Distributed Secure File System Based on LDAP and SSH

ZHAO Xiu-wen,LUO Ping,CHEN Qiang,ZHANG Ning

2006-01-01

Abstract:How to provide stronger and more flexible security protections for file systems is one important part of secure file systems research.Based LDAP and SSH protocol,the distributed secure file system is designed.The model,principle and security analysis of distributed secure file system are introduced.

What problem does this paper attempt to address?

Design of Secure Operating System

MAO Weifeng,PING Lingdi,JIANG Li,CHEN Xiaoping

DOI: https://doi.org/10.3969/j.issn.1000-3428.2006.12.068

2006-01-01

Abstract:SECOS is a secure operating system with independent intellectual property right,which accords with the requirements of level 4 secure operation system technology.This paper illustrates some key issues of the system,including design method for enchancement of security,improved model from the Bell-La Padula MAC(mandatory access control) implementation,the realization of the model,formal method during the system development,conversiion channel analysis and its prevention,and secure deletion.The performance evaluation shows the design and implementation of SECOS is effective.
A Novel Secure Distributed Disk System

Jie Lin,Yunliang Zhang,Zhiyong Tan,Yiqi Dai

2009-01-01

Abstract:The paper proposes a novel secure distributed disk system. By dynamically exploiting file-system semantics of on-disk data blocks and sensing activities of the local file system, the disk system can be integrated with the current file systems seamlessly without changing the standard block interface between them and can efficiently manage accesses to the files from multiple hosts. And the disk system adopts a new data distribution scheme to ensure confidentiality, reliability and availability of data, and a credibility evaluation strategy to prevent some attacks from malicious clients and data servers.
A scalable version control layer in p2p file system

Xin Lin,Shanping Li,Wei Shi,Jie Teng

DOI: https://doi.org/10.1007/11590354_121

2005-01-01

Abstract:Challenges revealed in constructing a peer-to-peer (P2P) file system are due to the difficulties of version control.There have appeared no P2P systems, which can solve these problems smoothly. In this paper we show our efforts towards solving the problems by developing a new application, SVCL (a Scalable Version Control Layer in P2P file system), in which version control servers are woven into a peer-to-peer network so that the system will not crash under single node failure. As a result, users can carry out both file updating and reading operations. Experiments have demonstrated the high performance of the proposed system.
Design and Implementation of Unified Access Control System Based on LDAP

ZHENG Lan,CHEN Qi

DOI: https://doi.org/10.3969/j.issn.1000-7024.2005.07.058

2005-01-01

Abstract:With the rapid growth of internet and enterprises on a global scale, the use of directories as accessible repositories providesa flexible and various solution for gathering, storage and accessing information. The design and implementation of an unified accesscontrol system supporting single-sign-on areintrodueed, whichis based on LDAPdirectory and combines access controls ofall applicationsystems to realize security access system of unified users management. The system used middleware technology to efficiently resolvethe bottleneck problem when a lot of users accesed LDAP database.
New Secure and Efficient Distributed Data Storage Approaches for Unattended Wireless Sensor Network

Fan Rong,Ping Lingdi,Fu Jianqing,Pan Xuezeng

DOI: https://doi.org/10.3969/j.issn.1000-0801.2010.10.015

2010-01-01

Abstract:In the applications of unattended wireless sensor networks(UWSN),sensor nodes always are deployed in hostile area and are difficult to communicate with each other.Besides,the network user need abstract sensed data not real time data in some scene.Thus the sensor nodes need to store the sensed data until receiving the request of data.However,the distributed architecture makes it challenging to build a secure and efficient data storage system due to the resource-constrained nature of sensor node.Besides,due to the lack of physical protection,WBAN are vulnerable to attacks when deployed in hostile environments.In order to address the challenges,we propose a novel secure and efficient data storage scheme with dynamic integrity checking in this paper.Based on the policies of multiple secret sharing,we first propose secure and efficient patient-related data storage and access scheme for UWSN.Furthermore,to dynamically check the integrity of the distributed data shares,we then propose an efficient data integrity verification scheme based on orthonormal vectors.Finally,the security and performance analysis shows that the proposed scheme is secure and practical for UWSN.
Trusted Terminal Design of Distributed Environment

Cui Yan-Li,Zhang Xing

DOI: https://doi.org/10.1109/cnmt.2009.5374540

2009-01-01

Abstract:In the distributed environment, one important security issue is how to apply further security control to the object that is released to other terminals. The appearance of trusted computing technology has provided an effective solution for this issue in the distributed environment. At the same time, through combining trusted computing technology with the strong isolation and sharing characteristic provided by virtual machine technology has further increased the security and the flexibility of distributed access control. Therefore, this paper uses trusted computing technology to improve the security of the terminal in carrying out the distributed access control, designs a trusted terminal architecture that bases on the trusted computing technology and the virtual machine technology as well as a enhanced mode that suits in distributed access control, and on this basis, analyzes the security of system design.
DESIGN OF USER MODE FILE SYSTEM BASED ON LINUX

Zhou Qiang,Li Shanping

DOI: https://doi.org/10.3969/j.issn.1000-386X.2007.10.033

2007-01-01

Abstract:A design of user mode file system based on Linux is introduced.A kernel module and a user mode daemon are adopted.The user mode file system can improve the flexibility of file system,and it is easy for redevelopment.The detailed issues about the design are presented,and the practical example and application scope are proposed.
Secure and Flexible Data Sharing for Distributed Storage with Efficient Key Management

Liang Xue,Dongxiao Liu,Cheng Huang,Xuemin (Sherman) Shen,Weihua Zhuang,Rob Sun,Bidi Ying

DOI: https://doi.org/10.1109/icc45855.2022.9838811

2022-01-01

Abstract:In this paper, we propose a Secure and Flexible Data Sharing (SFDS) scheme for distributed storage, where data owners can outsource their data to a distributed storage network and share the data with authorized users. To preserve confidentiality, all data are encrypted by data owners' secret keys before being outsourced, and fine-grained access policies are enforced on the encrypted data (ciphertexts) to achieve flexible data sharing. Furthermore, based on the ciphertext puncturable encryption and the hierarchical identity-based encryption, we design an efficient key and ciphertext update mechanism, which enables data owners to update their secret keys and the corresponding ciphertexts periodically to deal with side-channel attacks and system vulnerabilities. Update tokens are constructed to directly derive new keys and ciphertexts. Through detailed security analysis, it is demonstrated that SFDS can achieve all three essential security properties, i.e., forward security, post-compromise security, and collusion attack resistance.
FileDES: A Secure Scalable and Succinct Decentralized Encrypted Storage Network

Minghui Xu,Jiahao Zhang,Hechuan Guo,Xiuzhen Cheng,Dongxiao Yu,Qin Hu,Yijun Li,Yipu Wu

2024-03-22

Abstract:Decentralized Storage Network (DSN) is an emerging technology that challenges traditional cloud-based storage systems by consolidating storage capacities from independent providers and coordinating to provide decentralized storage and retrieval services. However, current DSNs face several challenges associated with data privacy and efficiency of the proof systems. To address these issues, we propose FileDES (\uline{D}ecentralized \uline{E}ncrypted \uline{S}torage), which incorporates three essential elements: privacy preservation, scalable storage proof, and batch verification. FileDES provides encrypted data storage while maintaining data availability, with a scalable Proof of Encrypted Storage (PoES) algorithm that is resilient to Sybil and Generation attacks. Additionally, we introduce a rollup-based batch verification approach to simultaneously verify multiple files using publicly verifiable succinct proofs. We conducted a comparative evaluation on FileDES, Filecoin, Storj and Sia under various conditions, including a WAN composed of up to 120 geographically dispersed nodes. Our protocol outperforms the others in terms of proof generation/verification efficiency, storage costs, and scalability.

Cryptography and Security
The Jigsaw secure distributed file system

Jiang Bian,Remzi Seker

DOI: https://doi.org/10.1016/j.compeleceng.2013.01.018

IF: 4.152

2013-01-01

Computers & Electrical Engineering

Abstract:The Jigsaw Distributed File System (JigDFS) aims to securely store and retrieve files on large scale networks. The design of JigDFS is driven by the privacy needs of its users. Files in JigDFS are sliced into small segments using an Information Dispersal Algorithm (IDA) and distributed onto different nodes recursively. JigDFS provides fault-tolerance against node failures while assuring confidentiality, integrity, and availability of the stored data. Layered encryption is applied to each file segment with keys produced by a hashed-key chain algorithm. Recursive IDA and layered encryption enhance users’ anonymity and provide a degree of plausible deniability. JigDFS is envisioned to be an ideal long-term storage solution for developing secure data archiving systems.
Design of Secure File Transfer System Based on Embedded Linux

SONG Qiang,QI Gui-bao,CAO Chong,SONG Zhan-wei

DOI: https://doi.org/10.3969/j.issn.1671-5896.2012.04.011

2012-01-01

Abstract:In order to transmit network datas safely among terminal devices,the design of secure file transfer system based on embedded Linux is introduced.The architecture of secure file transfer system is introduced,the way of designing system software of server and client is explained based on SSL(Secure Socket Layer)protocol,and system security is analyzed.The file between server and client is encrypted through the ssl protocol during the transportation,and the server is connected by several clients because of multi-threading.The design can help solve the problems in transmitting network datas safely and facilitate to develop network security in the mobile internet.
Distributed Secure Storage Scheme Based on Sharding Blockchain

Jin Wang,Chenchen Han,Xiaofeng Yu,Yongjun Ren,R. Simon Sherratt

DOI: https://doi.org/10.32604/cmc.2022.020648

2022-01-01

Abstract:Distributed storage can store data in multiple devices or servers to improve data security. However, in today's explosive growth of network data, traditional distributed storage scheme is faced with some severe challenges such as insufficient performance, data tampering, and data lose. A distributed storage scheme based on blockchain has been proposed to improve security and efficiency of traditional distributed storage. Under this scheme, the following improvements have been made in this paper. This paper first analyzes the problems faced by distributed storage. Then proposed to build a new distributed storage blockchain scheme with sharding blockchain. The proposed scheme realizes the partitioning of the network and nodes by means of blockchain sharding technology, which can improve the efficiency of data verification between nodes. In addition, this paper uses polynomial commitment to construct a new verifiable secret share scheme called PolyVSS. This new scheme is one of the foundations for building our improved distributed storage blockchain scheme. Compared with the previous scheme, our new scheme does not require a trusted third party and has some new features such as homomorphic and batch opening. The security of VSS can be further improved. Experimental comparisons show that the proposed scheme significantly reduces storage and communication costs.
Navigating the Landscape of Distributed File Systems: Architectures, Implementations, and Considerations

Xueting Pan,Ziqian Luo,Lisang Zhou

DOI: https://doi.org/10.62836/iaet.v2i1.157

2024-03-23

Abstract:Distributed File Systems (DFS) have emerged as sophisticated solutions for efficient file storage and management across interconnected computer nodes. The main objective of DFS is to achieve flexible, scalable, and resilient file storage management by dispersing file data across multiple interconnected computer nodes, enabling users to seamlessly access and manipulate files distributed across diverse nodes. This article provides an overview of DFS, its architecture, classification methods, design considerations, challenges, and common implementations. Common DFS implementations discussed include NFS, AFS, GFS, HDFS, and CephFS, each tailored to specific use cases and design goals. Understanding the nuances of DFS architecture, classification, and design considerations is crucial for developing efficient, stable, and secure distributed file systems to meet diverse user and application needs in modern computing environments.

Distributed, Parallel, and Cluster Computing,Hardware Architecture
An efficient blockchain-based framework for file sharing

Wanzong Peng,Tongliang Lu,Wenju Peng,Zhongpan Wang

DOI: https://doi.org/10.1038/s41598-024-69011-4

2024-08-03

Abstract:File sharing, being the foundation of the Internet, has traditionally relied on a centralized service architecture resulting in significant maintenance costs. Moreover, due to the lack of an effective file management system, instances of sensitive information going out of control and loss of confidentiality in file sharing have occurred frequently. In order to address the difficulty of tamper detection and the lack of supervision in the entire process of file transfer in the current Internet environment, this paper designs a blockchain-based system architecture for secure sharing of electronic documents. An efficient blockchain model is used in our framework, and with the help of distributed storage system and asymmetric encryption technology, file sharing can be controlled, reliable and traceable in the transfer process. Referring to existing consensus mechanisms, e.g., Delegated Proof of Stake (DPoS) and Practical Byzantine Fault Tolerance (PBFT), we propose a new consensus for efficient and secure file sharing. Our experimental results show that our framework can maintain a higher throughput than existing schemes.
Shield: A Stackable Secure Storage System for File Sharing in Public Storage

Jiwu Shu,Zhirong Shen,Wei Xue

DOI: https://doi.org/10.1016/j.jpdc.2014.06.003

IF: 4.542

2014-01-01

Journal of Parallel and Distributed Computing

Abstract:With the increasing amount of personal data stored in public storage, users are losing control of their physical data, putting their data information at risk of theft or being compromised. Traditional secure storage systems either require users to completely trust the storage provider or impose the considerable burden of managing files on file owners; such systems are inapplicable in the practical cloud environment. This paper addresses these challenging problems by proposing a new secure system architecture and implementing a stackable secure storage system named Shield, in which a proxy server is introduced to be in charge of authentication and access control. We propose a new variant of the Merkle Hash Tree to support efficient integrity checking and file content update; further, we have designed a hierarchical key organization to achieve convenient keys management and efficient permission revocation. Shield supports concurrent write access by employing a virtual linked list; it also provides secure file sharing without any modification to the underlying file systems. A series of evaluations over various real benchmarks show that Shield causes about 7%∼13% performance degradation when compared with eCryptfs but provides enhanced security for user’s data.
A Secure Cloud Storage System Based on Discrete Logarithm Problem.

Jian Zhang,Yang,Yanjiao Chen,Fei Chen

DOI: https://doi.org/10.1109/iwqos.2017.7969107

2017-01-01

Abstract:With the development of cloud storage, data owners no longer physically possess their data and thus how to ensure the integrity of their outsourced data becomes a challenging task. Several protocols have been proposed to audit cloud storage, all of which rely mainly on data block tags to check data integrity. However, their block tag constructions employ cryptographic operations, which makes them computationally complex. In this paper, we investigate a secure cloud storage protocol based on the classic discrete logarithm problem. Our protocol generates data block tags with only basic algebraic operations, which brings substantial computation savings compared with previous work. We also strictly prove that the proposed protocol is secure under a definition which captures the real-world uses of cloud storage. In order to fit more application scenarios, we extend the proposed protocol to support data dynamics by employing an index vector and third-party public auditing by using a random masking number, both of which are efficient and provably secure. At last, theoretical analysis and experimental evaluation are provided to validate the superiority of the proposed protocol.
Secure Byzantine Fault Tolerant LDAP System

Xiuqun Wang,Honglun Hou,Yueting Zhuang

DOI: https://doi.org/10.1109/IMSCCS.2006.264

2006-01-01

Abstract:LDAP is a set of protocols for accessing information directories which provides data integrity and authentication. It takes attacks on clients, Internet and benign attacks on servers into account. But the malicious attacks on servers and software errors are rarely involved. In this paper, a secure aware Byzantine fault tolerant LDAP system is proposed, which can tolerate malicious faults occurred in the servers. By using a new Byzantine-fault-tolerant algorithm, the proposed LDAP system guarantees safety and liveness properties assuming no more than f replicas are faulty while it consists of 3f+1 tightly coupled servers. For the series of optimization, the system not only provides a much higher degree of security and reliability but also is practical
HermitFS： A Secure Storage System in the Open Environment

Long Qin,Zeng Feng-ping,Wu Si-lian,Pan Ai-min

DOI: https://doi.org/10.1007/bf02828610

2008-01-01

Wuhan University Journal of Natural Sciences

Abstract:We present a secure storage system named HermitFS against many types of attacks. HermitFS uses strong cryptography algorithms and a secure protocol to secure the data from the time it is written to the time an authorized user accesses it. Our experimental results and secure analysis show that HermitFS can protect information from unauthorized access in any open environment with little penalty of data overhead and acceptable performance.
Research and Design on The Distributed Network Storage Management System

张凌,蒋东兴,刘启新,周霖,沈培华

DOI: https://doi.org/10.3969/j.issn.1002-137X.2003.06.021

2003-01-01

Computer Science

Abstract:The distributed network storage management system will effectively organize the users' storage spaces which are distributed and heterogeneous to provide the users with a piece of integrated and uniform virtual storage space. This paper summarily introduces the fundamental function and structure of the system,and mainly describes the related protocols and the method for realizing.
CorsairFS: A Distributed File System for Campus Network

刘立坤,武永卫,徐鹏志,杨广文

DOI: https://doi.org/10.3321/j.issn:0253-987x.2009.08.009

2009-01-01

Abstract:The Corsair file system(CorsairFS),a scalable distributed file system for data sharing and online storage in campus network or intranet,is proposed.Adopting scalable architecture,chunk-based storage,and register/heartbeat mechanism,both the system scalability and manageability are improved.And decoupling the data storage and metadata management,the CorsairFS facilitates the arbitrary reorganization of the namespace,and supports multiple different data view for users.The experimental results demonstrate that the system can use the storage spaces more efficiently and achieve better transfer performance,especially for the cases with large number of small files.

Distributed Secure File System Based on LDAP and SSH

Design of Secure Operating System

A Novel Secure Distributed Disk System

A scalable version control layer in p2p file system

Design and Implementation of Unified Access Control System Based on LDAP

New Secure and Efficient Distributed Data Storage Approaches for Unattended Wireless Sensor Network

Trusted Terminal Design of Distributed Environment

DESIGN OF USER MODE FILE SYSTEM BASED ON LINUX

Secure and Flexible Data Sharing for Distributed Storage with Efficient Key Management

FileDES: A Secure Scalable and Succinct Decentralized Encrypted Storage Network

The Jigsaw secure distributed file system

Design of Secure File Transfer System Based on Embedded Linux

Distributed Secure Storage Scheme Based on Sharding Blockchain

Navigating the Landscape of Distributed File Systems: Architectures, Implementations, and Considerations

An efficient blockchain-based framework for file sharing

Shield: A Stackable Secure Storage System for File Sharing in Public Storage

A Secure Cloud Storage System Based on Discrete Logarithm Problem.

Secure Byzantine Fault Tolerant LDAP System

HermitFS： A Secure Storage System in the Open Environment

Research and Design on The Distributed Network Storage Management System

CorsairFS: A Distributed File System for Campus Network