Design And Implementation Of A Secure File System Based On FastDFS

At present,information technology has become an important driving force of global economic and social development.Many new technologies such as mobile Internet,Internet of Things,cloud computing,big data are fundamentally affecting all aspects of our work and life.At the same time information application scenarios also put forward more demands for the technologies,among which the capacity and efficiency of data storage is one of the important requirements.In recent years,distributed file systems for mass file storage and concurrent access have been continuously developed and improved,which have effectively supportted the development of large-scale applications.However,the rapid development of information applications has also brought many problems and challenges,among which information security is a key challenge.In recent years,attacks against information systems are on the rise,accordingly the security of file systems has become an important issue.This paper studies and implements the secure file encryption mechanism based on Fast DFS.Firstly,this paper analyses the characteristics of the traditional secure file system,and points out the problems existing in the data availability and system performance of the existing secure file systems.Then,this paper designs a secure file system based on Fast DFS.The main research work in this paper is as follows:1.A security policy management mechanism is proposed.The security policy management module is designed based on the PKI mechanism to manage the identity of the "application system" and realize the information management of file encryption and decryption strategy.2.A transparent encryption and decryption interface for files is designed.A set of transparent encryption and decryption interfaces based on Fast DFS is designed and implemented,including file encryption for uploading,file decryption for downloading.The mechanism can be adapted to reading,writing,encrypting and decrypting for both the whole document and one part of the content of the document.As a whole,it can encrypt and decrypt files transparently without changing the access mode of the application system to the original Fast DFS.3.A key management system prototype is designed and implemented.In the overall design,it can be adapted to different key management systems.In this paper,the key management system is a prototype which can ensure the integrity of the project application scenario.The security file system based on Fast DFS,which is implemented in this paper,is a specific project proposed by our unit in many file protection scenarios.By realizing the unified interface,the workload of application research and development can be greatly reduced.The system can also be applied to other scenarios using Fast DFS storage.This has a certain practical significance for information protection based on documents.