WO2020042130A1 - 基于双云端的数据安全存储方法、装置、设备及存储介质 - Google Patents

基于双云端的数据安全存储方法、装置、设备及存储介质 Download PDF

Info

Publication number
WO2020042130A1
WO2020042130A1 PCT/CN2018/103398 CN2018103398W WO2020042130A1 WO 2020042130 A1 WO2020042130 A1 WO 2020042130A1 CN 2018103398 W CN2018103398 W CN 2018103398W WO 2020042130 A1 WO2020042130 A1 WO 2020042130A1
Authority
WO
WIPO (PCT)
Prior art keywords
cloud
directory
file
data
files
Prior art date
Application number
PCT/CN2018/103398
Other languages
English (en)
French (fr)
Inventor
陈飞
Original Assignee
深圳大学
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 深圳大学 filed Critical 深圳大学
Priority to PCT/CN2018/103398 priority Critical patent/WO2020042130A1/zh
Priority to CN201880001461.7A priority patent/CN109362236A/zh
Publication of WO2020042130A1 publication Critical patent/WO2020042130A1/zh

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database

Definitions

  • the invention belongs to the technical field of cloud storage, and particularly relates to a method, a device, a device, and a storage medium for securely storing data based on dual clouds.
  • Cloud storage has been widely used in the fields of individuals, enterprises, and governments. Cloud storage not only provides the public with almost unlimited storage capacity that meets the storage requirements of different resources, but also provides a convenient and fast access channel for the sharing of a large number of resources. Cloud storage has become more and more important in the information society. However, while users actively support the convenience provided by cloud storage, they are also increasingly concerned about the security of data outsourced from cloud storage.
  • cloud storage services on the market are services provided by cloud storage service providers based on a single cloud architecture (also known as data single-point storage service). Since data in a single cloud architecture is single-point storage, there are potential hardware failures, internal and external Threats such as uncertain factors, resulting in cloud data being tampered with, deleted, and data lost.
  • cloud architecture also known as data single-point storage service
  • the object of the present invention is to provide a method, device, device and storage medium for data security storage based on dual clouds, which aims to solve the problem that the security of data stored in the cloud is low due to the inability to provide an effective method for data cloud storage in the prior art.
  • the problem is to provide a method, device, device and storage medium for data security storage based on dual clouds, which aims to solve the problem that the security of data stored in the cloud is low due to the inability to provide an effective method for data cloud storage in the prior art. The problem.
  • the present invention provides a method for securely storing data based on dual clouds.
  • the method includes the following steps:
  • the application gateway When receiving the data storage request sent by the administrator, the application gateway uploads the files in the file directory corresponding to the data storage request to the first cloud and the second cloud, performs a summary calculation on each uploaded file, and stores A calculated file reference summary value corresponding to each file;
  • the application gateway monitors a preset security inspection cycle, and when monitoring reaches the security inspection cycle, sends a data security inspection request to the first cloud and the second cloud, respectively, and the data security inspection request Including the file benchmark summary value;
  • the files in the first cloud directory and the second cloud directory corresponding to the file directory are respectively processed according to the file reference summary value.
  • the application gateway When the data integrity check is completed, the application gateway performs data synchronization on the files stored in the first cloud directory and the second cloud directory.
  • the step of performing data integrity check on the files in the first cloud directory and the second cloud directory corresponding to the file directory includes:
  • the first cloud and the second cloud verify data of each file in the first cloud directory and the second cloud directory by comparing the digest value with a corresponding reference abstract value of the file. Completeness.
  • the step of the application gateway performing data synchronization on the files stored in the first cloud directory and the second cloud directory includes:
  • the application gateway traverses the files stored in the first cloud directory and the second cloud directory respectively according to the file reference digest value, and searches for the first cloud directory and the second cloud directory. Inconsistent files, get the corresponding traversal results;
  • the application gateway synchronizes the files in the first cloud directory and the second cloud directory with each other according to the traversal result.
  • the method further includes:
  • the application gateway locates an error file in the first cloud directory and the second cloud directory and outputs an error report according to a synchronization result of the data synchronization.
  • the step of the application gateway locating an error file in the first cloud directory and the second cloud directory and outputting an error report according to a synchronization result of the data synchronization includes:
  • the first cloud and the second cloud respectively perform data integrity check on the updated files in the first cloud directory and the second cloud directory to obtain corresponding first check results And the second test result;
  • the first cloud and the second cloud locate the error file in the first cloud directory and the second cloud directory to obtain corresponding First Cloud Error Report and Second Cloud Error Report;
  • the application gateway receives and outputs the first cloud error report and the second cloud error report sent by the first cloud and the second cloud, respectively.
  • the present invention provides a dual cloud-based data security storage device, where the device includes:
  • a file uploading unit is configured to: when receiving a data storage request sent by an administrator, the application gateway uploads files in a file directory corresponding to the data storage request to the first cloud and the second cloud, and uploads each file Performing a digest calculation, and storing the calculated file reference digest value corresponding to each file;
  • the data security inspection request includes the file reference digest value
  • An integrity check unit is configured to, after receiving the data security check request from the first cloud and the second cloud, respectively compare the first cloud directory and Files in the second cloud directory for data integrity checks;
  • a data synchronization unit is configured to perform data synchronization on the files stored in the first cloud directory and the second cloud directory after the data integrity check is completed.
  • the integrity check unit includes:
  • a digest calculation unit configured to perform a digest calculation on each of the files in the first cloud directory and the second cloud directory in the first cloud and the second cloud to obtain corresponding digest values
  • An integrity check sub-unit for the first cloud and the second cloud to check the first cloud directory and the second cloud by comparing the digest value with a corresponding file reference digest value Data integrity of each file in the directory.
  • the data synchronization unit includes:
  • a file traversal unit is configured for the application gateway to traverse the files stored in the first cloud directory and the second cloud directory, respectively, according to the file reference digest value, to find the first cloud directory and the Describe the inconsistent files in the second cloud directory and obtain the corresponding traversal results;
  • a data synchronization subunit configured for the application gateway to synchronize the files in the first cloud directory and the second cloud directory with each other according to the traversal result.
  • the device further comprises:
  • An error report output unit is configured to locate, by the application gateway, an error file in the first cloud directory and the second cloud directory according to a synchronization result of the data synchronization, and output an error report.
  • the error report output unit includes:
  • a verification result obtaining unit configured to, according to the synchronization result, perform data integrity check on the updated files in the first cloud directory and the second cloud directory by the first cloud and the second cloud, Obtaining corresponding first inspection results and second inspection results;
  • An error file locating unit configured to: according to the first inspection result and the second inspection result, the first cloud and the second cloud to an error in the first cloud directory and the second cloud directory Locate the file to get the corresponding first cloud error report and second cloud error report;
  • the report output subunit is configured to receive, by the application gateway, the first cloud error report and the second cloud error report sent by the first cloud and the second cloud, respectively, and output.
  • the present invention also provides a computing device, including a memory, a processor, and a computer program stored in the memory and executable on the processor.
  • the processor is implemented when the processor executes the computer program.
  • the present invention also provides a computer-readable storage medium that stores a computer program, and when the computer program is executed by a processor, the method is implemented as described in the above dual cloud-based data security storage method. The steps described.
  • the application gateway of the present invention uploads the files in the corresponding file directory to the first cloud and the second cloud according to the data storage request, and stores the file reference summary value corresponding to each file uploaded. According to the security inspection cycle, the application gateway periodically sends the included file
  • the data security inspection request for the benchmark summary value is sent to the first cloud and the second cloud.
  • the first cloud directory corresponding to the file directory and The files in the second cloud directory are checked for data integrity.
  • the application gateway performs data synchronization on the files stored in the first cloud directory and the second cloud directory, thereby ensuring the integrity of the cloud data, Availability and consistency of data in the dual cloud, and improve the security of cloud data.
  • FIG. 1 is a flowchart of implementing a method for securely storing data based on dual clouds provided by Embodiment 1 of the present invention
  • FIG. 2 is a schematic structural diagram of a dual-cloud-based data security storage device according to a second embodiment of the present invention.
  • FIG. 3 is a schematic diagram of a preferred structure of a dual-cloud-based data security storage device provided by Embodiment 2 of the present invention.
  • FIG. 4 is a schematic structural diagram of a computing device according to a third embodiment of the present invention.
  • FIG. 1 shows the implementation process of the dual cloud-based data security storage method provided by Embodiment 1 of the present invention.
  • Embodiment 1 of the present invention For ease of description, only the parts related to the embodiment of the present invention are shown, and the details are as follows:
  • step S101 when receiving the data storage request sent by the administrator, the application gateway uploads the files in the file directory corresponding to the data storage request to the first cloud and the second cloud, and performs a summary calculation on each uploaded file. And store the file's benchmark summary value corresponding to each file that will be calculated.
  • the embodiments of the present invention are applicable to a multi-cloud data security storage platform, system, or device.
  • the multi-cloud is a public cloud or a combination of a public cloud and a private cloud, such as a personal computer, a server, and the like.
  • Internal or external users interact with a preset cloud storage server through a preset application gateway.
  • the application gateway When receiving the data storage request sent by the administrator, the application gateway uploads the files in the file directory corresponding to the data storage request to the first cloud and the second cloud, and passes the message digest (Secure Hash Algorithm (SHA) or Hash-based Message Authentication Code (HMAC) or other digest algorithms perform digest calculation on each uploaded file to obtain the file ’s benchmark digest value (Ground Truth) Metadata), and then store the file's benchmark summary value to achieve data outsourcing, so that only the file's benchmark summary value corresponding to the file is stored in the application gateway, and the file itself is stored in the first cloud and the second cloud, reducing local data The risk of loss or damage and reduces hardware costs for local storage.
  • the administrator is a user with data storage and data access permissions.
  • the application gateway stores the file reference summary value in a directory tree structure, and the first cloud and the second cloud store the received files in a directory tree structure.
  • the application gateway After the application gateway uploads the files in the file directory corresponding to the data storage request to the first cloud and the second cloud, preferably, according to the data access request sent by the user, the application gateway relocates the data access request to the first cloud Or the second cloud, and obtain the Uniform Resource Locator (Uniform Resource Locator (URL) is returned to users to enable users to access files in the cloud, thereby improving the security of accessing cloud data.
  • Uniform Resource Locator URL
  • the application gateway After the application gateway uploads the files in the file directory corresponding to the data storage request to the first cloud and the second cloud, it is still further preferred that, according to the data operation request sent by the administrator, the application gateway uploads the first cloud or the second cloud Set as the target cloud for data operations and perform data operations on the target cloud to ensure that the target cloud data is up-to-date.
  • data operations include file / directory upload, file / directory delete, file / directory rename, file / Operations such as directory copying and / or file data updating.
  • a user uploads a new file to an existing file directory in the target cloud through the application gateway, or creates a new file directory in the target cloud, and then uploads the file to the directory, or to a file in the file directory in the target cloud. Modify or delete content or data.
  • the application gateway uploads the files in the file directory corresponding to the data storage request to the first cloud and the second cloud
  • the data or file is described by a preset key-value pair structure (key, value), where , Key is the file name or file directory, and Value is the file content and file metadata, which improves the convenience and orderliness of data maintenance and management.
  • step S102 the application gateway monitors a preset security inspection cycle.
  • the application gateway sends a data security inspection request to the first cloud and the second cloud, respectively.
  • the data security inspection request includes a file benchmark. Summary value.
  • the application gateway periodically sends a data security inspection request to the first cloud and the second cloud, and the data security inspection request includes data security inspection to be performed
  • the file directory and the file benchmark summary value corresponding to the files in the file directory are included in a preset security inspection period.
  • step S103 after the first cloud and the second cloud receive the data security inspection request, the data integrity check is performed on the files in the first cloud directory and the second cloud directory corresponding to the file directory according to the file benchmark summary value. .
  • the first cloud after the first cloud and the second cloud respectively receive the data security inspection request, the first cloud performs data integrity on the files in the first cloud directory corresponding to the file directory according to the file reference summary value.
  • the second cloud performs data integrity check on files in the second cloud directory corresponding to the file directory to determine whether there are errors, duplicates, or missing files in the first cloud directory and the second cloud directory.
  • the first cloud and the second cloud respectively perform data integrity check on files in the first cloud directory and the second cloud directory corresponding to the file directory
  • the first cloud and the second cloud are based on a preset digest algorithm (Eg, SHA and HMAC algorithms) perform a digest calculation on each file in the first cloud directory and the second cloud directory, respectively, to obtain the corresponding digest value.
  • the first cloud and the second cloud use the digest value and the corresponding file benchmark digest.
  • the values are compared to verify the data integrity of each file in the first cloud directory and the second cloud directory, thereby improving the effectiveness of the data integrity check.
  • the first cloud and the second cloud respectively recursively locate and repair files and directories stored in the cloud in the first cloud directory and the second cloud directory according to the corresponding inspection results, Including: uploading complete files, downloading missing files, renaming existing files, deleting existing files and directories, thereby improving the integrity of data stored in the first cloud and the second cloud, and consistency with local data.
  • step S104 after the data integrity check is completed, the application gateway performs data synchronization on the files stored in the first cloud directory and the second cloud directory.
  • the application gateway when the application gateway performs data synchronization on the files stored in the first cloud directory and the second cloud directory, preferably, the application gateway performs the first cloud directory and the second cloud directory respectively according to the file reference digest value. Traverse the files stored in the search, find the inconsistent files in the first cloud directory and the second cloud directory, get the corresponding traversal results, and the application gateway performs data repair on the files in the first cloud directory and the second cloud directory according to the traversal results Update operations such as copying, deleting, etc., to achieve mutual synchronization between the first cloud directory and the second cloud directory file to ensure that the files in the first cloud directory in the first cloud and the files in the second cloud directory in the second cloud are consistent Therefore, the consistency of the data in the dual cloud is guaranteed, and the security of the data in the dual cloud is improved.
  • the application gateway After the application gateway performs data synchronization on the files stored in the first cloud directory and the second cloud directory, preferably, the application gateway locates the error file in the first cloud directory and the second cloud directory according to the synchronization result of the data synchronization and An error report is output, so that a report is output according to the synchronization result of data synchronization, and the degree of supervision of data synchronization is improved.
  • the first cloud and the second cloud respectively detect the errors in the first cloud directory and the second cloud directory.
  • the updated files are checked for data integrity, and the corresponding first and second inspection results are obtained.
  • the first cloud and the second cloud compare the first cloud directory and the second cloud directory.
  • the error file in the file is located to obtain the corresponding first cloud error report and second cloud error report.
  • the application gateway receives and outputs the first cloud error report and the second cloud error report respectively sent by the first cloud and the second cloud. Report to users in a timely manner, so as to improve the degree of management of the dual cloud data, and then increase the availability of the dual cloud data.
  • the application gateway uploads the files in the corresponding file directory to the first cloud and the second cloud according to the data storage request, and stores the file reference summary value corresponding to each file uploaded, and the application gateway periodically sends the included file
  • the data security inspection request for the benchmark summary value is sent to the first cloud and the second cloud.
  • the first cloud directory corresponding to the file directory and The files in the second cloud directory are checked for data integrity.
  • the application gateway performs data synchronization on the files stored in the first cloud directory and the second cloud directory, thereby ensuring the integrity of the cloud data, Availability and consistency of data in the dual cloud, and improve the security of cloud data.
  • FIG. 2 shows a structure of a dual cloud-based data security storage device provided in Embodiment 2 of the present invention. For ease of description, only parts related to the embodiment of the present invention are shown, including:
  • a file uploading unit 21 is configured to: when receiving a data storage request sent by an administrator, the application gateway uploads files in a file directory corresponding to the data storage request to the first cloud and the second cloud, and performs processing on each file uploaded. Digest calculation, and store the calculated file's baseline digest value corresponding to each file;
  • the request sending unit 22 is used for the application gateway to monitor a preset security inspection cycle. When the monitoring reaches the security inspection cycle, the application gateway sends a data security inspection request to the first cloud and the second cloud, respectively.
  • the data security inspection request includes Document baseline summary value
  • the integrity checking unit 23 is configured to perform data on files in the first cloud directory and the second cloud directory corresponding to the file directory after receiving the data security inspection request from the first cloud and the second cloud, respectively. Integrity check;
  • the data synchronization unit 24 is configured to perform data synchronization on the files stored in the first cloud directory and the second cloud directory after the data integrity check is completed.
  • the dual cloud-based data security storage device provided by the embodiment of the present invention further includes:
  • the error report output unit 25 is configured to locate the error file in the first cloud directory and the second cloud directory and output an error report according to the synchronization result of the data synchronization.
  • the integrity check unit 23 includes:
  • the digest calculation unit 231 is configured to perform a digest calculation on each file in the first cloud directory and the second cloud directory respectively in the first cloud and the second cloud to obtain corresponding digest values;
  • the integrity check sub-unit 232 is used for the first cloud and the second cloud to check the data integrity of each file in the first cloud directory and the second cloud directory by comparing the digest value with the corresponding file reference digest value.
  • the data synchronization unit 24 includes:
  • the file traversal unit 241 is used by the application gateway to traverse the files stored in the first cloud directory and the second cloud directory respectively according to the file reference summary value, find the inconsistent files in the first cloud directory and the second cloud directory, and obtain the corresponding files. Traverse the results;
  • the data synchronization subunit 242 is configured to synchronize the files in the first cloud directory and the second cloud directory with each other according to the traversal result.
  • the error report output unit 25 includes:
  • the inspection result obtaining unit 251 is configured to perform data integrity check on the updated files in the first cloud directory and the second cloud directory, respectively, according to the synchronization result, to obtain the corresponding first inspection result and the first cloud directory. Test results
  • the error file locating unit 252 is configured to locate the error file in the first cloud directory and the second cloud directory according to the first inspection result and the second inspection result, and obtain a corresponding first cloud error. Reports and second cloud error reports; and
  • the report output subunit 253 is configured to receive and output the first cloud error report and the second cloud error report sent by the first cloud and the second cloud, respectively.
  • each unit of the double cloud-based data security storage device may be implemented by corresponding hardware or software units.
  • Each unit may be an independent software and hardware unit, or may be integrated into one software and hardware unit. It is not intended to limit the invention. Specifically, for the implementation of each unit, reference may be made to the description of the foregoing Embodiment 1, and details are not described herein again.
  • FIG. 4 shows the structure of a computing device provided in Embodiment 3 of the present invention. For ease of description, only parts related to the embodiment of the present invention are shown.
  • the computing device 4 includes a processor 40, a memory 41, and a computer program 42 stored in the memory 41 and executable on the processor 40.
  • the processor 40 executes the computer program 42, the steps in the embodiment of the method for securely storing data based on the dual clouds described above are implemented, for example, steps S101 to S104 shown in FIG.
  • the processor 40 executes the computer program 42, the functions of the units in the foregoing device embodiments are implemented, for example, the functions of the units 21 to 24 shown in FIG. 2.
  • the application gateway uploads files in the corresponding file directory to the first cloud and the second cloud according to the data storage request, and stores the file reference summary value corresponding to each file uploaded.
  • the application The gateway periodically sends a data security inspection request including the file reference digest value to the first cloud and the second cloud.
  • the gateways respectively Data integrity check is performed on files in the first cloud directory and the second cloud directory.
  • the application gateway performs data synchronization on the files stored in the first cloud directory and the second cloud directory, thereby ensuring the cloud
  • the integrity and availability of data and the consistency of the data in the two clouds improve the security of cloud data.
  • the computing device in the embodiment of the present invention may be a personal computer or a server.
  • the processor 40 in the computing device 4 executes the computer program 42 to implement a method for securely storing data based on dual clouds, reference may be made to the description of the foregoing method embodiments, and details are not described herein again.
  • Embodiment 4 is a diagrammatic representation of Embodiment 4:
  • a computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the data storage method in the embodiment of the dual cloud-based data storage method described above is implemented. Steps, for example, steps S101 to S104 shown in FIG. 1. Alternatively, when the computer program is executed by a processor, the functions of the units in the foregoing device embodiments are implemented, for example, the functions of the units 21 to 24 shown in FIG. 2.
  • the application gateway uploads files in the corresponding file directory to the first cloud and the second cloud according to the data storage request, and stores the file reference summary value corresponding to each file uploaded.
  • the application The gateway periodically sends a data security inspection request including the file reference digest value to the first cloud and the second cloud.
  • the gateways respectively Data integrity check is performed on files in the first cloud directory and the second cloud directory.
  • the application gateway performs data synchronization on the files stored in the first cloud directory and the second cloud directory, thereby ensuring the cloud
  • the integrity and availability of data and the consistency of the data in the two clouds improve the security of cloud data.
  • the computer-readable storage medium of the embodiment of the present invention may include any entity or device capable of carrying computer program code, a recording medium, for example, a memory such as a ROM / RAM, a magnetic disk, an optical disk, a flash memory, or the like.
  • a recording medium for example, a memory such as a ROM / RAM, a magnetic disk, an optical disk, a flash memory, or the like.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • General Health & Medical Sciences (AREA)
  • Computer Hardware Design (AREA)
  • Bioethics (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Health & Medical Sciences (AREA)
  • Databases & Information Systems (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)

Abstract

一种基于双云端的数据安全存储方法、装置、设备及存储介质，该方法包括：应用网关根据数据存储请求将对应文件目录中的文件上传至第一、第二云端，并存储上传的每个文件对应的文件基准摘要值，应用网关定时发送包含文件基准摘要值的数据安全检验请求到第一、第二云端，第一、第二云端接收到该请求后，对与文件目录对应的第一、第二云端目录中的文件进行数据完整性检验，当完成检验后，应用网关对第一、第二云端目录中的文件进行数据同步，从而保障了云数据的完整性、可用性以及双云端数据的一致性，并提高了云数据的安全性。

Description

基于双云端的数据安全存储方法、装置、设备及存储介质 技术领域
本发明属于云存储技术领域，尤其涉及一种基于双云端的数据安全存储方法、装置、设备及存储介质。
 背景技术
近年来，云存储在个人、企业及政府领域得到大规模且广泛的应用。云存储不仅为社会大众提供了近乎无限的、满足不同资源存储需求的存储容量，还为大量资源的共享提供了方便快捷的访问通道，云存储在信息社会中有着越来越重要的地位。然而，用户在积极拥护云存储提供的便利性的同时，也日益担心外包于云存储的数据安全性。
目前，市场上云存储服务是云存储服务提供商基于单云架构提供的服务（或称为数据单点存储服务），由于单个云架构下数据是单点存储，存在潜在硬件故障、内部及外部等不确定因素的威胁，从而造成云数据被篡改、被删除、以及数据丢失等现象。
近年来，主流云服务商陆续发生过云数据不可用现象，造成人们对云数据的安全性产生了质疑，因此，如何保证云数据的可用性和安全性，是亟待解决的问题。
 技术问题
本发明的目的在于提供一种基于双云端的数据安全存储方法、装置、设备及存储介质，旨在解决由于现有技术无法提供一种有效的数据云存储方法，导致云端存储的数据安全性低的问题。
 技术解决方案
一方面，本发明提供了一种基于双云端的数据安全存储方法，所述方法包括下述步骤：
当接收到管理员发送的数据存储请求时，应用网关将与所述数据存储请求对应的文件目录中的文件上传至第一云端和第二云端，对上传的每个文件进行摘要计算，并存储计算得到的、所述每个文件对应的文件基准摘要值；
所述应用网关对预设的安全检验周期进行监测，当监测到到达所述安全检验周期时，分别发送数据安全检验请求到所述第一云端和所述第二云端，所述数据安全检验请求包含所述文件基准摘要值；
所述第一云端和所述第二云端接收到所述数据安全检验请求后，根据所述文件基准摘要值，分别对与所述文件目录对应的第一云端目录和第二云端目录中的文件进行数据完整性检验；
当完成所述数据完整性检验后，所述应用网关对所述第一云端目录和所述第二云端目录中存储的文件进行数据同步。
优选地，分别对与所述文件目录对应的第一云端目录和第二云端目录中的文件进行数据完整性检验的步骤，包括：
所述第一云端和所述第二云端分别对所述第一云端目录和所述第二云端目录中的每个文件进行摘要计算，得到对应的摘要值；
所述第一云端和所述第二云端通过将所述摘要值和对应的所述文件基准摘要值进行比较，检验所述第一云端目录和所述第二云端目录中的每个文件的数据完整性。
优选地，所述应用网关对所述第一云端目录和所述第二云端目录中存储的文件进行数据同步的步骤，包括：
所述应用网关根据所述文件基准摘要值分别对所述第一云端目录和所述第二云端目录中存储的所述文件进行遍历，查找所述第一云端目录与所述第二云端目录中不一致的文件，得到对应的遍历结果；
所述应用网关根据所述遍历结果对所述第一云端目录和所述第二云端目录中的所述文件进行相互同步。
优选地，所述应用网关对所述第一云端目录和所述第二云端目录中存储的文件进行数据同步的步骤之后，还包括：
所述应用网关根据所述数据同步的同步结果对所述第一云端目录和所述第二云端目录中的错误文件进行定位并输出错误报告。
进一步优选地，所述应用网关根据所述数据同步的同步结果对所述第一云端目录和所述第二云端目录中的错误文件进行定位并输出错误报告的步骤，包括：
根据所述同步结果，所述第一云端和所述第二云端分别对所述第一云端目录和所述第二云端目录中已更新的文件进行数据完整性检验，得到对应的第一检验结果和第二检验结果；
根据所述第一检验结果和所述第二检验结果，所述第一云端和所述第二云端对所述第一云端目录和所述第二云端目录中的错误文件进行定位，得到对应的第一云端错误报告和第二云端错误报告；
所述应用网关接收所述第一云端和所述第二云端分别发送的所述第一云端错误报告和所述第二云端错误报告并输出。
另一方面，本发明提供了一种基于双云端的数据安全存储装置，所述装置包括：
文件上传单元，用于当接收到管理员发送的数据存储请求时，应用网关将与所述数据存储请求对应的文件目录中的文件上传至第一云端和第二云端，对上传的每个文件进行摘要计算，并存储计算得到的、所述每个文件对应的文件基准摘要值；
请求发送单元，用于所述应用网关对预设的安全检验周期进行监测，当监测到到达所述安全检验周期时，分别发送数据安全检验请求到所述第一云端和所述第二云端，所述数据安全检验请求包含所述文件基准摘要值；
完整性检验单元，用于所述第一云端和所述第二云端接收到所述数据安全检验请求后，根据所述文件基准摘要值，分别对与所述文件目录对应的第一云端目录和第二云端目录中的文件进行数据完整性检验；以及
数据同步单元，用于当完成所述数据完整性检验后，所述应用网关对所述第一云端目录和所述第二云端目录中存储的文件进行数据同步。
优选地，所述完整性检验单元包括：
摘要计算单元，用于所述第一云端和所述第二云端分别对所述第一云端目录和所述第二云端目录中的每个文件进行摘要计算，得到对应的摘要值；以及
完整性检验子单元，用于所述第一云端和所述第二云端通过将所述摘要值和对应的所述文件基准摘要值进行比较，检验所述第一云端目录和所述第二云端目录中的每个文件的数据完整性。
优选地，所述数据同步单元包括：
文件遍历单元，用于所述应用网关根据所述文件基准摘要值分别对所述第一云端目录和所述第二云端目录中存储的所述文件进行遍历，查找所述第一云端目录与所述第二云端目录中不一致的文件，得到对应的遍历结果；以及
数据同步子单元，用于所述应用网关根据所述遍历结果对所述第一云端目录和所述第二云端目录中的所述文件进行相互同步。
优选地，所述装置还包括：
错误报告输出单元，用于所述应用网关根据所述数据同步的同步结果对所述第一云端目录和所述第二云端目录中的错误文件进行定位并输出错误报告。
进一步优选地，所述错误报告输出单元包括：
检验结果获得单元，用于根据所述同步结果，所述第一云端和所述第二云端分别对所述第一云端目录和所述第二云端目录中已更新的文件进行数据完整性检验，得到对应的第一检验结果和第二检验结果；
错误文件定位单元，用于根据所述第一检验结果和所述第二检验结果，所述第一云端和所述第二云端对所述第一云端目录和所述第二云端目录中的错误文件进行定位，得到对应的第一云端错误报告和第二云端错误报告；以及
报告输出子单元，用于所述应用网关接收所述第一云端和所述第二云端分别发送的所述第一云端错误报告和所述第二云端错误报告并输出。
另一方面，本发明还提供了一种计算设备，包括存储器、处理器以及存储在所述存储器中并可在所述处理器上运行的计算机程序，所述处理器执行所述计算机程序时实现如上述基于双云端的数据安全存储方法所述的步骤。
另一方面，本发明还提供了一种计算机可读存储介质，所述计算机可读存储介质存储有计算机程序，所述计算机程序被处理器执行时实现如上述基于双云端的数据安全存储方法所述的步骤。
 有益效果
本发明应用网关根据数据存储请求将对应文件目录中的文件上传至第一云端和第二云端，并存储上传的每个文件对应的文件基准摘要值，根据安全检验周期，应用网关定时发送包含文件基准摘要值的数据安全检验请求到第一云端和第二云端，第一云端和第二云端接收到数据安全检验请求后，根据文件基准摘要值，分别对与文件目录对应的第一云端目录和第二云端目录中的文件进行数据完整性检验，当完成数据完整性检验后，应用网关对第一云端目录和第二云端目录中存储的文件进行数据同步，从而保障了云数据的完整性、可用性以及双云端数据的一致性，并提高了云数据的安全性。
 附图说明
图1是本发明实施例一提供的基于双云端的数据安全存储方法的实现流程图；
图2是本发明实施例二提供的基于双云端的数据安全存储装置的结构示意图；
图3是本发明实施例二提供的基于双云端的数据安全存储装置的优选结构示意图；以及
图4是本发明实施例三提供的计算设备的结构示意图。
 本发明的实施方式
为了使本发明的目的、技术方案及优点更加清楚明白，以下结合附图及实施例，对本发明进行进一步详细说明。应当理解，此处所描述的具体实施例仅仅用以解释本发明，并不用于限定本发明。
以下结合具体实施例对本发明的具体实现进行详细描述：
实施例一：
图1示出了本发明实施例一提供的基于双云端的数据安全存储方法的实现流程，为了便于说明，仅示出了与本发明实施例相关的部分，详述如下：
在步骤S101中，当接收到管理员发送的数据存储请求时，应用网关将与数据存储请求对应的文件目录中的文件上传至第一云端和第二云端，对上传的每个文件进行摘要计算，并存储计算将得到的、每个文件对应的文件基准摘要值。
本发明实施例适用于多云端的数据安全存储平台、系统或设备，多云端为公有云或者公有云与私有云的组合，例如，个人计算机、服务器等。内部或外部用户通过预设的应用网关与预设的云存储服务器进行交互。当接收到管理员发送的数据存储请求时，应用网关将与数据存储请求对应的文件目录中的文件上传至第一云端和第二云端，并通过消息摘要（Secure Hash Algorithm，SHA）或者哈希消息认证码（Hash-based Message Authentication Code，HMAC）或者其它摘要算法对上传的每个文件进行摘要计算，得到每个文件对应的文件基准摘要值（Ground Truth Metadata），再将该文件基准摘要值进行存储，以实现数据外包，从而仅将文件对应的文件基准摘要值存储在应用网关，而文件本身储于第一云端和第二云端，降低了本地数据丢失或者被损坏时产生的风险，并降低了本地存储的硬件成本。其中，管理员为具有数据存储、数据访问等权限的用户，应用网关以目录树结构对文件基准摘要值进行存储，第一云端和第二云端以目录树结构对接收到的文件进行存储。
在应用网关将与数据存储请求对应的文件目录中的文件上传至第一云端和第二云端之后，优选地，根据用户发送的数据访问请求，应用网关将该数据访问请求重定位至第一云端或者第二云端，并将获得的、数据访问请求对应的访问文件的统一资源定位符（Uniform Resource Locator，URL）返回给用户，以实现用户访问云端的文件，从而提高了访问云数据的安全性。
在应用网关将与数据存储请求对应的文件目录中的文件上传至第一云端和第二云端之后，又一优选地，根据管理员发送的数据操作请求，应用网关将第一云端或者第二云端设置为待进行数据操作的目标云端，并对目标云端进行数据操作，从而保证目标云端数据是最新的，其中，数据操作包括文件/目录上传、文件/目录删除、文件/目录重命名、文件/目录拷贝和/或文件数据更新等操作。例如，用户通过应用网关将  新文件上传到目标云端已存在的文件目录中，或者在目标云端创建新的文件目录，再上传文件到该目录，或者对目标云端的文件目录中的某个文件中的内容或数据进行修改或删除等。
在应用网关将与数据存储请求对应的文件目录中的文件上传至第一云端和第二云端时，优选地，通过预设的键值对结构（键，值）对数据或文件进行描述，其中，键（Key）为文件名或者文件目录，值（Value）为文件内容及文件元数据(metadata)，从而提高对数据维护和管理的便利性和有序性。
在步骤S102中，应用网关对预设的安全检验周期进行监测，当监测到到达安全检验周期时，应用网关分别发送数据安全检验请求到第一云端和第二云端，数据安全检验请求包含文件基准摘要值。
在本发明实施例中，根据预设的安全检验周期（例如，48小时），应用网关定时发送数据安全检验请求到第一云端和第二云端，该数据安全检验请求中包含待进行数据安全检验的文件目录和该文件目录中文件对应的文件基准摘要值。
在步骤S103中，第一云端和第二云端接收到数据安全检验请求后，根据文件基准摘要值，分别对与文件目录对应的第一云端目录和第二云端目录中的文件进行数据完整性检验。
在本发明实施例中，第一云端和第二云端分别接收到数据安全检验请求后，根据文件基准摘要值，第一云端对与该文件目录对应的第一云端目录中的文件进行数据完整性检验，第二云端对与该文件目录对应的第二云端目录中的文件进行数据完整性检验，以确定第一云端目录和第二云端目录中是否存在错误、重复、缺失的文件。
在第一云端和第二云端分别对与文件目录对应的第一云端目录和第二云端目录中的文件进行数据完整性检验时，优选地，第一云端和第二云端根据预设的摘要算法（例如SHA、HMAC算法）分别对第一云端目录和第二云端目录中的每个文件进行摘要计算，得到对应的摘要值，第一云端和第二云端通过将摘要值和对应的文件基准摘要值进行比较，检验第一云端目录和第二云端目录中的每个文件的数据完整性，从而提高对数据完整性检验的有效性。
在进行数据完整性检验之后，优选地，第一云端和第二云端分别根据对应的检验结果在第一云端目录和第二云端目录中以递归的方式定位、修复本云端存储的文件及目录，包括：上传完整的文件、下载缺失的文件、重命名已有文件、删除已有文件及目录，从而提高第一云端和第二云端存储的数据的完整性，以及与本地数据的一致性。
在步骤S104中，当完成数据完整性检验后，应用网关对第一云端目录和第二云端目录中存储的文件进行数据同步。
在本发明实施例中，在应用网关对第一云端目录和第二云端目录中存储的文件进行数据同步时，优选地，应用网关根据文件基准摘要值分别对第一云端目录和第二云端目录中存储的文件进行遍历，查找第一云端目录与第二云端目录中不一致的文件，得到对应的遍历结果，应用网关根据该遍历结果对第一云端目录和第二云端目录中的文件进行数据修复、复制、删除等更新操作，实现第一云端目录和第二云端目录文件的相互同步，以保证第一云端的第一云端目录中的文件和第二云端的第二云端目录中的文件是一致的，从而保障了双云端数据的一致性，提高了双云端数据的安全性。
在应用网关对第一云端目录和第二云端目录中存储的文件进行数据同步之后，优选地，应用网关根据数据同步的同步结果对第一云端目录和第二云端目录中的错误文件进行定位并输出错误报告，从而根据数据同步的同步结果输出报告，提高对数据同步的监督程度。
在对第一云端目录和第二云端目录中的错误文件进行定位并输出错误报告时，优选地，根据同步结果，第一云端和第二云端分别对第一云端目录和第二云端目录中已更新的文件进行数据完整性检验，得到对应的第一检验结果和第二检验结果，根据第一检验结果和第二检验结果，第一云端和第二云端对第一云端目录和第二云端目录中的错误文件进行定位，得到对应的第一云端错误报告和第二云端错误报告，应用网关接收第一云端和第二云端分别发送的第一云端错误报告和第二云端错误报告并输出，以及时报告给用户，从而提高对双云端数据的管理程度，进而提高双云端数据的可用程度。
在本发明实施例中，应用网关根据数据存储请求将对应文件目录中的文件上传至第一云端和第二云端，并存储上传的每个文件对应的文件基准摘要值，应用网关定时发送包含文件基准摘要值的数据安全检验请求到第一云端和第二云端，第一云端和第二云端接收到数据安全检验请求后，根据文件基准摘要值，分别对与文件目录对应的第一云端目录和第二云端目录中的文件进行数据完整性检验，当完成数据完整性检验后，应用网关对第一云端目录和第二云端目录中存储的文件进行数据同步，从而保障了云数据的完整性、可用性以及双云端数据的一致性，并提高了云数据的安全性。
实施例二：
图2示出了本发明实施例二提供的基于双云端的数据安全存储装置的结构，为了便于说明，仅示出了与本发明实施例相关的部分，其中包括：
文件上传单元21，用于当接收到管理员发送的数据存储请求时，应用网关将与数据存储请求对应的文件目录中的文件上传至第一云端和第二云端，对上传的每个文件进行摘要计算，并存储计算得到的、每个文件对应的文件基准摘要值；
请求发送单元22，用于应用网关对预设的安全检验周期进行监测，当监测到到达安全检验周期时，应用网关分别发送数据安全检验请求到第一云端和第二云端，数据安全检验请求包含文件基准摘要值；
完整性检验单元23，用于第一云端和第二云端接收到数据安全检验请求后，根据文件基准摘要值，分别对与文件目录对应的第一云端目录和第二云端目录中的文件进行数据完整性检验；以及
数据同步单元24，用于当完成数据完整性检验后，应用网关对第一云端目录和第二云端目录中存储的文件进行数据同步。
如图3所示，优选地，本发明实施例提供的基于双云端的数据安全存储装置还包括：
错误报告输出单元25，用于应用网关根据数据同步的同步结果对第一云端目录和第二云端目录中的错误文件进行定位并输出错误报告。
完整性检验单元23包括：
摘要计算单元231，用于第一云端和第二云端分别对第一云端目录和第二云端目录中的每个文件进行摘要计算，得到对应的摘要值；以及
完整性检验子单元232，用于第一云端和第二云端通过将摘要值和对应的文件基准摘要值进行比较，检验第一云端目录和第二云端目录中的每个文件的数据完整性。
数据同步单元24包括：
文件遍历单元241，用于应用网关根据文件基准摘要值分别对第一云端目录和第二云端目录中存储的文件进行遍历，查找第一云端目录与第二云端目录中不一致的文件，得到对应的遍历结果；以及
数据同步子单元242，用于应用网关根据遍历结果对第一云端目录和第二云端目录中的文件进行相互同步。
错误报告输出单元25包括：
检验结果获得单元251，用于根据同步结果，第一云端和第二云端分别对第一云端目录和第二云端目录中已更新的文件进行数据完整性检验，得到对应的第一检验结果和第二检验结果；
错误文件定位单元252，用于根据第一检验结果和第二检验结果，第一云端和第二云端对第一云端目录和第二云端目录中的错误文件进行定位，得到对应的第一云端错误报告和第二云端错误报告；以及
报告输出子单元253，用于应用网关接收第一云端和第二云端分别发送的第一云端错误报告和第二云端错误报告并输出。
在本发明实施例中，基于双云端的数据安全存储装置的各单元可由相应的硬件或软件单元实现，各单元可以为独立的软、硬件单元，也可以集成为一个软、硬件单元，在此不用以限制本发明。具体地，各单元的实施方式可参考前述实施例一的描述，在此不再赘述。
实施例三：
图4示出了本发明实施例三提供的计算设备的结构，为了便于说明，仅示出了与本发明实施例相关的部分。
本发明实施例的计算设备4包括处理器40、存储器41以及存储在存储器41中并可在处理器40上运行的计算机程序42。该处理器40执行计算机程序42时实现上述基于双云端的数据安全存储方法实施例中的步骤，例如图1所示的步骤S101至S104。或者，处理器40执行计算机程序42时实现上述各装置实施例中各单元的功能，例如图2所示单元21至24的功能。
在本发明实施例中，应用网关根据数据存储请求将对应文件目录中的文件上传至第一云端和第二云端，并存储上传的每个文件对应的文件基准摘要值，根据安全检验周期，应用网关定时发送包含文件基准摘要值的数据安全检验请求到第一云端和第二云端，第一云端和第二云端接收到数据安全检验请求后，根据文件基准摘要值，分别对与文件目录对应的第一云端目录和第二云端目录中的文件进行数据完整性检验，当完成数据完整性检验后，应用网关对第一云端目录和第二云端目录中存储的文件进行数据同步，从而保障了云数据的完整性、可用性以及双云端数据的一致性，并提高了云数据的安全性。
本发明实施例的计算设备可以为个人计算机、服务器。该计算设备4中处理器40执行计算机程序42时实现基于双云端的数据安全存储方法时实现的步骤可参考前述方法实施例的描述，在此不再赘述。
实施例四：
在本发明实施例中，提供了一种计算机可读存储介质，该计算机可读存储介质存储有计算机程序，该计算机程序被处理器执行时实现上述基于双云端的数据安全存储方法实施例中的步骤，例如，图1所示的步骤S101至S104。或者，该计算机程序被处理器执行时实现上述各装置实施例中各单元的功能，例如图2所示单元21至24的功能。
在本发明实施例中，应用网关根据数据存储请求将对应文件目录中的文件上传至第一云端和第二云端，并存储上传的每个文件对应的文件基准摘要值，根据安全检验周期，应用网关定时发送包含文件基准摘要值的数据安全检验请求到第一云端和第二云端，第一云端和第二云端接收到数据安全检验请求后，根据文件基准摘要值，分别对与文件目录对应的第一云端目录和第二云端目录中的文件进行数据完整性检验，当完成数据完整性检验后，应用网关对第一云端目录和第二云端目录中存储的文件进行数据同步，从而保障了云数据的完整性、可用性以及双云端数据的一致性，并提高了云数据的安全性。
本发明实施例的计算机可读存储介质可以包括能够携带计算机程序代码的任何实体或装置、记录介质，例如，ROM/RAM、磁盘、光盘、闪存等存储器。
以上所述仅为本发明的较佳实施例而已，并不用以限制本发明，凡在本发明的精神和原则之内所作的任何修改、等同替换和改进等，均应包含在本发明的保护范围之内。

Claims (12)

  1. 一种基于双云端的数据安全存储方法，其特征在于，所述方法包括下述步骤：
    当接收到管理员发送的数据存储请求时，应用网关将与所述数据存储请求对应的文件目录中的文件上传至第一云端和第二云端，对上传的每个文件进行摘要计算，并存储计算得到的、所述每个文件对应的文件基准摘要值；
    所述应用网关对预设的安全检验周期进行监测，当监测到到达所述安全检验周期时，分别发送数据安全检验请求到所述第一云端和所述第二云端，所述数据安全检验请求包含所述文件基准摘要值；
    所述第一云端和所述第二云端接收到所述数据安全检验请求后，根据所述文件基准摘要值，分别对与所述文件目录对应的第一云端目录和第二云端目录中的文件进行数据完整性检验；
    当完成所述数据完整性检验后，所述应用网关对所述第一云端目录和所述第二云端目录中存储的文件进行数据同步。
  2. 如权利要求1所述的方法，其特征在于，分别对与所述文件目录对应的第一云端目录和第二云端目录中的文件进行数据完整性检验的步骤，包括：
    所述第一云端和所述第二云端分别对所述第一云端目录和所述第二云端目录中的每个文件进行摘要计算，得到对应的摘要值；
    所述第一云端和所述第二云端通过将所述摘要值和对应的所述文件基准摘要值进行比较，检验所述第一云端目录和所述第二云端目录中的每个文件的数据完整性。
  3. 如权利要求1所述的方法，其特征在于，所述应用网关对所述第一云端目录和所述第二云端目录中存储的文件进行数据同步的步骤，包括：
    所述应用网关根据所述文件基准摘要值分别对所述第一云端目录和所述第二云端目录中存储的所述文件进行遍历，查找所述第一云端目录与所述第二云端目录中不一致的文件，得到对应的遍历结果；
    所述应用网关根据所述遍历结果对所述第一云端目录和所述第二云端目录中的所述文件进行相互同步。
  4. 如权利要求1所述的方法，其特征在于，所述应用网关对所述第一云端目录和所述第二云端目录中存储的文件进行数据同步的步骤之后，还包括：
    所述应用网关根据所述数据同步的同步结果对所述第一云端目录和所述第二云端目录中的错误文件进行定位并输出错误报告。
  5. 如权利要求4所述的方法，其特征在于，所述应用网关根据所述数据同步的同步结果对所述第一云端目录和所述第二云端目录中的错误文件进行定位并输出错误报告的步骤，包括：
    根据所述同步结果，所述第一云端和所述第二云端分别对所述第一云端目录和所述第二云端目录中已更新的文件进行数据完整性检验，得到对应的第一检验结果和第二检验结果；
    根据所述第一检验结果和所述第二检验结果，所述第一云端和所述第二云端对所述第一云端目录和所述第二云端目录中的错误文件进行定位，得到对应的第一云端错误报告和第二云端错误报告；
    所述应用网关接收所述第一云端和所述第二云端分别发送的所述第一云端错误报告和所述第二云端错误报告并输出。
  6. 一种基于双云端的数据安全存储装置，其特征在于，所述装置包括：
    文件上传单元，用于当接收到管理员发送的数据存储请求时，应用网关将与所述数据存储请求对应的文件目录中的文件上传至第一云端和第二云端，对上传的每个文件进行摘要计算，并存储计算得到的、所述每个文件对应的文件基准摘要值；
    请求发送单元，用于所述应用网关对预设的安全检验周期进行监测，当监测到到达所述安全检验周期时，分别发送数据安全检验请求到所述第一云端和所述第二云端，所述数据安全检验请求包含所述文件基准摘要值；
    完整性检验单元，用于所述第一云端和所述第二云端接收到所述数据安全检验请求后，根据所述文件基准摘要值，分别对与所述文件目录对应的第一云端目录和第二云端目录中的文件进行数据完整性检验；以及
    数据同步单元，用于当完成所述数据完整性检验后，所述应用网关对所述第一云端目录和所述第二云端目录中存储的文件进行数据同步。
  7. 如权利要求6所述的装置，其特征在于，所述完整性检验单元包括：
    摘要计算单元，用于所述第一云端和所述第二云端分别对所述第一云端目录和所述第二云端目录中的每个文件进行摘要计算，得到对应的摘要值；以及
    完整性检验子单元，用于所述第一云端和所述第二云端通过将所述摘要值和对应的所述文件基准摘要值进行比较，检验所述第一云端目录和所述第二云端目录中的每个文件的数据完整性。
  8. 如权利要求6所述的装置，其特征在于，所述数据同步单元包括：
    文件遍历单元，用于所述应用网关根据所述文件基准摘要值分别对所述第一云端目录和所述第二云端目录中存储的所述文件进行遍历，查找所述第一云端目录与所述第二云端目录中不一致的文件，得到对应的遍历结果；以及
    数据同步子单元，用于所述应用网关根据所述遍历结果对所述第一云端目录和所述第二云端目录中的所述文件进行相互同步。
  9. 如权利要求6所述的装置，其特征在于，所述装置还包括：
    错误报告输出单元，用于所述应用网关根据所述数据同步的同步结果对所述第一云端目录和所述第二云端目录中的错误文件进行定位并输出错误报告。
  10. 如权利要求9所述的装置，其特征在于，所述错误报告输出单元包括：
    检验结果获得单元，用于根据所述同步结果，所述第一云端和所述第二云端分别对所述第一云端目录和所述第二云端目录中已更新的文件进行数据完整性检验，得到对应的第一检验结果和第二检验结果；
    错误文件定位单元，用于根据所述第一检验结果和所述第二检验结果，所述第一云端和所述第二云端对所述第一云端目录和所述第二云端目录中的错误文件进行定位，得到对应的第一云端错误报告和第二云端错误报告；以及
    报告输出子单元，用于所述应用网关接收所述第一云端和所述第二云端分别发送的所述第一云端错误报告和所述第二云端错误报告并输出。
  11. 一种计算设备，包括存储器、处理器以及存储在所述存储器中并可在所述处理器上运行的计算机程序，其特征在于，所述处理器执行所述计算机程序时实现如权利要求1至5任一项所述方法的步骤。
  12. 一种计算机可读存储介质，所述计算机可读存储介质存储有计算机程序，其特征在于，所述计算机程序被处理器执行时实现如权利要求1至5任一项所述方法的步骤。
PCT/CN2018/103398 2018-08-31 2018-08-31 基于双云端的数据安全存储方法、装置、设备及存储介质 WO2020042130A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
PCT/CN2018/103398 WO2020042130A1 (zh) 2018-08-31 2018-08-31 基于双云端的数据安全存储方法、装置、设备及存储介质
CN201880001461.7A CN109362236A (zh) 2018-08-31 2018-08-31 基于双云端的数据安全存储方法、装置、设备及存储介质

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2018/103398 WO2020042130A1 (zh) 2018-08-31 2018-08-31 基于双云端的数据安全存储方法、装置、设备及存储介质

Publications (1)

Publication Number Publication Date
WO2020042130A1 true WO2020042130A1 (zh) 2020-03-05

Family

ID=65329558

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2018/103398 WO2020042130A1 (zh) 2018-08-31 2018-08-31 基于双云端的数据安全存储方法、装置、设备及存储介质

Country Status (2)

Country Link
CN (1) CN109362236A (zh)
WO (1) WO2020042130A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114449001A (zh) * 2021-12-30 2022-05-06 天翼云科技有限公司 流媒体数据的云存储实现方法、装置、设备及存储介质

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110728577B (zh) * 2019-08-21 2022-09-30 北京邮电大学 一种中心化可分阶层不断扩展的区块链交易方法
CN114205259B (zh) * 2021-12-07 2024-06-07 施耐德电气（中国）有限公司 一种网关上数异常诊断方法和装置

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20130054522A1 (en) * 2011-08-30 2013-02-28 International Business Machines Corporation Data synchronization using string matching
CN104883404A (zh) * 2015-06-04 2015-09-02 上海斐讯数据通信技术有限公司 基于网络的文件云同步方法
CN106502823A (zh) * 2016-09-29 2017-03-15 北京许继电气有限公司 数据云备份方法和系统
WO2017113088A1 (zh) * 2015-12-29 2017-07-06 深圳大学 基于云服务的数据存储方法、完整性检测方法及装置、终端设备
CN107018185A (zh) * 2017-03-28 2017-08-04 清华大学 云存储系统的同步方法和装置

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101501653B (zh) * 2006-02-06 2012-04-04 X档案公司 磁盘的长期备份
WO2008070172A2 (en) * 2006-12-06 2008-06-12 Fusion Multisystems, Inc. (Dba Fusion-Io) Apparatus, system, and method for remote direct memory access to a solid-state storage device
CN102124527A (zh) * 2008-05-16 2011-07-13 弗森-艾奥公司 用于检测和替代失效的数据存储器的装置、系统和方法
KR101930263B1 (ko) * 2012-03-12 2018-12-18 삼성전자주식회사 클라우드 게이트웨이의 콘텐츠 관리 장치 및 방법
CN103535014B (zh) * 2013-04-23 2016-09-28 华为技术有限公司 一种网络存储系统、数据处理方法和客户端
CN104754001A (zh) * 2013-12-30 2015-07-01 方正宽带网络服务股份有限公司 云存储系统和数据存储方法
CN105320899B (zh) * 2014-07-22 2018-01-09 北京大学 一种面向用户的云存储数据完整性保护方法
CN104408381B (zh) * 2014-11-27 2017-04-12 大连理工大学 云存储中数据完整性保护方法
CN108337303A (zh) * 2018-01-24 2018-07-27 中国银联股份有限公司 一种数据同步方法和分布式系统

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20130054522A1 (en) * 2011-08-30 2013-02-28 International Business Machines Corporation Data synchronization using string matching
CN104883404A (zh) * 2015-06-04 2015-09-02 上海斐讯数据通信技术有限公司 基于网络的文件云同步方法
WO2017113088A1 (zh) * 2015-12-29 2017-07-06 深圳大学 基于云服务的数据存储方法、完整性检测方法及装置、终端设备
CN106502823A (zh) * 2016-09-29 2017-03-15 北京许继电气有限公司 数据云备份方法和系统
CN107018185A (zh) * 2017-03-28 2017-08-04 清华大学 云存储系统的同步方法和装置

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114449001A (zh) * 2021-12-30 2022-05-06 天翼云科技有限公司 流媒体数据的云存储实现方法、装置、设备及存储介质

Also Published As

Publication number Publication date
CN109362236A (zh) 2019-02-19

Similar Documents

Publication Publication Date Title
US11151236B2 (en) File verification database system
KR101381551B1 (ko) 그룹 기반의 완료 및 증분 컴퓨터 파일 백업 시스템, 프로세스 및 장치
US11070516B2 (en) Directory service state manager
CN110688261A (zh) 一种基于区块链的数字档案异构电子文件云灾备系统
JP2019091477A (ja) 文書管理およびアクセス制御を有する分散データシステム
WO2020237874A1 (zh) 项目数据验证方法、装置、计算机设备及存储介质
US20230122861A1 (en) Unified metadata search
US11442752B2 (en) Central storage management interface supporting native user interface versions
WO2020042130A1 (zh) 基于双云端的数据安全存储方法、装置、设备及存储介质
US11886298B2 (en) Using a storage log to generate an incremental backup
US11388218B2 (en) Cloud file transfers using cloud file descriptors
CN110163009B (zh) Hdfs存储平台的安全校验及修复的方法和装置
US10872061B2 (en) Systems and methods for document search and aggregation with reduced bandwidth and storage demand
US20230273897A1 (en) Managing expiration times of archived objects
US11030345B2 (en) Sharing regulated content stored on non-regulated storage platforms
TWI571754B (zh) 用來進行檔案同步控制之方法與裝置
US20220382716A1 (en) Cloud-native global file system with file accelerator
US12074981B2 (en) Blockchain consolidation with active archiving
US10992748B1 (en) Verification of event-based synchronization
US11522914B1 (en) Peer-based policy definitions
CN115277668A (zh) 一种基于以太坊和星际文件系统的云文件动态完整性保护和验证方法
US11954066B2 (en) Coalescing storage log entries
Ravi Kumar et al. Troubleshooting and Conducting Health Checks for High Availability
JP2015176393A (ja) ストレージ装置、ストレージシステム、ストレージシステムの制御方法および制御プログラム
JaJa et al. Tools and services for long-term preservation of digital archives

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 18931723

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 09-06-2021)

122 Ep: pct application non-entry in european phase

Ref document number: 18931723

Country of ref document: EP

Kind code of ref document: A1