KR102179497B1 - System for Data Storing and Managing based on Multi-cloud and Driving method thereof - Google Patents

Abstract

The present invention relates to a data storage and management system based on multi-cloud to prevent hacking and technology leakage by using a distributed ID and distributed storage. The system includes: a user authentication unit that authenticates whether a user has an access right to files distributed in the blockchain network using the distributed ID; and an access permission unit that allows a user who has the access right as a result of authentication in the user authentication unit to access files distributed and stored in the multi-cloud storage. Thus, the security of the existing technology deposit center and original proof service is maximized and the shortcomings are improved.

Description

Multi-cloud-based data storage and management system and its driving method {System for Data Storing and Managing based on Multi-cloud and Driving method thereof}

It relates to a multi-cloud-based data management system and its operation method, and more specifically, to a multi-cloud-based data storage and management system and its driving method that can prevent hacking and technology leakage by using distributed ID and distributed storage. About.

According to the analysis results of the'Small and Medium Business Technology Protection Status Survey' by the Ministry of SMEs and Startups, there is a survey that SMEs are vulnerable to cyber attacks, and the damages in the last three years due to hacking and technology leakage amounted to KRW 322.1 billion.

In order to solve this problem, various services such as the technology deposit center's deposit system and the patent office's original proof service are provided, but there is still a problem that these are also vulnerable to hacking and cyber attacks.

Therefore, there is a need for research on a new technology deposit service that combines the advantages of cloud and distributed ID by using multi-cloud-based distributed ID and distributed storage.

Meanwhile, Gartner's research director Sid Nag said, “The demand for integrated IaaS and PaaS products is driving the adoption of cloud infrastructure.” The growth of the IaaS market is already accelerating with the introduction of multi-cloud and hybrid cloud, as expected to require in-depth products.”

If a vulnerability is found in a specific cloud service management tool, if the vulnerability is exposed to the outside, problems may occur not only in the region but also in the service itself, and the need for multi-cloud is more emphasized.

In addition, after the introduction of blockchain technology, the development of related technologies has spurred, and the implementation of the current blockchain technology has become generalized at a high level throughout the industry. Improvement technologies using block chains are active. In accordance with these changes in the environment, the center of gravity naturally shifted to the demands of society and the market as well as whether or not the blockchain technology itself was used or what business model was created using the technology rather than the complexity.

In other words, what kind of business model will the recent blockchain technology create rather than the complexity of the technology itself as its high level has reached sufficient maturity, and how to solve the governance problem that enables participants to use the technology smoothly within the ecosystem built with the business model. It can be said that it is converging with two key objectives of whether to solve.

KR 10-1868029 B1 KR 10-2052036 B1

The present invention is derived from such a technical background, and aims to provide a multi-cloud-based data management system and its driving method capable of maximizing the security of the existing technology deposit center and original proof service and supplementing the shortcomings. do.

In addition, by using distributed storage nodes, it is possible to solve the shortcomings of the block storage space of the existing blockchain, and by creating personal information centered on the user through distributed ID,'I' can be distinguished and'my' is 'We want to provide a way to prove that it is.

In addition, it provides a way to easily recover stored fragmented files by increasing the agility to respond to abnormal situations based on multi-clouds and distributed storage through a cloud storage backup service. Its purpose is to provide a method to prevent data loss in preparation for disasters and disasters by establishing a disaster recovery system.

In addition, an object of the present invention is to notarize the multi-cloud-based continuity guarantee, automatic backup, and disaster recovery functions to be maintained.

In addition, its purpose is to provide a multi-cloud-based system and method that can prove overcoming the limitations of the data storage capacity of the blockchain.

Specifically, the present invention aims to improve security by distributing and storing file encryption keys and files through shape-preserving encryption, and controlling access to distributed storage through distributed ID to avoid dependency of specific clouds and simplify exit strategies. have.

The present invention for achieving the above object includes the following configuration.

That is, the multi-cloud-based data storage and management system according to an embodiment of the present invention uses a distributed ID to authenticate a user who has been granted access rights to files stored in a blockchain network, and the user authentication. It includes an access permission unit that allows a user who has been granted access authority as a result of authentication by the department to access files stored in the multi-cloud storage.

In one aspect, the user authentication unit authenticates whether a user is authorized to access a file distributed in a blockchain network using a distributed ID according to a file upload request, and the multi-cloud-based data storage and management system It further includes a technical document uploading unit that fragments the upload-requested file, encrypts the fragment files, and distributes the encrypted fragment files to a plurality of cloud storage.

In addition, the user authentication unit authenticates whether a user is granted access rights to files distributed in the blockchain network using a distributed ID according to a file download request, and a multi-cloud-based data storage and management system requests file download. It further includes; a technical document download unit for downloading fragment files distributed and stored in a plurality of cloud storage according to the following, decrypting the downloaded fragment files, and providing by combining the decoded fragment files.

On the other hand, in a method of driving a multi-cloud-based data storage and management system, the user authentication unit authenticates whether a user is authorized to access a file distributed in a blockchain network using a distributed ID, and the access permission unit In the step of performing the authentication, the step of allowing access to the files distributed in the multi-cloud to a user who has been granted access authority as a result of authentication.

In one aspect, in the step of performing the authentication, in response to a file upload request, authentication is performed using a distributed ID to verify whether a user is authorized to access a file distributed in the blockchain network, and multi-cloud-based data storage and The driving method of the management system includes a step of fragmenting a file according to a file upload request by a technical document upload unit, a step of encrypting each piece file by a technical document upload unit, and a technical document upload unit distributedly storing the encrypted fragment file in a plurality of cloud storages. It further includes the step of.

In addition, the step of performing the authentication performs authentication whether a user is granted access rights to files distributed in the blockchain network using a distributed ID according to a file download request, and drives a multi-cloud-based data storage and management system. The method includes: downloading a fragment file distributedly stored in a plurality of cloud storage by a technical document download unit, decoding the downloaded fragment file by a technical document download unit, and a technical document download unit combining the decrypted fragment file to grant access rights. The method further comprises providing to the user.

According to the present invention, an effect of providing a multi-cloud-based data management system and a driving method thereof capable of maximizing the security of the existing technology deposit center and original proof service and supplementing the shortcomings is derived.

In addition, by using distributed storage nodes, it is possible to solve the shortcomings of the block storage space of the existing blockchain, and by creating personal information centered on the user through distributed ID,'I' can be distinguished and'my' is 'Can provide a way to prove that it is.

In addition, it provides a way to easily recover stored fragmented files by increasing the agility to respond to abnormal situations based on multi-clouds and distributed storage through a cloud storage backup service. By building a disaster recovery system, it can provide a way to prevent data loss in case of disaster and disaster.

In addition, the present invention has the effect of notarizing the multi-cloud-based continuity guarantee, automatic backup, and disaster recovery function to be maintained.

In addition, it can provide a multi-cloud-based system and method that can prove overcoming the limitations of the data storage capacity of the blockchain.

Specifically, the present invention improves security by distributing file encryption keys and files through shape-preserving encryption, and by controlling access to distributed storage through distributed ID, the effect of avoiding dependency of specific clouds and simplifying the exit strategy is derived. Can be.

1 is a block diagram showing the configuration of a multi-cloud-based data storage and management system according to an embodiment of the present invention;
2 is a flowchart illustrating a method of driving a multi-cloud-based data storage and management system according to an embodiment of the present invention.

It should be noted that the technical terms used in the present invention are only used to describe specific embodiments, and are not intended to limit the present invention. In addition, the technical terms used in the present invention should be interpreted as generally understood by those of ordinary skill in the technical field to which the present invention belongs, unless otherwise defined in the present invention, and is excessively comprehensive. It should not be construed as a human meaning or an excessively reduced meaning.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram showing the configuration of a multi-cloud-based data storage and management system according to an embodiment of the present invention.

The multi-cloud-based data storage and management system 10 according to an embodiment of the present invention intends to implement a distributed ID service by combining blockchain technology and FIDO2 technology. The data storage and management system 10 performs a technology deposit function.

In addition, the multi-cloud-based data storage and management system according to an embodiment is preferably implemented in the cloud so that self-security in the cloud can be applied.

The multi-cloud-based data storage and management system 10 according to an embodiment may record the history of using distributed IDs to check the history of access to files distributed on the multi-cloud. Accordingly, it is possible to clearly check the access history of each user to the technical document, and increase the accuracy of the access history data by recording using a distributed ID.

File distribution storage is implemented including a file fragmentation algorithm. The multi-cloud-based data storage and management system 10 according to an embodiment may encrypt files through a symmetric key encryption algorithm.

In addition, the multi-cloud-based data storage and management system 10 according to an exemplary embodiment distributes and uploads a fragment file on a multi-cloud, that is, a plurality of different clouds.

At this time, the blockchain peer nodes and storage services are grouped into one resource group to create and distribute as a cloud image. It can be replicated on one cloud platform and used as a distributed node.

The multi-cloud-based data storage and management system 10 according to an embodiment is implemented to be usable as a distributed node on two or more cloud platforms.

The present invention proposes a multi-cloud-based distributed DID and distributed storage, so that a user can self-sovereign identity verification through a distributed ID when using a technology deposit service. In addition, when uploading a technical document, the document is divided and stored in five cloud storage nodes, for example, and if one document is stolen, the data cannot be used normally, thereby further improving the security of important files such as uploaded technical documents. have.

In addition, by using multi-cloud, it is possible to overcome the limit of storage capacity of the blockchain by securing data storage space, and through modularization, users can use the cloud service they want and disaster recovery (ex.migration) to another cloud is possible. It is expected that it will not only break away from the dependency of the company, but also simplify the exit strategy.

In addition, by building and using a blockchain-based history management module, a variety of user information is stored in the blockchain, ensuring the integrity of the access history of important files such as technical documents, and protecting the user's intellectual property rights. It is possible to provide a service with reliable reliability by accurately judging the point in time.

In addition, by building a module in the cloud, not only can the reliability of the blockchain and its own security in the cloud be applied, but also the security standards that were difficult to build in the existing on-premises are used, and enhanced physical security (monitoring, antivirus, intrusion Detection system, DDoS attack, etc.) is applied, and the preparation is excellent, so a data privacy protection system can be operated.

Specifically, as shown in FIG. 1, the multi-cloud-based data storage and management system 10 includes a user registration unit 110, a user authentication unit 120, a technical document registration unit 130, a technical document verification unit 140, and a technical document search. It includes a unit 150, an access permission unit 160, a sharing request and approval unit 170, a technical document upload unit 180, and a technical document download unit 190.

The user registration unit 110 issues a new decentralized identity (DID) to the data storage and management system 10 according to an embodiment or receives registration for a previously issued distributed ID. The user registration unit 110 is to register a decentralized identification (Decentralized Identifier, distributed ID, hereinafter "DID").

Blockchain-based Distributed ID (DID) distributes and stores personal information for each institution, and also manages the information necessary for identity verification. In the case of the existing distributed ID, it is possible to ensure safety rather than centrally managing information because it has to manipulate information by hacking several places at the same time.

The user authentication unit 120 uses a distributed ID to authenticate whether a user is granted access rights to files distributed in the blockchain network.

In one aspect, the user authentication unit 120 performs FIDO (Fast IDentity Online) authentication.

FIDO2 is a next-generation authentication standard designed to handle online security authentication without passwords in mobile, desktop and web environments. It is composed of'Web Authorization API' and'Client to Authorization Protocol (CTAP)' defined by the World Wide Web Consortium (W3C), a non-profit web standardization organization.

The technical document registration unit 130 distributes and stores the technical documents that the user wants to entrust to a peer provided for each of the plurality of clouds. In one embodiment, the technical document registration unit 130 allows the file manager to distribute the technical documents desired to be deposited into at least one piece file.

The cloud stores data on a central computer connected to the Internet, so that data can be used anytime, anywhere by simply connecting to the Internet.

The data storage and management system 10 according to an embodiment of the present invention is based on a multi-cloud environment. A multi-cloud environment is not using a single cloud service, but using multiple cloud services together, and may be a private cloud that a company or the like independently built for an internal business system.

In addition, a multi-cloud environment includes both a distributed-cloud site that distributes one cloud service and a multi-cloud site that groups a plurality of cloud services.

Multi-cloud refers to the use of multiple cloud computing services within one heterogeneous architecture in order to reduce dependence on a single vendor, improve flexibility through selection, and reduce discomfort. It differs from hybrid cloud in that it includes multiple cloud services rather than multiple deployment modes (open, closed, legacy).

In one embodiment, as can be seen in FIG. 1, the multi-cloud can group blockchain nodes and storage services into one resource. In other words, it creates and distributes cloud images by grouping blockchain peer nodes and storage services of technical documents into one resource group.

For example, it can be replicated on one cloud platform and implemented as a distributed node. Alternatively, it can be implemented as a distributed node in two or more cloud platforms such as Azure, AWS, and KT.

The technical document verification unit 140 verifies whether or not the technical document registered with the technical document registration unit 130 is the original, authenticity, and validity. Verification of the authenticity of the original document includes checking the status of permission for issuance of the technical document or whether the user who wishes to entrust the technology is a legitimate registrant of the technical document.

The technical document registration unit 130 first registers the technical document verified by the technical document verification unit 140. In addition, the technical document registration unit 130 identifies cloud and peer information in which technical documents distributed and stored in the form of pieces are stored.

The technical document registration unit 130 may improve security by distributing and storing a file encryption key and a file through shape-preserving encryption.

Format-Preserving Encryption (FPE) is an encryption technology that guarantees that the format of the plaintext and the ciphertext are the same after encryption. At this time, three methods (prefix cipher, cycle-walking cipher, generalized-Feistel cipher) proposed by Black and Rogaway by domain size/algorithm complexity are the basis of the FPE algorithm. However, it is not limited thereto.

The technical document search unit 150 searches and provides a technical document according to a search request for the technical document registered in the technical document registration unit 130 from a user. At this time, the technical document search unit 150 may further identify cloud and peer information in which the technical document is distributed and stored while the technical document registration unit 130 registers the technical document.

The access permission unit 160 allows a user who has been granted access authority as a result of authentication in the user authentication unit 120 to access a file distributed in the multi-cloud storage (Distribution Storage).

At this time, allowing access is to register a technical document through the technical document registration unit 130, search for a technical document through the technical document search unit 150, and upload a technical document through the technical document upload unit 180 In addition, it is interpreted to include allowing an overall type of access, such as downloading a technical document through the technical document download unit 190.

Additionally, the sharing request and approval unit 170 makes a request for sharing a technical document or approves a request for sharing a technical document. The sharing request and approval unit 170 is interlocked with the access permission unit 160 to determine whether a sharing request is made by a user who is allowed access. In addition, it decides whether to approve or not by judging the justification of the overall procedure and content according to the request for sharing of technical documents.

According to an additional aspect of the present invention, the technical document uploading unit 180 fragments the upload-requested file, encrypts each fragment file, and distributes the encrypted fragment file to a plurality of cloud storages.

In this case, it is preferable that the user authentication unit 120 authenticates whether a user is granted access rights to files distributed in the blockchain network using a distributed ID according to a file upload request.

In an embodiment, the technical document upload unit 180 may fragment a file through shape-preserving encryption. However, it is not limited thereto.

In addition, the technical document download unit 190 downloads fragment files distributed and stored in a plurality of cloud storage in accordance with a file download request, decrypts the downloaded fragment files, and combines and provides the decoded fragment files.

In this case, it is preferable that the user authentication unit 120 authenticates whether a user is granted access rights to files distributed in the blockchain network using a distributed ID according to a file download request.

In one embodiment, the technical document download unit 190 extracts a hash value of the technical document file, compares the extracted hash value with the hash value shared on the blockchain, and checks whether the current file is authentic or not. And if it is confirmed that the current file is authenticated as a result of the verification, the file manager downloads a plurality of distributedly stored fragment files and creates a file with a combination of the downloaded fragment files.

At this time, at least one of the plurality of nodes calculates the hash value of the current file based on the hash value generated in each of the plurality of fragment files, and compares the calculated hash value with the hash value shared on the blockchain to determine the current file. You can check the authenticity.

A plurality of distributedly stored eigenvalues may be matched with a hash value of a file.

In one embodiment, the blockchain network is implemented with Hyperledger Fabric.

Hyperledger Fabric was developed in the form of a permissioned private blockchain, and only users registered in the Membership Services Provider (MSP) member authentication management system can participate in the Hyperledger Fabric blockchain.

In one embodiment, the concept of a channel on a blockchain implemented with a network hyperledger fabric can be introduced to enhance privacy among blockchain participants. At this time, transaction information can be made public or confidential. In other words, because there is a channel, there is privacy and confidentiality.

In addition, information can be shared with each other by setting channels according to specific business purposes by a blockchain network implemented with Hyperledger Fabric. Multiple peers do different transactions for each transaction and work in distributed parallel processing.

Peer is a logical unit representing the network nodes that make up the Hyperledger Fabric Blockchain, and consists of Ledger (World state + Blockchain) and Chain Code (including business logic).

Peer types are Endorsing, an anchor peer, an ordering peer, a general Committing Peer, and a validation peer that perform the role of sending and receiving communication between nodes, verifying which nodes are alive and dead, and playing a role of throwing packets. Etc. However, it is not limited thereto.

Network component peers that make up Hyperledger can be modularized in a desired order to design a network. At this time, interchangeable consensus protocols (Solo, Kafka, PBFT, etc.) can be used.

In addition, by using a blockchain-based history management module, various information of users is stored in the blockchain to ensure the integrity of the history, and by accurately judging when it is possible to protect the intellectual property rights of users who want to deposit technology. It is expected that it will be able to provide reliable services. It decides whether to process the transaction through the logic of the chain code.

That is, the multi-cloud-based data storage and management system 10 according to an embodiment may implement a distributed ID service by combining blockchain and FIDO2 technology.

2 is a flowchart illustrating a method of driving a multi-cloud-based data storage and management system according to an embodiment of the present invention.

In the method of driving a multi-cloud-based data storage and management system, the user registration unit first issues a new decentralized identity (DID) to the data storage and management system according to an embodiment or receives registration for a previously issued distributed ID. . The user registration unit receives a decentralized identifier (Decentralized Identifier, distributed ID, hereinafter "DID").

Blockchain-based Distributed ID (DID) distributes and stores personal information for each institution, and also manages the information necessary for identity verification. In the case of the existing distributed ID, it is possible to ensure safety rather than centrally managing information because it has to manipulate information by hacking several places at the same time.

Then, the user authentication unit uses the distributed ID to authenticate whether a user is granted access rights to files distributed in the blockchain network (S200). In one aspect, the user authentication unit performs FIDO (Fast IDentity Online) authentication.

FIDO2 is a next-generation authentication standard designed to handle online security authentication without passwords in mobile, desktop and web environments. It is composed of'Web Authorization API' and'Client to Authorization Protocol (CTAP)' defined by the World Wide Web Consortium (W3C), a non-profit web standardization organization.

In the step of performing the authentication by the access permission unit, the user who is granted access authority as a result of the authentication (S210) is allowed to access the files distributed in the multi-cloud (Distribution Storage) (S220).

In a method of driving a multi-cloud-based data storage and management system according to an embodiment, a technical document registration unit distributes and stores a technical document that a user wants to deposit in a plurality of clouds in a peer provided for each of the plurality of clouds. In one embodiment, the technical document registration unit allows the file manager to distribute the technical documents desired to be deposited into at least one piece file.

The technical document registration unit can improve security by distributing and storing the file encryption key and the file through shape-preserving encryption.

Format-Preserving Encryption (FPE) is an encryption technology that guarantees that the format of the plaintext and the ciphertext are the same after encryption.

The cloud stores data on a central computer connected to the Internet, so that data can be used anytime, anywhere by simply connecting to the Internet.

A method of driving a data storage and management system according to an embodiment of the present invention is based on a multi-cloud environment. A multi-cloud environment is not using a single cloud service, but using multiple cloud services together, and may be a private cloud that a company or the like independently built for an internal business system.

In addition, a multi-cloud environment includes both a distributed-cloud site that distributes one cloud service and a multi-cloud site that groups a plurality of cloud services.

Multi-cloud refers to the use of multiple cloud computing services within one heterogeneous architecture in order to reduce dependence on a single vendor, improve flexibility through selection, and reduce discomfort. It differs from hybrid cloud in that it includes multiple cloud services rather than multiple deployment modes (open, closed, legacy).

In one embodiment, as can be seen in FIG. 1, the multi-cloud can group blockchain nodes and storage services into one resource. In other words, it creates and distributes cloud images by grouping blockchain peer nodes and storage services of technical documents into one resource group.

For example, it can be replicated on one cloud platform and implemented as a distributed node. Alternatively, it can be implemented as a distributed node in two or more cloud platforms such as Azure, AWS, and KT.

According to an aspect of the present invention, in the step of performing authentication, in response to a file upload request (S230), authentication is performed whether a user is granted access rights to a file distributed in the blockchain network using a distributed ID (S232), The technical document upload unit fragments the file according to the file upload request (S234).

Then, the technical document upload unit encrypts each fragment file (S236), and the technical document upload unit distributes and stores the encrypted fragment file in a plurality of cloud storage (S238).

At this time, the technical document upload unit may improve security by distributing and storing the file encryption key and the file through shape-preserving encryption.

Format-Preserving Encryption (FPE) is an encryption technology that guarantees that the format of the plaintext and the ciphertext are the same after encryption.

On the other hand, the step of performing authentication is to perform authentication whether a user is granted access rights to files distributed in the blockchain network using a distributed ID according to a file download request (S240), and a plurality of technical document download units The fragment file stored distributed in the cloud storage of is downloaded (S244).

Then, the technical document download unit decrypts the downloaded fragment file (S246), combines the decoded fragment files, and provides it to a user who is granted access rights (S248).

In one embodiment, the technical document download unit extracts a hash value of the technical document file, compares the extracted hash value with the hash value shared on the blockchain, and checks the authenticity of the current file. And if it is confirmed that the current file is authenticated as a result of the verification, the file manager downloads a plurality of distributedly stored fragment files and creates a file with a combination of the downloaded fragment files.

At this time, at least one of the plurality of nodes calculates the hash value of the current file based on the hash value generated in each of the plurality of fragment files, and compares the calculated hash value with the hash value shared on the blockchain to determine the current file. You can check the authenticity.

The unique values of the plurality of distributedly stored fragment files may be matched with the hash value of the file.

In one aspect, the blockchain network is implemented with Hyperledger Fabric.

Hyperledger Fabric was developed in the form of a permissioned private blockchain, and only users registered in the Membership Services Provider (MSP) member authentication management system can participate in the Hyperledger Fabric blockchain.

In one embodiment, the concept of a channel on a blockchain implemented with a network hyperledger fabric can be introduced to enhance privacy among blockchain participants. At this time, transaction information can be made public or confidential. In other words, because there is a channel, there is privacy and confidentiality.

In addition, information can be shared with each other by setting channels according to specific business purposes by a blockchain network implemented with Hyperledger Fabric. Multiple peers do different transactions for each transaction and work in distributed parallel processing.

In addition, by using a blockchain-based history management module, various information of users is stored in the blockchain to ensure the integrity of the history, and by accurately judging when it is possible to protect the intellectual property rights of users who want to deposit technology. It is expected that it will be able to provide reliable services. It decides whether to process the transaction through the logic of the chain code.

That is, a method of driving a multi-cloud-based data storage and management system according to an embodiment may implement a distributed ID service by combining a block chain and FIDO2 technology.

The above-described method may be implemented as an application or in the form of program instructions that may be executed through various computer components and recorded in a computer-readable recording medium. The computer-readable recording medium may include program instructions, data files, data structures, etc. alone or in combination.

The program instructions recorded in the computer-readable recording medium may be specially designed and constructed for the present invention, and may be known and usable to those skilled in the computer software field.

Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical recording media such as CD-ROMs and DVDs, and magnetic-optical media such as floptical disks. media), and a hardware device specially configured to store and execute program instructions such as ROM, RAM, flash memory, and the like.

Examples of the program instructions include not only machine language codes such as those produced by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware device may be configured to operate as one or more software modules to perform processing according to the present invention, and vice versa.

Although the above has been described with reference to embodiments, those skilled in the art will understand that various modifications and changes can be made to the present invention without departing from the spirit and scope of the present invention described in the following claims I will be able to.

10: data storage and management system 110: user register
120: user authentication unit 130: technical document registration unit
140: technical document verification unit 150: technical document search unit
160: access permission unit 170: sharing request and approval unit
180: technical document upload unit 190: technical document download unit

Claims (10)

A user authentication unit that authenticates whether a user is granted access rights to files distributed in the blockchain network using the distributed ID; And
Including; an access permission unit for allowing the user to access the files distributed in the multi-cloud storage (Distribution Storage) to a user who is granted access authority as a result of authentication by the user authentication unit,
The user authentication unit authenticates whether a user is granted access rights to files distributed in the blockchain network using a distributed ID according to a file upload request,
Further comprising; a technical document uploading unit for fragmenting the upload-requested file, encrypting the fragment files, and storing the encrypted fragment files distributed in a plurality of cloud storages,
The user authentication unit authenticates whether a user is granted access rights to files distributed in the blockchain network using a distributed ID according to a file download request,
Further comprising; a technical document download unit for downloading fragment files distributed and stored in a plurality of cloud storage in accordance with a file download request, decrypting the downloaded fragment files, and providing by combining the decoded fragment files; and
A technical document registration unit that distributes and stores a technical document that a user wants to entrust to a peer provided for each of a plurality of clouds in a plurality of multi-clouds; And
A technical document verification unit for verifying the authenticity and validity of the original by checking whether the technical document registered in the technical document registration unit is a technical document issuance permission status, or by checking whether a user who wants to entrust the technical document is a legitimate registrant of the technical document; It further includes,
The technical document registration unit registers and processes the technical document verified by the technical document verification unit,
A multi-cloud-based data storage and management system that records the history of distributed ID usage and checks the history of access to files stored in the multi-cloud.
The method of claim 1,
The user authentication unit multi-cloud-based data storage and management system, characterized in that performing FIDO (Fast IDentity Online) authentication.
delete delete The method of claim 1,
The blockchain network is a multi-cloud-based data storage and management system, characterized in that implemented as a hyperledger fabric (Hyperledger Fabric).
In the method of driving a multi-cloud-based data storage and management system,
Performing, by the user authentication unit, authenticating whether a user is granted access rights to files distributed in the blockchain network using the distributed ID; And
Including; and allowing an access permission unit to access a file distributed in the multi-cloud to a user who is granted access authority as a result of the authentication in the step of performing the authentication,
In the step of performing the authentication, in response to a file upload request, authentication is performed whether a user is granted access rights to files distributed in the blockchain network using a distributed ID,
Segmenting the file according to the file upload request by the technical document upload unit;
Encrypting each piece file by the technical document upload unit; And
The technical document upload unit distributing and storing the encrypted fragment file in a plurality of cloud storages; further comprising,
In the step of performing the authentication, in response to a file download request, authentication is performed whether a user is granted access rights to files distributed in the blockchain network using a distributed ID,
Downloading a piece file distributed and stored in a plurality of cloud storage by the technical document download unit;
Decoding the downloaded fragment file by a technical document download unit; And
The technical document download unit combines the decrypted fragment files and provides them to a user who is granted access rights; further comprising,
Distributing and storing the technical documents that the user wants to deposit in a peer provided for each of the plurality of clouds in a plurality of clouds; And
The technical document verification unit checks the status of the technical document issuance permission status for the technical document registered with the technical document registration unit, or verifies the authenticity and validity of the original by checking whether the user who wants to entrust the technology is a legitimate registrant of the technical document Including;
In the distributed storing step, the technical document verified in the verifying step is registered and processed,
A method of driving a multi-cloud-based data storage and management system that records the history of using distributed IDs and checks the history of access to files stored in the multi-cloud.
The method of claim 6,
The step of performing the authentication is a method of driving a multi-cloud-based data storage and management system, characterized in that FIDO (Fast IDentity Online) authentication is performed.
delete delete The method of claim 6,
The method of driving a multi-cloud-based data storage and management system, characterized in that the blockchain network is implemented with a Hyperledger Fabric.

Images