Public and Private Hybrid Distributed Cloud Storage System and Cloud Storage Method

• US 20160112455A1
• Filed: 10/21/2013
• Published: 04/21/2016
• Est. Priority Date: 06/08/2013
• Status: Active Grant

• Current Assignee: Beijing Gupanchuangshi Science and Technology Development Co., Ltd.
• Original Assignee: Beijing Gupanchuangshi Science and Technology Development Co., Ltd.
• Inventors: Zhou, Haiyan
• Granted Patent: US 9,736,186 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 65/40 Support for services or applications
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/108 characterised by resources being split in blocks or fragments
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

Public and private hybrid distributed cloud storage system and cloud storage method including an application system, a segmentation aggregation system, a public storage system and a private storage system. The application system provides original complete data and initiates an access request to the segmentation aggregation system. The segmentation aggregation system divides original complete data into data fragments and distributes to said public storage system and private storage system according to a preset storage proportion and receives the fragments returned by the public and private storage systems and aggregates them into the complete data, and transfers to said application system. The public storage system manages, authenticates and stores fragments. The private system manages, authenticates, counts, controls and stores fragments. The method, based on the cloud storage system, includes logging data and reading data. This invention solves problems of limited capacity private storage systems, inadequate bandwidth and security vulnerable public storage system.

Claims

1. A public-private hybrid distributed cloud storage system, including an application system, a segmentation aggregation system, a public storage system and a private storage system, wherein

said application system is connected with said segmentation aggregation system, for provide original complete data to said segmentation aggregation system, and initiating an access request and providing user registration information to the public storage system or the private storage system through the segmentation aggregation system;

and also connected to said private storage system, for controlling said private storage system;

said segmentation aggregation system is connected to said public storage system and private storage system, for dividing the original complete data into a number of data fragments, and distributing said data fragments to said public storage system and private storage system according to a preset storage proportion; and

connected with said application system, for receiving the data fragments returned by said public storage system and said private storage system according the access request initiated by said application system, and then aggregating said data fragments returned by said public storage system and said private storage system into the complete data, and transferring the aggregated complete data to said application system;

said public storage system is configured for managing, authenticating and storing the data fragments transmitted by said segmentation aggregation system; and

said private storage system is configured for managing, authenticating, storing, controlling and counting the data fragments transmitted by said segmentation aggregation system.

2. The cloud storage system according to claim 1, wherein said segmentation aggregation system is provided with a distribution table module, which is configured to record critical distribution information, wherein said critical distribution information includes a distribution pattern, a distribution address and a data combination rule.

3. The cloud storage system according to claim 1, wherein said cloud storage system includes one or more public storage systems, and each public storage system includes several storage units distributed in different regions.

4. The cloud storage system according to claim 1, wherein said public storage system includes a data fragment management module, a data fragment authentication module and a data fragment storage module, wherein

said data fragment management module is configured to synchronize user registration information to said data fragment authentication module, and automatically allocate management right, storage right and calling right of the data fragments, according to the user registration information;

said data fragment authentication module is configured to execute authentication on the user versus the public storage system; and

said data fragment storage module is configured to store the data fragments.

5. The cloud storage system according to claim 1, wherein said private storage system includes a data fragment management module, a data fragment authentication module, a data fragment storage module, a data fragment control module and a data fragment statistics module, wherein

said data fragment management module is configured to synchronize user registration information to said data fragment authentication module, and automatically allocate management right, storage right and calling right of the data fragments, according to the user registration information;

said data fragment authentication module is configured to execute authentication on the user versus the private storage system;

said data fragment storage module is configured to store the data fragments;

said data fragment control module is configured to feed back accessing information to a data owner, and after obtaining verification from the data owner, control data reading progress in a way of responding to a data visitor; and

said data fragment statistics module is configured to count data accessing records.

6. A cloud storage method for the cloud storage system according to claim 1, including a step of logging data and a step of reading data, wherein

the step of logging data includes:

Step A1, the application system provides the original complete data to the segmentation aggregation system;

Step A2, the segmentation aggregation system divides the original complete data into a number of data fragments and enciphers them, and then distributes said data fragments to the public storage system and the private storage system according to a preset storage proportion, and meanwhile records critical distribution information in said segmentation aggregation system;

Step A3, said public storage system manages, authenticates and stores said data fragments transferred by said segmentation aggregation system, and said private storage system manages, authenticates, stores, controls and counts the data fragments transferred by said segmentation aggregation system;

said step of reading data includes;

Step B1, the application system initiates an access request to the segmentation aggregation system, to query critical distribution information;

Step B2, the segmentation aggregation system receives the data fragments returned by the public storage system and the private storage system according to the critical distribution information, and then deciphers the data fragments and aggregates them into a complete document; and

Step B3, said segmentation aggregation system transfers the aggregated complete document to said application system.

7. The cloud storage method according to claim 6, wherein the storage proportion in Step A2 is randomly set by the application system according to a using scenario and/or using demands of the user.

8. The cloud storage method according to claim 6, wherein in Step A3, that said private storage system manages, authenticates, stores, controls and counts the data fragments transferred by said segmentation aggregation system includes:

storing data fragments and synchronizing the user registration information to the data fragment authentication module of the private storage structure, executing authentication on the user versus the private storage system, and then automatically assigning management right, storage right and calling right of the public storage system according to the user registration information, and under the circumstance that the user has passed the authentication, feeding back accessing information to the data owner through the private storage system; and

after obtaining verification from the data owner, controlling data reading progress in a way of responding to the data visitor, and being able of counting data accessing records at any time.

9. The cloud storage method according to claim 6, wherein the critical distribution information in Step A2 and Step B1 includes a distribution pattern, a distribution address, and a data combination rule.

10. The cloud storage method according to claim 6, wherein when there are two or more application systems performing the steps of logging data or reading data, the application systems negotiate with each other an access mechanism by means of an offline negotiation or transmitting a distribution table containing the public storage system or the private storage structure jointly connected, so as to ensure all the application systems are jointly connected to a precise storage agency.