基于云存储的数字档案馆文件安全保护机制研究

Research on Cloud-Storage-Based File Security Protection Mechanism for Digital Archives

王根发, 张浩

Genfa WANG, Hao ZHANG

中国地质大学档案馆武汉市 430074

出版日期2016-04-28卷期第30卷第2期页码110-114DOI10.16065/j.cnki.issn1002-1620.2016.02.020浏览次数0 次

查看 HTML 全文下载 PDF 全文期刊原文页

摘要

云存储技术的发展为解决数字档案馆建设中数据存储的问题提供了新思路。其中,云存储的安全性是影响其发展的重要因素之一。本文通过分析国内外云存储研究现状及发展趋势,运用动态身份认证、存取访问控制、RS纠删码冗余容错策略、数据分割与聚合机制等设计出一种面向云存储的文件安全保护机制,提出了一套面向云存储系统透明的文件安全保护框架,维护了云存储环境下的文件安全性,确保了文件存取的隐私性、完整性和可用性,为数字档案馆数据云存储环境下面向多用户的文件安全保护提供了一种有效的解决方案。

关键词：数字档案馆云存储访问控制RS纠删码数据分割与聚合

Abstract

The development of cloud storage technology provides a new idea for solving data storage problem in the construction of digital archives. Among them, the cloud storage security is one of the important factors influencing its development. Through analysis of the domestic and international research status and development trend of cloud storage, we use dynamic identity authentication, access control, RS erasure code fault-tolerant strategy, data segmentation and polymerization mechanism and so on to design a file security protection mechanism for the cloud storage, and put forward a set of system transparent file safety protection framework facing the cloud storage, which can maintain the safety of files in cloud storage environment, ensure the file access privacy, integrity, and availability, and offer a kind of effective solution to protect multi-users' files safety for digital archives data cloud storage.

Key words: digital archives; cloud storage; access control; RS erasure code; data segmentation and polymerization

引用格式

王根发, 张浩. 基于云存储的数字档案馆文件安全保护机制研究[J]. 档案学研究, 2016, 30(2): 110-114.

Genfa WANG, Hao ZHANG. Research on Cloud-Storage-Based File Security Protection Mechanism for Digital Archives. Archives Science Study, 2016, 30(2): 110-114.

参考文献

展开查看参考文献（13 条）

[1] J. Wu, P. yckoff, D. K. Panda. PVFS over InfiniBand: Design and Performance Evaluation[A].Proceedings[C]. of 2003 International Conference on Parallel Processing, 2003:107~115. [2] S.A.Weil,K.T.Pollack,S.A.Brandt,etal.Dynamic Metadata Management for Petabyte-Scale File Systems[A]. Proceedings of the ACM/IEEE SuperComputing Conference[C]. 2004: 35~47. [3] D. Ellard, J. Ledlie, P. Malkani, et al.Passive NFS Tracing of Email and Research Workloads[A]. Proceedings of the Second USENIX Conference on File and Storage Technologies (FAST’03)[C] 2003: 203~216. [4] 马玮骏, 吴海佳, 刘鹏. MassCloud云存储系统构架及可靠性机制[J].河海大学学报(自然科学版),2011,39(3):348-354. [5] M.Aguilera, R. Strom.Efficient atomic broadcast using deterministicmerge[A]. Proceedings of ACM PODC[C] 2000:209,218. [6] Y. Amir, C. Danilov, J. Kirsch, et al.Scaling Byzantine faulttolerant replication to wide area networks[A]. Proceedings of IEEE/IFIP DSN[C] 2006:105,114. [7] William Stallings. Cryptography and Network Security:Principles and Practices, Fourth Edition.孟庆树等译.北京:电子工业出版社,2009. [8] 张焕国,刘玉珍. 密码学引论.武汉:武汉大学出版社,2004. [9] 3SandhuRS and SamaratiP. Accesscontrol: principles and practice[J]. IEEE Communication Magazine, 1994: 40-48. [10] Rama Chandran.J. Designing Security Architecture Solution [M], Washington: Washington University Press, 2002. [11] 宁葵,严毅,李陶深.一种基于角色访问控制的数据库安全模型.微机发展, 2005,15(10). [12] 余林琛,章巍,林强等.RS纠删码在云存储中的应用[J].微电子学与计算机,2011(28):234-236. [13] 吴吉义,章剑林,傅建庆等.基于Kademlia的云存储系统数据冗余方案研究.电信科学,2011(2):68-73.