used in conjunction with the cloud drive 12, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0103] The processing unit 16 executes various functional applications and data processing by running programs stored in the system memory 28, such as implementing the external link access management method provided in the embodiments of the present invention.

[0104] Example 7 Embodiment 7 of the present invention also provides a storage medium containing computer-executable instructions, which, when executed by a computer processor, are used to perform any of the external link access management methods provided in the above embodiments.

[0105] The computer storage medium of this invention can be any combination of one or more computer-readable media. A computer-readable medium can be a computer-readable signal medium or a computer-readable storage medium. A computer-readable storage medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of computer-readable storage media (a non-exhaustive list) include: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination thereof. In this document, a computer-readable storage medium can be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system, apparatus, or device.

[0106] Computer-readable signal media may include data signals propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such propagated data signals may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. Computer-readable signal media may also be any computer-readable medium other than computer-readable storage media, capable of sending, propagating, or transmitting programs for use by or in connection with an instruction execution system, apparatus, or device.

[0107] Program code contained on a computer-readable medium may be transmitted using any suitable medium, including, but not limited to, wireless, wire, optical fiber, RF, etc., or any suitable combination thereof.

[0108] Computer program code for performing the operations of this invention can be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, and C++, as well as conventional procedural programming languages ​​such as "C" or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving remote computers, the remote computer can be connected to the user's computer via any type of network—including a local area network (LAN) or a wide area network (WAN)—or can be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0109] Note that the above description is merely a preferred embodiment of the present invention and the technical principles employed. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and various obvious changes, readjustments, and substitutions can be made without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in detail through the above embodiments, the present invention is not limited to the above embodiments, and may include many other equivalent embodiments without departing from the concept of the present invention, the scope of which is determined by the scope of the appended claims.

Claims

1. A method for managing external link access, characterized in that... include: Based on the actual storage space of the file to be shared and the preset number of accesses, multiple virtual storage spaces are generated, and the number of virtual storage spaces is the same as the preset number of accesses. Generate a candidate URL address for each virtual storage space, and generate a sharing external link based on any candidate URL address; Upon receiving an access request for sharing an external link for the first time, allow users to access the corresponding virtual storage space via a candidate URL address; When a request to share an external link is received again, determine whether there is any unaccessed virtual storage space. If there are unaccessed virtual storage spaces, the access request will be redirected to the candidate URL address corresponding to any unaccessed virtual storage space, so that the user can access the unaccessed virtual storage space. If no unaccessed virtual storage space exists, the request to share the external link will be rejected.

2. The external link access management method according to claim 1, characterized in that: The external link access management method includes: Construct an access list, Based on the time sequence of the received access requests, the candidate URL addresses corresponding to the accessed virtual storage space are stored in each node of the access list. The pointer of each node in the access list points to the storage node of the candidate URL address corresponding to the virtual storage space actually accessed when the virtual storage space corresponding to the candidate URL address stored in the current node receives another access request.

3. The external link access management method according to claim 2, characterized in that: After constructing the access list, the external link access management method further includes: Obtain the identity information of the user accessing the virtual storage space, the identity information including one or more of the cloud drive ID, IP address or device MAC address, generate a HASH identifier based on the identity information, and add the HASH identifier to the candidate URL address corresponding to the accessed virtual storage space; The step of storing candidate URL addresses corresponding to the accessed virtual storage space in each node of the access linked list according to the time sequence of the received access requests, wherein each node in the access linked list has a pointer pointing to the storage node of the candidate URL address corresponding to the virtual storage space actually accessed when the virtual storage space corresponding to the candidate URL address stored in the current node receives another access request, including: Based on the order in which access requests are received, candidate URLs with hash identifiers for the virtual storage space to be accessed are stored in each node of the access list. The pointer of each node in the access list points to the storage node of the candidate URL address with hash identifier corresponding to the virtual storage space that is actually accessed when the virtual storage space with hash identifier stored in the current node receives another access request.

4. The external link access management method according to claim 1, characterized in that: After allowing users to access the corresponding virtual storage space via candidate URL addresses, the external link access management method includes: Get the cloud drive ID of the user who has already accessed the cloud drive; When a request to share an external link is received again, determining whether there is unaccessed virtual storage space includes: When another access request for sharing an external link is received, obtain the cloud storage ID of the user who made the access request. If the cloud storage ID of the user who made the access request is different from the cloud storage ID of the user who has already accessed the link, determine whether there is any unaccessed virtual storage space.

5. The external link access management method according to claim 1, characterized in that: After allowing users to access the corresponding virtual storage space via candidate URL addresses, the external link access management method includes: Obtain the characteristic information of the users who have been accessed, and determine the access rules based on the characteristic information of the users who have been accessed; When a request to share an external link is received again, determining whether there is unaccessed virtual storage space includes: When another access request for sharing an external link is received, the characteristic information of the user who made the access request is obtained. If the characteristic information of the user who made the access request matches the access rules, it is determined whether there is any unaccessed virtual storage space.

6. The external link access management method according to claim 5, characterized in that: The step of obtaining the characteristic information of visited users and determining access rules based on the characteristic information of visited users includes: Obtain the IP address of the visited user and determine the regional access rules based on the IP address of the visited user; When a request to share an external link is received again, the feature information of the user who issued the request is obtained. If the feature information of the user who issued the request matches the access rules, it is determined whether there is any unaccessed virtual storage space, including: When another access request for sharing an external link is received, obtain the IP address of the user who made the access request. If the IP address of the user who made the access request matches the regional access rules, determine whether there is any unaccessed virtual storage space.

7. The external link access management method according to claim 5, characterized in that: The step of obtaining the characteristic information of visited users and determining access rules based on the characteristic information of visited users includes: Obtain the access time of visited users, and determine the time-based access rules based on the access time of visited users; When a request to share an external link is received again, the feature information of the user who issued the request is obtained. If the feature information of the user who issued the request matches the access rules, it is determined whether there is any unaccessed virtual storage space, including: When another access request for sharing an external link is received, the access time of the user who made the access request is obtained. If the access time of the user who made the access request meets the time access rules, it is determined whether there is any unaccessed virtual storage space.

8. An external link access management device, characterized in that, include: The first generation module is used to generate multiple virtual storage spaces based on the actual storage space of the file to be shared and the preset number of accesses, and the number of virtual storage spaces is the same as the preset number of accesses; The second generation module is used to generate a candidate URL address for each virtual storage space and generate a sharing external link based on any candidate URL address; The first access module is used to allow users to access the corresponding virtual storage space through candidate URL addresses when a request for access to a shared external link is received for the first time. The judgment module is used to determine whether there is any unaccessed virtual storage space when a request to share an external link is received again. The redirection access module is used to redirect the access request to any candidate URL address corresponding to any unaccessed virtual storage space when there is an unaccessed virtual storage space, so that the user can access the unaccessed virtual storage space. The deny module is used to deny access requests for sharing external links when there is no unaccessed virtual storage space.

9. A cloud storage service, characterized in that, The cloud storage includes: One or more processors; Storage device for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the external link access management method as described in any one of claims 1-7.

10. A storage medium containing computer-executable instructions, which, when executed by a computer processor, are used to perform the external link access management method as described in any one of claims 1-7.

Images