Access Control List Parameter for Distributed File Download Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In distributed storage systems, the existing file downloading methods increase server load and reduce authentication and response speeds due to the need for server-based authentication processes.
Innovation Solution
A method where the server generates an access control list parameter based on download permission, includes it in the download link, and the terminal attaches it to the download request, allowing the download access node to perform authentication, thereby reducing server load and improving authentication and response speeds.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the server performs authentication for every download request, then download security is ensured, but server load increases and authentication speed decreases
Solution Approach 1:
The authentication function is segmented from the server and assigned to the download access node. The server only generates the access control list parameter, while the download access node performs the actual authentication of download requests, dividing the authentication workload across multiple nodes to improve speed while maintaining security
Solution Approach 2:
The access control list parameter acts as an intermediary that carries authentication information from the server to the download access node. This parameter enables the download access node to perform authentication without direct server involvement in each request, reducing server load while ensuring security through the embedded authentication data
2Reliability
If the server performs authentication for every download request, then download security is ensured, but response speed decreases
Solution Approach 1:
The authentication function is segmented from the server and assigned to the download access node. The server only generates the access control list parameter, while the download access node performs the actual authentication of download requests, dividing the authentication workload across multiple nodes to improve speed while maintaining security
Solution Approach 2:
The server performs preliminary action by generating the access control list parameter in advance and embedding it in the download link. This preliminary preparation of authentication information allows the download access node to quickly authenticate requests without needing to contact the server, improving response speed while ensuring security through the pre-configured authentication data
3Extent of automation
If the server handles all authentication processes, then centralized control is maintained, but server load increases
Solution Approach 1:
The authentication function is segmented from the server and assigned to the download access node. The server only generates the access control list parameter, while the download access node performs the actual authentication of download requests, dividing the authentication workload across multiple nodes to improve speed while maintaining security
Solution Approach 2:
The download access node performs self-service authentication using the access control list parameter. Instead of requiring the server to handle every authentication request, the download access node autonomously authenticates requests locally, reducing server load while maintaining centralized control through the server-generated authentication parameters
Data Source
AI summary
The present invention discloses a file downloading method, a server, a download access node, and a distributed storage system, which pertains to the field of communications technologies, and is designed to resolve a problem in the prior art that load on the server increases, and an authentication speed and a response speed for downloading a file are reduced. The file downloading method includes: acquiring, by a server, download permission that is set, and generating an access control list parameter of the download permission; and releasing, by the server, a download link that includes the access control list parameter, so that a terminal acquires the download link and generates a download request that includes the access control list parameter.