Design And Implementation Of Confidential Disk System Based On OpenStack Swift

With the rapid development of information technology and the exponential growth of data volume,data storage faces enormous challenges,which profoundly affects every enterprise and individual with storage requirements and data service needs.While cloud storage provides important support for upper-layer services,it can effectively store and manage massive amounts of data,enabling various types of cloud storage platforms to emerge.However,these storages usually provide storage services in the form of RESTful APIs.The use of common users is cumbersome.The security of data storage provided by cloud storage service providers is debatable.There are hidden dangers of actively or maliciously leaking user data.This paper proposes a system based on OpenStack Swift.The solution provides users with a massive and secure data storage service that is safe and easy to use.Swift is a multi-tenant,highly scalable and highly available object storage system that offers greater flexibility,less lock-in,better control and lower cost than other open source cloud storage projects.Store unstructured data.On this basis,this paper builds a cloud storage environment and redevelops the Swift disk system.The client invokes the Swift service through the package API to provide interactive operations to the user in the form of Web.This paper draws on the realization principle of Google Drive folder,designs virtual directory to manage resource objects,conforms to user's operating habits,and designs hierarchical key to protect user's data security and solve Swift's shortcomings in storing GB-level large files.Management and large file storage strategy,the user data is stored in the cloud and then encrypted and stored in the cloud.When downloading,the segment is decrypted and the whole file is merged.The availability of the system is proved by experiments,which breaks the limitation of file size of Swift and can effectively Protect user data security.At the same time,this thesis develops a software reverse tracking tool to complete the process data collection and analysis of login authentication and authorization,and analyze and summarize the login authentication by tracking the key programs and key functions in the authentication,login,session and storage operations of the server.Detailed process.In Swift,if a user can access an object,it will get the complete content of the object.This article designed the object content level access control,so that Swift can specify the user to access a specific part of the object.Experiments show that the cloud storage system provides Secure access control mechanism.Finally,for the loss or damage of the file that may exist in the compact disk system,the data fault-tolerant technology of copy and erasure code is used for repair.Swift uses multiple copies of backup data by default.We write python repair scripts and use Swift's inherent consistency repair mechanism to implement file repair of quarantine objects and verify them through experiments.The erasure code strategy is added,the erasure code dependent library Jerasure is modified,the defect correction file is repaired by the RS erasure code,and then the data redundancy test of different fault tolerance levels is analyzed,and the storage cost is saved compared with the copy technology.