WO2014082476A1 - 云存储方法及装置、云存储数据下载方法及装置 - Google Patents

云存储方法及装置、云存储数据下载方法及装置 Download PDF

Info

Publication number
WO2014082476A1
WO2014082476A1 PCT/CN2013/083219 CN2013083219W WO2014082476A1 WO 2014082476 A1 WO2014082476 A1 WO 2014082476A1 CN 2013083219 W CN2013083219 W CN 2013083219W WO 2014082476 A1 WO2014082476 A1 WO 2014082476A1
Authority
WO
WIPO (PCT)
Prior art keywords
data
server
cloud storage
module
divided
Prior art date
Application number
PCT/CN2013/083219
Other languages
English (en)
French (fr)
Inventor
马崴
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2014082476A1 publication Critical patent/WO2014082476A1/zh

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/06Protocols specially adapted for file transfer, e.g. file transfer protocol [FTP]
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/10File systems; File servers
    • G06F16/18File system types
    • G06F16/182Distributed file systems
    • G06F16/1824Distributed file systems implemented using Network-attached Storage [NAS] architecture
    • G06F16/1827Management specifically adapted to NAS
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441Countermeasures against malicious traffic
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/10Protocols in which an application is distributed across nodes in the network
    • H04L67/1097Protocols in which an application is distributed across nodes in the network for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Definitions

  • Cloud storage method and device Cloud storage data downloading method and device
  • the present invention relates to the field of communications technologies, and in particular, to a cloud storage method and apparatus, and a cloud storage data downloading method and apparatus. Background technique
  • Cloud Storage allows users to access their data from anywhere and conveniently save their information.
  • Cloud storage provides users with highly reliable and highly available storage systems that are becoming more widely used.
  • cloud storage also brings user privacy issues. Not only cloud storage service providers may abuse user privacy data, but users also face potential hidden dangers due to hacker attacks.
  • the main purpose of the embodiments of the present invention is to provide a secure cloud storage method and apparatus, and a cloud storage data downloading method and apparatus.
  • an embodiment of the present invention provides a cloud storage method, including: after receiving a data storage request, dividing data to be uploaded into multi-component data, and allocating different servers for the multi-component data; The multi-component data is uploaded to the corresponding server, and after the upload is successful, the mapping relationship between each component data in the data table and the server is updated.
  • the cloud storage method further includes: performing authorization authentication on the server to determine whether the server is a legitimate user; if yes, the server is The information is saved to the data sheet.
  • the cloud storage method before the uploading the multi-component data to the corresponding server, the cloud storage method further comprises: determining whether the sub-data needs to be encrypted; if yes, performing secret-to-density on the sub-data.
  • the embodiment of the present invention further provides a cloud storage device, including a data grouping module and a data uploading module, where: the data grouping module is configured to divide the data to be uploaded into multi-component data, and select multiple groups according to the virtual directory.
  • the server corresponds to the multi-component data; the data uploading module is configured to upload a plurality of sets of the sub-data to a plurality of groups of the servers and simultaneously update the data table.
  • the cloud storage device further includes: an upload initialization module configured to perform authorization authentication on the server to determine whether the server is a legitimate user; if yes, save the information of the server to a data table.
  • an upload initialization module configured to perform authorization authentication on the server to determine whether the server is a legitimate user; if yes, save the information of the server to a data table.
  • the cloud storage device further includes: an encryption module configured to determine whether the sub-data needs to be encrypted; if yes, encrypt the sub-data.
  • an encryption module configured to determine whether the sub-data needs to be encrypted; if yes, encrypt the sub-data.
  • the cloud storage device is disposed on a server or on a terminal.
  • the embodiment of the present invention further provides a cloud storage data downloading method, including: retrieving address information of a corresponding server storing a sub-data in a data table according to a download request of a user's sub-data, and downloading the sub-data from the corresponding server; For metadata.
  • the downloading request according to the user's binary data retrieves the address information of the corresponding server storing the partial data in the data table, and before downloading the partial data from the corresponding server, the cloud storage data downloading method further includes: Authorization authentication is performed to determine whether the server is a legitimate user; if so, the information of the server is saved to a data table.
  • the method for downloading the cloud storage data further includes: determining, according to the encrypted identification bit of the data stored in the data table, whether the data is Encrypted sub-data; if so, the sub-data is decrypted.
  • the embodiment of the present invention further provides a cloud storage data downloading apparatus, including a data downloading module and a data restoring module, wherein: the data downloading module is configured to retrieve the data in the data table according to the download request of the user's binary data.
  • the address information of the corresponding server is used to download the sub-data from the corresponding server; the data restoration module is configured to restore the sub-data into metadata.
  • the cloud storage data downloading device further includes: a download initialization module configured to perform authorization authentication on the server to determine whether the server is a legitimate user; if yes, save the information of the server to a data table.
  • a download initialization module configured to perform authorization authentication on the server to determine whether the server is a legitimate user; if yes, save the information of the server to a data table.
  • the cloud storage data downloading device further includes: a decrypting module configured to determine whether the divided data is encrypted partial data; if yes, decrypt the divided data.
  • a decrypting module configured to determine whether the divided data is encrypted partial data; if yes, decrypt the divided data.
  • the cloud storage method and device, the cloud storage data downloading method and device, which are proposed in the embodiments of the present invention, are respectively stored in different service providers by splitting the complete user data into several component data when uploading data. Not only can a single service provider not be able to obtain the user's private data, but even if the server is attacked, it will not cause the user information to be leaked.
  • the integration of cloud storage resources provided by multiple cloud storage service providers enables users to easily and dynamically expand storage space.
  • FIG. 1 is a schematic structural diagram of a first embodiment of a cloud storage method according to the present invention.
  • FIG. 2 is a schematic structural diagram of a second embodiment of a cloud storage method according to the present invention.
  • FIG. 3 is a schematic structural diagram of a third embodiment of a cloud storage method according to the present invention.
  • FIG. 4 is a schematic structural diagram of a first embodiment of a cloud storage device according to the present invention.
  • FIG. 5 is a schematic structural diagram of a second embodiment of a cloud storage device according to the present invention.
  • FIG. 6 is a schematic structural diagram of a third embodiment of a cloud storage device according to the present invention.
  • FIG. 7 is a schematic structural diagram of a first embodiment of a method for downloading cloud storage data according to the present invention.
  • FIG. 8 is a schematic structural diagram of a second embodiment of a method for downloading cloud storage data according to the present invention
  • 9 is a schematic structural diagram of a third embodiment of a method for downloading cloud storage data according to the present invention.
  • FIG. 10 is a schematic structural diagram of a first embodiment of a cloud storage data downloading apparatus according to the present invention
  • FIG. 11 is a schematic structural diagram of a second embodiment of a cloud storage data downloading apparatus according to the present invention. Schematic diagram of the structure. detailed description
  • FIG. 1 is a schematic structural diagram of a first embodiment of a cloud storage method according to the present invention.
  • a cloud storage method according to the first embodiment of the cloud storage method of the present invention includes:
  • Step S10 after receiving the data storage request, dividing the data to be uploaded into multi-component data, and assigning different servers to them;
  • the data that needs to be uploaded to the cloud server is first divided into multi-component data to correspond to the available sets of servers.
  • the data grouping rules are as follows: The user first sets a threshold to specify the size of each sub-data, for example, lOOkb, and then divides the data to be uploaded into a packet of a threshold size and numbers each component. Then, through the unified management of the servers of several operators used, when there are data storage requirements, multiple servers in the management can be selected, and several servers are selected to store multiple data.
  • Step S20 Upload the multi-component data to the corresponding server, and update the mapping relationship between each component data and the server in the data table after the upload is successful.
  • Update data table after upload process The mapping relationship between each component data and the server, and save the path of each sub-data saved in the virtual directory.
  • the cloud storage method proposed in the embodiment of the present invention can ensure that a single service is provided by splitting complete user data into multiple parts and storing multiple pieces of data in different service providers when uploading data.
  • the merchant cannot obtain the user's private data, and even if the server is attacked, the user information will not be leaked.
  • the integration of cloud storage resources provided by multiple cloud storage service providers enables users to easily and dynamically expand the storage space available.
  • FIG. 2 is a schematic structural diagram of a second embodiment of a cloud storage method according to the present invention.
  • the cloud storage method of the second embodiment of the cloud storage method of the present invention based on the first embodiment of the cloud storage method, before performing step S10, further includes:
  • Step S30 determining whether the server is a legitimate user; if yes, proceeding to step S31; if not, returning to step S30;
  • Step S31 saving the information of the server to the data table
  • step S31 After step S31 is performed, the process proceeds to step S10.
  • the server is authenticated to determine whether the server is a legitimate user.
  • the server information is saved and the data table is updated. If it is a legitimate user, the cloud server information is saved in the user's data table, including performance, capacity, bandwidth, cost, etc.
  • the server list is also updated.
  • the next operator server is continuously authenticated until all the servers are authenticated. If it is used for the first time, you need to enter the account and password of the existing carrier one by one to adapt.
  • the authentication of the server is performed through the initialization process, which further enhances the security of the cloud storage method.
  • FIG. 3 is a schematic structural diagram of a third embodiment of a cloud storage method according to the present invention.
  • the cloud storage method is a cloud storage method according to the third embodiment.
  • the performing step S10 and the step S20 further includes:
  • Step S40 it is determined whether the sub-data needs to be encrypted; if yes, step S41 is performed; if not, step S20 is performed;
  • Step S41 encrypting the divided data
  • step S41 After step S41 is performed, the process proceeds to step S20.
  • the encryption method can be freely designed, and an encryption chip can be embedded in the device.
  • the embodiment of the invention provides an encryption method: randomly selecting the sub-data with the number m as the key, and performing the XOR operation on the sub-data and all other sub-data, and then uploading, and the number m data is not used. operating.
  • the corresponding decryption method is: All the encrypted sub-data is XORed again with the numbered m-segment data, thereby decoding the original fraction data.
  • the robustness of the data storage is increased.
  • the operation can be implemented by an encoder.
  • the data is encrypted according to the performance of the device is determined. If the performance of the cloud storage device is sufficient to support the encryption operation, the data can be encrypted and then transmitted, so that the user information can be further protected. If you choose not to encrypt, the data will be transferred directly, which will reduce the load on the device and reduce energy consumption. Of course, in order to enhance security, it is better to select encrypted transmission if the device performance is sufficient. As to which encryption method is selected, those skilled in the art can freely expand according to various prior art techniques.
  • the cloud storage method is more flexible, and different data processing methods can be introduced at the same time, instead of being limited to the encryption operation, the data is divided.
  • the storage is safer.
  • the embodiment of the invention provides a cloud storage device.
  • Figure 4 is a cloud storage device of the present invention.
  • a schematic structural view of the first embodiment is provided.
  • the cloud storage device includes a data grouping module 10 and a data uploading module 20, where:
  • the data grouping module 10 is configured to divide the data to be uploaded into multi-component data, and select corresponding groups of corresponding servers according to the virtual directory;
  • the data uploading module 20 is configured to upload a plurality of sets of the sub-data to a plurality of groups of the servers and simultaneously update the data table.
  • the data grouping module 10 divides the data to be uploaded into multi-component data, and selects a plurality of corresponding servers according to the virtual directory to correspond thereto.
  • the data grouping rules are as follows: The user first sets a threshold to the device to specify the size of each packet, for example, 100 kb, and then the data grouping module 10 divides the data to be uploaded into a packet of a threshold size, and for each group. The data number is divided. Through unified management of the servers of several operators used, when there is data storage demand, the servers in management can be selected, and several servers are selected to store the data.
  • the data uploading module 20 uploads the processed multi-component data to the corresponding server. After the upload process, the device's data table is updated, and the path of each sub-data save is saved in the device's virtual directory.
  • the data packet module 10 and the data uploading module 20 in the cloud storage device provided in the embodiment of the present invention may be implemented by a processor of a server or a terminal, or may be implemented by a specific logic circuit; for example, in an actual application, the central processing may be performed.
  • CPU Central Processing
  • MPU Microprocessor
  • DSP Digital Signal Processor
  • FPGA Field Programmable Gate Array
  • the cloud storage device proposed in the embodiment of the present invention when uploading data, separates the complete user data into several parts and stores them in different service providers, so that a single service provider cannot obtain the user's private data. Even if the server is attacked, it will not cause user information to be leaked.
  • the integration of cloud storage resources provided by multiple cloud storage service providers enables users to easily and dynamically expand the storage space available.
  • FIG. 5 is a schematic structural diagram of a second embodiment of a cloud storage device according to the present invention.
  • a cloud storage device according to the second embodiment which is based on the first embodiment of the cloud storage device, further includes:
  • the upload initialization module 30 is configured to perform authorization authentication on the server to determine whether the server is a legitimate user; if yes, save the server information to the data table.
  • the upload initialization module 30 Before the data is uploaded to the server, the upload initialization module 30 first authenticates the server to determine whether the server is a legitimate user. When the server is determined to be a legitimate user, the server information is saved and the data table is updated. If it is a legitimate user, the cloud server information is saved in the user data table, including performance, capacity, bandwidth, cost, etc. When the server is updated, the server list is also updated. When it is determined that the server is not a legitimate user, the next operator server is continuously authenticated until all the servers are authenticated.
  • the authentication of the server is performed by the process of uploading the initialization module 30, which further enhances the security of the cloud storage device.
  • the upload initialization module 30 can be implemented by a processor of a server or a terminal, or can be implemented by a specific logic circuit. For example, in practical applications, it can be implemented by CPU, MPU, DSP, or FPGA.
  • FIG. 6 is a schematic structural diagram of a third embodiment of a cloud storage device according to the present invention.
  • the cloud storage device of the third embodiment of the present invention further includes:
  • the cryptographic module 40 is configured to determine whether the sub-data needs to be encrypted; if so, the sub-data is strongly encrypted.
  • the encryption module 40 may select the encrypted data and then transmit the partial data.
  • the encryption module 40 may be an encryption chip embedded in the cloud storage device, so that the user information can be further protection. If you choose not to encrypt, the data is transmitted directly, which can reduce the load on the device and reduce the energy consumption. Of course, in order to enhance security, it is better to choose encrypted transmission if the device performance is sufficient.
  • encryption method those skilled in the art can It is free to expand in accordance with various prior art.
  • the cloud storage device may be disposed on the server or on the terminal.
  • the terminal selects different servers for the sub-data after the grouping, and then stores the different sub-data in different servers.
  • the terminal downloads the required sub-data from different servers according to the data table, and restores the metadata.
  • the data can be grouped by the server, the original data is divided into multi-component data, and then the server selects several servers to upload multi-component data, and the packet server will Multi-component data is uploaded to multiple servers for storage.
  • FIG. 7 is a schematic structural diagram of a first embodiment of a method for downloading cloud storage data according to the present invention.
  • the cloud storage data downloading method includes:
  • Step S50 Retrieving the address information of the corresponding server storing the sub-data in the data table according to the download request of the user's divided data, and downloading the sub-data from the corresponding server;
  • the data table is retrieved, and according to the information stored in the data table, the address information of the corresponding server storing the sub-data in the data table is found and the data is downloaded from the server.
  • Step S60 Restore the sub-data into metadata.
  • the cloud storage method of the first to third embodiments of the cloud storage method of the present invention is separately stored on different servers by splitting the complete user data into several component data, wherein the server may be a single service provider.
  • the cloud storage data downloading method proposed by the first embodiment of the cloud storage data downloading method of the present invention downloads the sub-data from different servers and restores the metadata. This ensures that the user's private data cannot be obtained from a single server, so Even if a single server is attacked, it will not cause user information to be compromised.
  • FIG. 8 is a schematic structural diagram of a second embodiment of a method for downloading cloud storage data according to the present invention.
  • the second embodiment of the cloud storage data downloading method in the embodiment of the present invention is different from the first embodiment of the cloud storage data downloading method.
  • Step S70 performing authorization authentication on the server to determine whether the server is a legitimate user; if yes, executing step S71; if not, returning to step S70;
  • Step S71 saving the information of the server to a data table
  • step S71 After step S71 is performed, the process proceeds to step S50.
  • the server Before downloading data from the server, first perform authorization authentication on the server to determine whether the server is a legitimate user. When the server is determined to be a legitimate user, the server information is saved and the data table is updated. At the same time, the cloud server information is also stored in the user's data table, including performance, capacity, bandwidth, cost, etc., when the server is updated, the server list It is also updated. When it is determined that the server is not a legitimate user, the next operator server is continuously authenticated until all the servers are authenticated.
  • the changed server By authenticating the server before downloading the data, when the server's information is changed, the changed server can be identified, making the downloaded data more secure and reliable.
  • FIG. 9 is a schematic structural diagram of a third embodiment of a method for downloading cloud storage data according to the present invention.
  • the embodiment of the present invention provides a third embodiment of the method for downloading the cloud storage data.
  • the difference between the step S50 and the step S60 is as follows:
  • Step S80 Determine, according to the encrypted identification bit of the data divided by the data table, whether the data is encrypted data.
  • step S81 If yes, go to step S81; if no, go to step S60;
  • Step S81 decrypting the divided data
  • step S81 After step S81 is performed, the process proceeds to step S60.
  • the embodiment of the invention provides an encryption method when the data is uploaded: the random selection number is m.
  • the sub-data is used as the key, and the sub-data is XORed with all other sub-data, and then uploaded, and the number m data is not operated.
  • the decryption method when downloading the sub-data is: Exchanging all the encrypted sub-data with the data of the numbered m, and decoding the original sub-data.
  • the encryption method can be implemented by an encryption chip, and the decryption method can be implemented by decrypting the chip.
  • FIG. 10 is a schematic structural diagram of a first embodiment of a cloud storage data downloading apparatus according to the present invention.
  • a cloud storage data downloading device includes a data downloading module 50 and a data restoring module 60, wherein: the data downloading module 50 is configured to retrieve the corresponding data stored in the data table according to the download request of the user's binary data. The address information of the server, download the sub-data from the corresponding server;
  • the data restoration module 60 is configured to restore the divided data to metadata.
  • the data downloading module 50 retrieves the address information of the corresponding server storing the score data in the data table according to the download request of the user's binary data, downloads the divided data from the corresponding server, and then the data restoration module 60 restores the divided data to the metadata.
  • the data downloading module 50 and the data restoring module 60 in the cloud storage device provided in the embodiment of the present invention may be implemented by a processor of a server or a terminal, or may be implemented by a specific logic circuit; for example, in an actual application, the CPU may be MPU, DSP, or FPGA implementation.
  • the cloud storage device provided in the embodiment of the present invention is separately stored on different servers by splitting the complete user data into several component data, wherein the server may be a single service provider; correspondingly, the present invention
  • the cloud storage data downloading device proposed in the embodiment downloads the sub-data from different servers and restores the metadata. In this way, not only can the user's private data be obtained through a single server, but even if a single server is attacked, the user information will not be leaked.
  • FIG. 11 is a schematic structural diagram of a second embodiment of a cloud storage data downloading apparatus according to the present invention.
  • the first embodiment of the present invention is different from the first embodiment.
  • the cloud storage data downloading device further includes: a download initialization module 70 configured to perform authorization authentication on the server to determine whether the server is a legitimate user; if yes, the server is The information is saved to the data sheet.
  • the download initialization module 70 Before downloading the data, the download initialization module 70 first performs authorization authentication on the server to determine whether the server is a legitimate user. When the server is determined to be a legitimate user, the server information is saved and the data table is updated, and the cloud is also saved in the user's data table. The server's information, including performance, capacity, bandwidth, cost, etc., when the server is updated, the server list is also updated. When it is determined that the server is not a legitimate user, the next operator server is continuously authenticated until all the servers are authenticated.
  • the download initialization module 70 authenticates the server before downloading the data, so that when the information of the server storing the data is changed, the initialization module 70 can identify the changed server, thereby making the downloading of the data more secure.
  • the initialization module 70 can be implemented by a processor of a server or a terminal, or can be implemented by a specific logic circuit; for example, in an actual application, it can be implemented by a CPU, an MPU, a DSP, or an FPGA.
  • FIG. 12 is a schematic structural diagram of a third embodiment of a cloud storage data downloading apparatus according to the present invention.
  • the cloud storage data downloading device provided in this embodiment is different from the cloud storage data downloading device in the second embodiment.
  • the cloud storage data downloading device further includes:
  • the decryption module 80 is configured to determine whether the divided data is encrypted partial data; if yes, decrypt the divided data.
  • the decryption method in the decryption module 80 corresponds to the encryption method of the encryption module.
  • the encryption method is: randomly selecting the sub-data of the number m as a key, and performing the XOR operation on the sub-data and all other sub-data, The upload is performed, and the sub-data numbered m does not operate.
  • the corresponding decryption method is: All the encrypted sub-data is XORed again with the sub-data numbered m, thereby decoding the original sub-data.
  • the decryption module 80 in the embodiment of the present invention may be an encryption chip.
  • the cloud storage method and device divides the complete user data into several component data and stores them on different servers respectively; wherein the server can correspond to the service provider; correspondingly, the present
  • the cloud storage data downloading method and apparatus proposed by the embodiment of the invention downloads the sub-data from different servers and restores the metadata. In this way, not only can a single service provider not be able to obtain the user's private data, but even if the server is attacked, the user information will not be leaked.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Databases & Information Systems (AREA)
  • Data Mining & Analysis (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • Storage Device Security (AREA)
  • Information Transfer Between Computers (AREA)

Abstract

本发明公开一种云存储方法及装置、云存储数据下载方法及装置,本云存储方法包括:接收到数据存储请求后,将要上传的数据分为多组分数据,并为其分配不同的服务器;将多组分数据上传至相应的服务器,并在上传成功后更新数据表中每组分数据与服务器之间的映射关系。本云存储方法,通过将完整的用户数据拆分为若干部分,分别存储在不同的服务提供商,这样可以保证单个服务提供商无法获取用户的隐私数据,即使服务器被攻击时,也不会导致用户信息被泄露。

Description

云存储方法及装置、 云存储数据下载方法及装置 技术领域
本发明涉及通信技术领域, 尤其涉及一种云存储方法及装置、 云存储 数据下载方法及装置。 背景技术
当今的时代是知识大爆炸的时代, 传统的存储技术已经不能满足用户 的需求。 随着通讯技术和存储技术的融合, 云存储发展十分迅速。 云存储 让用户可以在任何地方访问自己的数据, 便捷的保存自己的信息。 云存储 为用户提供了高可靠和高可用的存储系统, 应用越来越广泛。 与此同时, 云存储也带来了用户隐私的问题, 不仅云存储的服务提供商可能会滥用用 户的隐私数据, 用户还要面对由于黑客攻击导致信息泄露的潜在隐患。
随着用户数据爆炸式的增长, 云存储的可扩展性也显得尤为重要。 因 此, 亟需一种既安全, 扩展性又强的云存储方法, 以便满足用户日益增长 的云存储需求。 发明内容
本发明实施例的主要目的是提供一种安全的云存储方法及装置、 云存 储数据下载方法及装置。
为了达到上述目的, 本发明实施例提出一种云存储方法, 包括: 接收 到数据存储请求后, 将要上传的数据分为多组分数据, 并为所述多组分数 据分配不同的服务器; 将所述多组分数据上传至相应的服务器, 并在上传 成功后更新数据表中每组分数据与服务器之间的映射关系。
优选地, 所述所述接收到数据存储请求后, 将要上传的数据分为多组 分数据, 并为所述多组分数据分配不同的服务器之前, 所述云存储方法还 包括: 对所述服务器进行授权认证以判断所述服务器是否为合法用户; 若 是, 则将所述服务器的信息保存到数据表。
优选地, 所述将所述多组分数据上传至相应的服务器之前, 所述云存 储方法还包括: 判断所述分数据是否需要加密; 若是, 则对所述分数据进 行力口密。
本发明实施例还提出一种云存储装置, 包括数据分组模块和数据上传 模块, 其中: 所述数据分组模块, 配置为将要上传的数据分为多组分数据, 并根据虚拟目录选择多组相应的服务器与所述多组分数据对应; 所述数据 上传模块, 配置为上传多组所述分数据至多组所述服务器同时更新数据表。
优选地, 所述云存储装置还包括: 上传初始化模块, 配置为对所述服 务器进行授权认证以判断所述服务器是否为合法用户; 若是, 则将所述服 务器的信息保存到数据表。
优选地, 所述云存储装置还包括: 加密模块, 配置为判断所述分数据 是否需要加密; 若是, 则对所述分数据进行加密。
优选地, 所述云存储装置设置在服务器上或者终端上。
本发明实施例还提出一种云存储数据下载方法, 包括: 根据用户对分 数据的下载请求检索数据表中存储分数据的相应服务器的地址信息, 从相 应服务器中下载分数据; 将分数据恢复为元数据。
优选地, 所述根据用户对分数据的下载请求检索数据表中存储分数据 的相应服务器的地址信息, 从相应服务器中下载分数据之前, 所述云存储 数据下载方法还包括: 对所述服务器进行授权认证以判断所述服务器是否 为合法用户; 若是, 则将所述服务器的信息保存到数据表。
优选地, 所述将分数据恢复为元数据之前, 所述云存储数据下载方法 还包括: 根据数据表保存的分数据的加密标识位, 判断所述分数据是否为 加密的分数据; 若是, 则对所述分数据进行解密。
本发明实施例进一步还提出一种云存储数据下载装置, 包括数据下载 模块和数据还原模块, 其中: 所述数据下载模块, 配置为根据用户对分数 据的下载请求检索数据表中存储分数据的相应服务器的地址信息, 从相应 服务器中下载分数据; 所述数据还原模块, 配置为将分数据恢复为元数据。
优选地, 所述云存储数据下载装置还包括: 下载初始化模块, 配置为 对所述服务器进行授权认证以判断所述服务器是否为合法用户; 若是, 则 将所述服务器的信息保存到数据表。
优选地, 所述云存储数据下载装置还包括: 解密模块, 配置为判断所 述分数据是否为加密的分数据; 若是, 则对所述分数据进行解密。
本发明实施例中提出的云存储方法及装置、 云存储数据下载方法及装 置, 在上传数据时, 通过将完整的用户数据拆分为若干组分数据, 分别存 储在不同的服务提供商, 这样, 不但可以保证单个服务提供商无法获取用 户的隐私数据, 而且即使服务器被攻击时, 也不会导致用户信息被泄露。 此外, 通过对多个云存储服务提供商提供的云存储资源的整合, 使用户可 用的存储空间能够得以便捷的动态扩展。 附图说明
图 1为本发明云存储方法第一实施例的结构示意图;
图 2为本发明云存储方法第二实施例的结构示意图;
图 3为本发明云存储方法第三实施例的结构示意图;
图 4为本发明云存储装置第一实施例的结构示意图;
图 5为本发明云存储装置第二实施例的结构示意图;
图 6为本发明云存储装置第三实施例的结构示意图;
图 7为本发明云存储数据下载方法第一实施例的结构示意图;
图 8为本发明云存储数据下载方法第二实施例的结构示意图; 图 9为本发明云存储数据下载方法第三实施例的结构示意图;
图 10为本发明云存储数据下载装置第一实施例的结构示意图; 图 11为本发明云存储数据下载装置第二实施例的结构示意图; 图 12为本发明云存储数据下载装置第三实施例的结构示意图。 具体实施方式
下面结合附图及具体实施例就本发明的技术方案做进一步的说明。 应 当理解, 此处所描述的具体实施例仅仅用以解释本发明的技术方案, 并不 用于限定本发明的保护范围。
本发明实施例提出一种云存储方法。 参照图 1 , 图 1为本发明云存储方 法第一实施例的结构示意图。 本发明云存储方法第一实施例提出的一种云 存储方法, 包括:
步骤 S10, 接收到数据存储请求后, 将要上传的数据分为多组分数据, 并为其分配不同的服务器;
首先将需要上传云服务器的数据分为多组分数据, 以便与可用的多组 服务器相对应。 数据分组规则如下: 用户首先设定一个阔值来规定每个分 数据的大小,例如 lOOkb,然后把需要上传的数据划分为阔值大小的数据包, 并为每组分数据编号。 再通过对所使用的若干运营商的服务器进行统一管 理, 当有数据存储需求的时候, 可以对管理中的多组服务器进行选择, 从 中挑选若干服务器进行存储多个分数据。
由于每组分数据都是不完整的, 因此每个服务器的提供商都不能获取 用户的隐私。 因此, 即使单个服务器被攻击导致数据泄露, 也不会对用户 造成损失。
步骤 S20,将多组分数据上传至相应的服务器, 并在上传成功后更新数 据表中每组分数据与服务器之间的映射关系。
将处理过的多组分数据上传至相应的服务器。 上传过程后更新数据表 中每组分数据与服务器之间的映射关系, 同时将每一份分数据保存的路径 保存在虚拟目录下。
本发明实施例中提出的云存储方法, 在上传数据时, 通过将完整的用 户数据拆分为多个部分, 并将多个分数据分别存储在不同的服务提供商, 这样可以保证单个服务提供商无法获取用户的隐私数据, 即使服务器被攻 击时, 也不会导致用户信息被泄露。 此外, 通过对多个云存储服务提供商 提供的云存储资源的整合, 使用户可用的存储空间能够得以便捷的动态扩 展。
参照图 2 , 图 2为本发明云存储方法第二实施例的结构示意图。 本发明 云存储方法第二实施例提出的一种云存储方法, 在云存储方法第一实施例 的基础上, 在执行步骤 S10之前还包括:
步骤 S30 , 判断服务器是否为合法用户; 若是, 则执行步骤 S31 ; 若否, 则回到步骤 S30;
步骤 S31 , 将服务器的信息保存到数据表;
执行步骤 S31后, 进入步骤 S10。
整个过程实际就是为一个初始化的过程。 首先对服务器进行授权认证, 判断服务器是否为合法用户, 当判断服务器为合法用户时, 保存服务器的 信息并更新数据表。 如果是合法用户, 就在用户的数据表中保存云服务器 的信息, 包括性能、 容量、 带宽、 费用等信息, 当服务器更新时, 服务器 列表也随之更新。 当判断服务器不为合法用户时, 则继续对下一个运营商 服务器进行授权认证, 直到将所有的服务器都认证完毕。 如果是第一次使 用, 还需要逐个输入已有运营商的账号和密码进行适配。
通过初始化过程对服务器进行授权认证, 进一步增强了该云存储方法 的安全性。
参照图 3 , 图 3为本发明云存储方法第三实施例的结构示意图。 本发明 云存储方法第三实施例提出的一种云存储方法, 在云存储方法第二实施例 的基础上, 在执行步骤 S10和步骤 S20之间还包括:
步骤 S40 , 判断分数据是否需要加密; 若是, 则执行步骤 S41 ; 若否, 则执行步骤 S20;
步骤 S41 , 对分数据进行加密;
执行步骤 S41后, 进入步骤 S20。
在数据表中对上传加密的分数据增加标识。 加密方法可以自由设计, 可以在装置内嵌一个加密芯片。 本发明实施例提出一种加密方法: 随机选 取编号为 m的分数据作为密钥, 将此分数据与其他所有分数据与之进行异 或操作后, 再进行上传, 而编号 m分数据不做操作。 相应的解密方法为: 所有加密过的分数据与编号为 m分数据再次异或操作, 从而解码出原分数 据。
此外, 对于分数据的处理方面, 不单单仅限于加密操作, 还可以对分 数据引入编码操作, 比如通过对各个分数据加入冗余信息和校验信息, 来 增加数据存储的健壮性, 该编码操作具体的可以通过编码器来实现。
根据装置的性能确定分数据是否加密。 如果云存储装置的性能足够支 持加密的操作, 可以选择分数据进行加密后再传输分数据, 这样对用户信 息能够进行进一步保护。 如果选择不加密, 则直接传输分数据, 这样可以 减小装置的负载, 降低能耗。 当然, 为了增强安全性, 在装置性能足够支 持的情况下, 最好选择加密后传输。 至于选择何种加密方法, 本领域的技 术人员可以根据各种现有技术自由地进行扩展。
通过根据不同装置的性能来对上传到服务器中的分数据自由地选择是 否进行加密, 使云存储方法更加灵活, 同时可以引入不同的分数据处理方 法, 而不单单仅限于加密操作, 使分数据的储存更加安全。
本发明实施例提出一种云存储装置。 参照图 4 , 图 4为本发明云存储装 置第一实施例的结构示意图。 本发明实施例中, 云存储装置包括数据分组 模块 10和数据上传模块 20, 其中:
数据分组模块 10, 配置为将要上传的数据分为多组分数据, 并根据虚 拟目录选择多组相应的服务器与之对应;
数据上传模块 20, 配置为上传多组所述分数据至多组所述服务器同时 更新数据表。
数据分组模块 10将要上传的数据分为多组分数据, 并根据虚拟目录选 择多组相应的服务器与之对应。 数据分组规则如下: 用户首先会给装置设 定一个阔值来规定每个数据包的大小, 例如 lOOkb, 然后数据分组模块 10 把需要上传的数据划分为阔值大小的数据包, 并为每组分数据编号。 通过 对所使用的若干运营商的服务器进行统一管理, 当有数据存储需求的时候, 可以对管理中的服务器进行选择, 从中挑选若干服务器进行存储分数据。
数据上传模块 20将处理过的多组分数据上传至相应的服务器。 上传过 程后更新装置的数据表, 同时将每一份分数据保存的路径保存在装置的虚 拟目录下。
本发明实施例中提出的云存储装置中的数据分组模块 10和数据上传模 块 20可以通过服务器或者终端的处理器实现, 也可通过具体的逻辑电路实 现; 比如, 在实际应用中, 可由中央处理器 (CPU )、 微处理器 (MPU )、 数字信号处理器 (DSP )、 或现场可编程门阵列 (FPGA ) 实现。
本发明实施例中提出的云存储装置, 在上传数据时, 通过将完整的用 户数据拆分为若干部分, 分别存储在不同的服务提供商, 这样可以保证单 个服务提供商无法获取用户的隐私数据, 即使服务器被攻击时, 也不会导 致用户信息被泄露。 此外, 通过对多个云存储服务提供商提供的云存储资 源的整合, 使用户可用的存储空间能够得以便捷的动态扩展。
参照图 5 , 图 5为本发明云存储装置第二实施例的结构示意图。 本发明 第二实施例提出的一种云存储装置, 在云存储装置第一实施例的基础上, 还包括:
上传初始化模块 30, 配置为对服务器进行授权认证以判断服务器是否 为合法用户; 若是, 则将服务器的信息保存到数据表。
在分数据上传到服务器之前, 上传初始化模块 30首先对服务器进行授 权认证, 判断服务器是否为合法用户, 当判断服务器为合法用户时, 保存 服务器的信息并更新数据表。 如果是合法用户, 就在用户数据表中保存云 服务器的信息, 包括性能、 容量、 带宽、 费用等信息, 当服务器更新时, 服务器列表也随之更新。 当判断该服务器不为合法用户时, 则继续对下一 个运营商服务器进行授权认证, 直到将所有的服务器都认证完毕。
通过上传初始化模块 30过程对服务器进行授权认证, 进一步增强了该 云存储装置的安全性; 本发明实施例中上传初始化模块 30可以通过服务器 或者终端的处理器实现, 也可通过具体的逻辑电路实现; 比如, 在实际应 用中, 可由 CPU、 MPU、 DSP, 或 FPGA实现。
参照图 6, 图 6为本发明云存储装置第三实施例的结构示意图。 本发明 第三实施例提出的一种云存储装置, 在云存储装置第二实施例的基础上, 还包括:
加密模块 40, 配置为判断分数据是否需要加密; 若是, 则对分数据进 行力口密。
根据装置的性能确定分数据是否加密。 如果云存储装置的性能足够支 持加密的操作, 加密模块 40可以选择对分数据进行加密后再传输分数据, 该加密模块 40可以为云存储装置内嵌的加密芯片, 这样对用户信息能够进 行进一步保护。 如果选择不加密, 则直接传输分数据, 这样可以减小装置 的负载, 降低能耗。 当然, 为了增强安全性, 在装置性能足够支持的情况 下, 最好选择加密后传输。 至于选择何种加密方法, 本领域的技术人员可 以根据各种现有技术自由地进行扩展。
在本发明实施例中, 云存储装置可以设置在服务器上或者终端上。 当 云存储装置设置在终端上时, 终端为分组之后的分数据选择不同的服务器, 然后将不同的分数据存储在不同的服务器中。 下载时, 终端再根据数据表, 从不同的服务器中下载所需要的分数据, 并恢复为元数据。
当云存储装置设置在服务器上时, 可以通过该服务器对数据进行分组, 将原始数据分为多组分数据, 然后, 该服务器再来挑选几个服务器中来上 传多组分数据, 该分组服务器将多组分数据分别上传到多个服务器中存储 起来。
本发明实施例还提出一种云存储数据下载方法。 参照图 7 , 图 7为本发 明云存储数据下载方法第一实施例的结构示意图。 本发明云存储数据下载 方法第一实施例中, 云存储数据下载方法包括:
步骤 S50 ,根据用户对分数据的下载请求检索数据表中存储分数据的相 应服务器的地址信息, 从相应服务器中下载分数据;
首先根据用户确认需要哪些分数据后, 检索数据表, 根据数据表保存 的信息, 找到数据表中存储分数据的相应服务器的地址信息并从服务器下 载分数据。
步骤 S60 , 将分数据恢复为元数据。
下载完所有分数据后, 将其恢复为完整的元数据, 然后, 数据下载过 程结束。
本发明云存储方法第一至三实施例提出的云存储方法, 通过将完整的 用户数据拆分为若干组分数据, 分别存储在不同的服务器上, 其中, 所述 服务器可以为单个服务提供商; 对应地, 本发明云存储数据下载方法第一 实施例提出的云存储数据下载方法, 从不同的服务器中下载分数据并恢复 为元数据。 这样可以保证无法通过单个服务器获取用户的隐私数据, 因此, 即使单个服务器被攻击时, 也不会导致用户信息被泄露。
参照图 8 ,图 8为本发明云存储数据下载方法第二实施例的结构示意图。 本发明实施例提出的云存储数据下载方法第二实施例, 与云存储数据下载 方法第一实施例不同的是, 在步骤 S50之前还包括:
步骤 S70 , 对服务器进行授权认证以判断服务器是否为合法用户; 若是, 执行步骤 S71 ; 若否, 则回到步骤 S70;
步骤 S71 , 将所述服务器的信息保存到数据表;
执行步骤 S71后, 进入步骤 S50。
从服务器中下载数据前, 先对服务器进行授权认证, 判断服务器是否 为合法用户。 当判断服务器为合法用户时, 保存服务器的信息并更新数据 表, 同时, 也在用户的数据表中保存云服务器的信息, 包括性能、 容量、 带宽、 费用等信息, 当服务器更新时, 服务器列表也随之更新。 当判断服 务器不为合法用户时, 则继续对下一个运营商服务器进行授权认证, 直到 将所有的服务器都认证完毕。
通过在下载分数据前对服务器进行授权认证, 当服务器的信息被更改 时, 可以将被更改的服务器识别出来, 从而使下载的数据更加安全、 可靠。
参照图 9 ,图 9为本发明云存储数据下载方法第三实施例的结构示意图。 本发明实施例提出云存储数据下载方法第三实施例, 与云存储数据下载方 法第二实施例不同的是, 在步骤 S50和步骤 S60之间还包括:
步骤 S80 ,根据数据表保存的分数据的加密标识位, 判断分数据是否为 加密的分数据;
若是, 则执行步骤 S81 ; 若否, 则执行步骤 S60;
步骤 S81 , 对分数据进行解密;
执行步骤 S81后, 进入步骤 S60。
本发明实施例提出一种分数据上传时的加密方法: 随机选取编号为 m 的分数据作为密钥, 将此分数据与其他所有分数据与之进行异或操作后, 再进行上传, 而编号 m分数据不做操作。 相应地, 下载分数据时的解密方 法为: 将所有加密过的分数据与编号为 m分数据再次异或操作, 从而解码 出原分数据。 这里, 加密方法可以通过加密芯片来实现, 而解密方法可以 通过解密芯片来实现。
本发明实施例进一步提出一种云存储数据下载装置。 参照图 10, 图 10 为本发明云存储数据下载装置第一实施例的结构示意图。 本发明实施例中, 一种云存储数据下载装置包括数据下载模块 50和数据还原模块 60, 其中: 数据下载模块 50, 配置为根据用户对分数据的下载请求检索数据表中 存储分数据的相应服务器的地址信息, 从相应服务器中下载分数据;
数据还原模块 60, 配置为将分数据恢复为元数据。
数据下载模块 50根据用户对分数据的下载请求检索数据表中存储分数 据的相应服务器的地址信息, 从相应服务器中下载分数据, 然后数据还原 模块 60将分数据恢复为元数据。
本发明实施例中提出的云存储装置中的数据下载模块 50和数据还原模 块 60可以通过服务器或者终端的处理器实现, 也可通过具体的逻辑电路实 现; 比如, 在实际应用中, 可由 CPU、 MPU、 DSP, 或 FPGA实现。
本发明实施例中提出的云存储装置, 通过将完整的用户数据拆分为若 干组分数据, 分别存储在不同的服务器上, 其中, 所述服务器可以为单个 服务提供商; 对应地, 本发明实施例提出的云存储数据下载装置, 从不同 的服务器中下载所述分数据并恢复为元数据。 这样, 不但可以保证无法通 过单个服务器获取用户的隐私数据, 而且即使单个服务器被攻击时, 也不 会导致用户信息被泄露。
参照图 11 , 图 11为本发明云存储数据下载装置第二实施例的结构示意 图。 本实施例中提出的云存储数据下载装置第二实施例, 与云存储数据下 载装置第一实施例不同的是, 本云存储数据下载装置还包括: 下载初始化模块 70, 配置为对所述服务器进行授权认证以判断所述服 务器是否为合法用户; 若是, 则将所述服务器的信息保存到数据表。
下载数据前, 下载初始化模块 70先对服务器进行授权认证, 判断服务 器是否为合法用户, 当判断服务器为合法用户时, 保存服务器的信息并更 新数据表, 同时, 也在用户的数据表中保存云服务器的信息, 包括性能、 容量、 带宽、 费用等信息, 当服务器更新时, 服务器列表也随之更新。 当 判断服务器不为合法用户时, 则继续对下一个运营商服务器进行授权认证, 直到将所有的服务器都认证完毕。
通过下载初始化模块 70对下载分数据前对服务器进行授权认证, 使得 当存储了分数据的服务器的信息被更改时, 初始化模块 70可以将被更改的 服务器识别出来, 从而使下载数据时更加安全、 可靠; 本发明实施例中初 始化模块 70可以通过服务器或者终端的处理器实现, 也可通过具体的逻辑 电路实现; 比如, 在实际应用中, 可由 CPU、 MPU、 DSP, 或 FPGA实现。
参照图 12,图 12为本发明云存储数据下载装置第三实施例的结构示意 图。 本实施例中提出的云存储数据下载装置, 与云存储数据下载装置第二 实施例不同的是, 本云存储数据下载装置还包括:
解密模块 80, 配置为判断所述分数据是否为加密的分数据; 若是, 则 对所述分数据进行解密。
具体地, 解密模块 80中的解密方法与加密模块的加密方法对应, 当加 密方法为: 随机选取编号为 m的分数据作为密钥, 将此分数据与其他所有 分数据进行异或操作后, 才进行上传, 而编号为 m的分数据不做操作。 此 时, 相应的解密方法为: 所有加密过的分数据与编号为 m的分数据再次异 或操作, 从而解码出原分数据。 另外, 本发明实施例中的该解密模块 80可 以为加密芯片。 以上所述仅为本发明的优选实施例, 并非因此限制本发明的专利范围, 凡是利用本发明说明书及附图内容所作的等效结构变换, 或直接或间接运 用在其他相关的技术领域, 均同理包括在本发明的专利保护范围内。 工业实用性
本发明实施例提出的云存储方法及装置, 将完整的用户数据拆分为若 干组分数据, 分别存储在不同的服务器上; 其中, 所述服务器可以与服务 提供商所对应; 对应地, 本发明实施例提出的云存储数据下载方法及装置, 从不同的服务器中下载所述分数据并恢复为元数据。 这样, 不但可以保证 单个服务提供商无法获取用户的隐私数据, 而且即使服务器被攻击时, 也 不会导致用户信息被泄露。

Claims

权利要求书
1、 一种云存储方法, 包括:
接收到数据存储请求后, 将要上传的数据分为多组分数据, 并为所述 多组分数据分配不同的服务器;
将所述多组分数据上传至相应的服务器, 并在上传成功后更新数据表 中每组分数据与服务器之间的映射关系。
2、 如权利要求 1所述的方法, 其中, 所述接收到数据存储请求后, 将 要上传的数据分为多组分数据, 并为所述多组分数据分配不同的服务器之 前, 所述云存储方法还包括:
对所述服务器进行授权认证以判断所述服务器是否为合法用户; 若是, 则将所述服务器的信息保存到数据表。
3、 如权利要求 2所述的方法, 其中, 所述将所述多组分数据上传至相 应的服务器之前, 所述云存储方法还包括:
判断所述分数据是否需要加密;
若是, 则对所述分数据进行加密。
4、 一种云存储装置, 包括数据分组模块和数据上传模块, 其中: 所述数据分组模块, 配置为将要上传的数据分为多组分数据, 并根据 虚拟目录选择多组相应的服务器与所述多组分数据对应;
所述数据上传模块, 配置为上传多组所述分数据至多组所述服务器同 时更新数据表。
5、 如权利要求 4所述的装置, 其中, 所述云存储装置还包括: 上传初始化模块, 配置为对所述服务器进行授权认证以判断所述服务 器是否为合法用户; 若是, 则将所述服务器的信息保存到数据表。
6、 如权利要求 5所述的装置, 其中, 所述云存储装置还包括: 加密模块, 配置为判断所述分数据是否需要加密; 若是, 则对所述分 数据进行加密。
7、 如权利要求 4至 6任一项所述的装置, 其中, 所述云存储装置设置 在服务器上或者终端上。
8、 一种云存储数据下载方法, 包括:
根据用户对分数据的下载请求检索数据表中存储分数据的相应服务器 的地址信息, 从相应服务器中下载分数据;
将分数据恢复为元数据。
9、 如权利要求 8所述的方法, 其中, 所述根据用户对分数据的下载请 求检索数据表中存储分数据的相应服务器的地址信息, 从相应服务器中下 载分数据之前, 所述云存储数据下载方法还包括:
对所述服务器进行授权认证以判断所述服务器是否为合法用户; 若是, 则将所述服务器的信息保存到数据表。
10、 如权利要求 9所述的方法, 其中, 所述将分数据恢复为元数据之 前, 所述云存储数据下载方法还包括:
根据数据表保存的分数据的加密标识位, 判断所述分数据是否为加密 的分数据;
若是, 则对所述分数据进行解密。
11、 一种云存储数据下载装置, 包括数据下载模块和数据还原模块, 其中:
所述数据下载模块, 配置为根据用户对分数据的下载请求检索数据表 中存储分数据的相应服务器的地址信息, 从相应服务器中下载分数据; 所述数据还原模块, 配置为将分数据恢复为元数据。
12、 如权利要求 11所述的装置, 其中, 所述云存储数据下载装置还包 括:
下载初始化模块, 配置为对所述服务器进行授权认证以判断所述服务 器是否为合法用户; 若是, 则将所述服务器的信息保存到数据表。
13、 如权利要求 11或 12所述的装置, 其中, 所述云存储数据下载装 置还包括:
解密模块, 配置为判断所述分数据是否为加密的分数据; 若是, 则 对所述分数据进行解密。
PCT/CN2013/083219 2012-11-29 2013-09-10 云存储方法及装置、云存储数据下载方法及装置 WO2014082476A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201210499475.0 2012-11-29
CN201210499475.0A CN103856499A (zh) 2012-11-29 2012-11-29 云存储方法及装置、云存储数据下载方法及装置

Publications (1)

Publication Number Publication Date
WO2014082476A1 true WO2014082476A1 (zh) 2014-06-05

Family

ID=50827149

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2013/083219 WO2014082476A1 (zh) 2012-11-29 2013-09-10 云存储方法及装置、云存储数据下载方法及装置

Country Status (2)

Country Link
CN (1) CN103856499A (zh)
WO (1) WO2014082476A1 (zh)

Families Citing this family (27)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104571956A (zh) * 2014-12-29 2015-04-29 成都致云科技有限公司 一种数据写入方法及拆分装置
CN104580259B (zh) * 2015-02-04 2017-10-13 北京奇虎科技有限公司 一种身份认证装置及方法
CN104991839A (zh) * 2015-07-15 2015-10-21 柳州一健科技有限公司 具有筛选功能的数据备份系统
CN104991840A (zh) * 2015-07-15 2015-10-21 柳州六品科技有限公司 具有隐私保护功能的基于网络的数据恢复系统
CN105072157A (zh) * 2015-07-15 2015-11-18 柳州首光科技有限公司 具有隐私保护功能的基于网络的数据存储系统
CN104991837A (zh) * 2015-07-15 2015-10-21 柳州六品科技有限公司 基于网络备份的数据恢复系统
CN105138418A (zh) * 2015-07-15 2015-12-09 柳州一健科技有限公司 数据备份系统
CN104991842A (zh) * 2015-07-15 2015-10-21 柳州六品科技有限公司 数据恢复系统
CN104991838A (zh) * 2015-07-15 2015-10-21 柳州一健科技有限公司 基于网络的具有筛选功能的数据备份系统
CN104991841A (zh) * 2015-07-15 2015-10-21 柳州六品科技有限公司 具有隐私保护功能的数据恢复系统
CN105045683A (zh) * 2015-07-16 2015-11-11 柳州六品科技有限公司 具有隐私保护功能的信息恢复方法
CN105005516A (zh) * 2015-07-16 2015-10-28 柳州六品科技有限公司 采用虹膜加密的基于网络的信息恢复方法
CN105068883A (zh) * 2015-07-16 2015-11-18 柳州六品科技有限公司 信息恢复方法
CN105068884A (zh) * 2015-07-16 2015-11-18 柳州六品科技有限公司 基于网络备份的信息恢复方法
CN105245569A (zh) * 2015-08-31 2016-01-13 上海七牛信息技术有限公司 断点上传方法及系统
CN105187546B (zh) * 2015-09-25 2018-09-18 南京伍安信息科技有限公司 一种网络化分离存储系统及其分离存储文件的方法
CN106293540A (zh) * 2016-08-19 2017-01-04 成都全码特时代科技有限公司 一种云数据存储方法
CN106339180A (zh) * 2016-08-19 2017-01-18 成都全码特时代科技有限公司 一种云存储装置
CN106970854A (zh) * 2017-03-30 2017-07-21 无锡华云数据技术服务有限公司 一种对象存储系统中的逻辑处理服务器
CN107395652A (zh) * 2017-09-08 2017-11-24 郑州云海信息技术有限公司 一种存储数据完整性检查方法、装置及系统
CN108875384A (zh) * 2018-06-06 2018-11-23 国云科技股份有限公司 一种企业风险数据安全融合系统及其实现方法
CN109033367A (zh) * 2018-07-26 2018-12-18 电子科技大学 一种面向二维表文件的属性竖切多云存储方法
CN109445710A (zh) * 2018-11-05 2019-03-08 常熟理工学院 基于云服务器存储的云端数据存储陈列方法及系统
CN109583221A (zh) * 2018-12-07 2019-04-05 中国科学院深圳先进技术研究院 基于多云服务器架构的网盘系统
CN110290171A (zh) * 2019-05-15 2019-09-27 陈菡 一种数据管理方法及装置、电子设备
CN110381061A (zh) * 2019-07-19 2019-10-25 广东省新一代通信与网络创新研究院 文件的多云存储方法、下载方法、装置及存储介质
CN112511996A (zh) * 2020-11-08 2021-03-16 浙江中建网络科技股份有限公司 一种用于水泥价格数据传输的5g数据传输方法

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1897549A (zh) * 2005-07-15 2007-01-17 环达电脑(上海)有限公司 动态网络连接分配系统及方法
CN101227460A (zh) * 2007-01-19 2008-07-23 秦晨 分布式文件上传、下载方法及其装置和系统

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8654971B2 (en) * 2009-05-19 2014-02-18 Security First Corp. Systems and methods for securing data in the cloud
US8538926B2 (en) * 2011-03-08 2013-09-17 Rackspace Us, Inc. Massively scalable object storage system for storing object replicas

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1897549A (zh) * 2005-07-15 2007-01-17 环达电脑(上海)有限公司 动态网络连接分配系统及方法
CN101227460A (zh) * 2007-01-19 2008-07-23 秦晨 分布式文件上传、下载方法及其装置和系统

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
JIN, HAI ET AL.: "The design of file transfer system with high speed and its implementation in GDSS", JOURNAL OF HUAZHONG UNIVERSITY OF SCIENCE AND TECHNOLOGY, vol. 33, no. 1, January 2005 (2005-01-01), pages 4 - 9 *

Also Published As

Publication number Publication date
CN103856499A (zh) 2014-06-11

Similar Documents

Publication Publication Date Title
WO2014082476A1 (zh) 云存储方法及装置、云存储数据下载方法及装置
CA2998994C (en) Computer-implemented cryptographic method for improving a computer network, and terminal, system and computer-readable medium for the same
WO2020237868A1 (zh) 数据传输方法、电子设备、服务器及存储介质
CN105760764B (zh) 一种嵌入式存储设备文件的加解密方法、装置及终端
JP6221014B1 (ja) 安全な共有鍵共有システム及び方法
US10037330B1 (en) Security via dynamic data movement in a cloud-based environment
US10291596B2 (en) Installation of a terminal in a secure system
CN107404472B (zh) 用于加密密钥的迁移的方法和设备
EP3205048B1 (en) Generating a symmetric encryption key
CN107018155B (zh) 一种外网终端安全访问内网特定数据的方法和系统
CN113037484B (zh) 数据传输方法、装置、终端、服务器及存储介质
CN110661748B (zh) 一种日志的加密方法、解密方法及装置
US8953786B2 (en) User input based data encryption
US20190044922A1 (en) Symmetric key identity systems and methods
CN107454590A (zh) 一种数据加密方法、解密方法及无线路由器
EP3205049A1 (en) Method and system for establishing a secure communication channel
US20150082027A1 (en) Drm method and drm system for supporting offline sharing of digital contents
CN113556230A (zh) 数据安全传输方法、证书相关方法、服务端、系统及介质
CN112115461A (zh) 设备认证方法、装置、计算机设备和存储介质
CN116633582A (zh) 安全通信方法、装置、电子设备及存储介质
CN114745114B (zh) 基于口令派生的密钥协商方法、装置、设备及介质
CN116166749A (zh) 数据共享方法、装置、电子设备及存储介质
CN109450857A (zh) 加密数据配置方法、装置、服务器、加密设备及存储介质
WO2018054144A1 (zh) 对称密钥动态生成方法、装置、设备及系统
JP6471136B2 (ja) セキュリティキーの使用によるデータ暗号化システム

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 13859264

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 13859264

Country of ref document: EP

Kind code of ref document: A1