Design And Implementation Of Centralized Security Management Server In Distributed File System

With exploding increase of information and continuously improvement of applicant requirement, users requires more and more about the storage capacity and security.Distributed file system which can integrate a large number of cheap storage devices with lower capacity into a storage system with a bigger capacity and high throughput popularizes in all kinds of applications.Current distributed file systems generally store the data directly with no encryption and no authentication.These systems can integrate storage space,but it cannot provide security for personal data in multi-user environment.Our new system is based on the open source GlusterFS.We introduce a new independent module into the original system,change its communication protocol, filter all the operations and log down them.By doing so,we introduce authentication,access control,storage encryption and audition into the original distributed file system.Central security management server(CSMS) is at the core of the new architecture of distributed file system.It adopts multi-thread to serve more clients concurrently.It identifies users by authentication.It can check the permission of all the file operations by query the authentication database and can also provide file sharing function by implement file group concept.The server can prevent vicious users stealing data by sending and revoking credentials.We test the system according to the design of the central security management server.Results shows that storage system can prevent users' vicious access.Performance tests shows that the introduction of central security management server does not affect the throughput of the whole system dramatically.